Dec  7 02:31:08 tdfoods sshd\[13606\]: Invalid user Eduardo@321 from 104.248.237.238
Dec  7 02:31:08 tdfoods sshd\[13606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.237.238
Dec  7 02:31:10 tdfoods sshd\[13606\]: Failed password for invalid user Eduardo@321 from 104.248.237.238 port 53108 ssh2
Dec  7 02:37:03 tdfoods sshd\[14168\]: Invalid user maharaja from 104.248.237.238
Dec  7 02:37:03 tdfoods sshd\[14168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.237.238

Dec  7 11:45:00 legacy sshd[4236]: Failed password for root from 218.92.0.199 port 35070 ssh2
Dec  7 11:45:03 legacy sshd[4236]: Failed password for root from 218.92.0.199 port 35070 ssh2
Dec  7 11:45:04 legacy sshd[4236]: Failed password for root from 218.92.0.199 port 35070 ssh2
...

Dec  2 09:40:11 vtv3 sshd[7932]: Failed password for invalid user morreale from 195.84.49.20 port 45966 ssh2
Dec  2 09:45:47 vtv3 sshd[10968]: Failed password for root from 195.84.49.20 port 58486 ssh2
Dec  2 09:57:01 vtv3 sshd[16046]: Failed password for root from 195.84.49.20 port 55314 ssh2
Dec  2 10:02:39 vtv3 sshd[18707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.84.49.20 
Dec  2 10:02:40 vtv3 sshd[18707]: Failed password for invalid user ftpuser from 195.84.49.20 port 39622 ssh2
Dec  2 10:13:54 vtv3 sshd[24032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.84.49.20 
Dec  2 10:13:56 vtv3 sshd[24032]: Failed password for invalid user Jori from 195.84.49.20 port 36504 ssh2
Dec  2 10:19:33 vtv3 sshd[26904]: Failed password for news from 195.84.49.20 port 49058 ssh2
Dec  2 10:31:01 vtv3 sshd[455]: Failed password for root from 195.84.49.20 port 45868 ssh2
Dec  2 10:36:43 vtv3 sshd[3475]: pam_unix(sshd:auth): auth

Port Scan

FTP Brute-Force reported by Fail2Ban

Dec  6 23:51:19 tdfoods sshd\[29989\]: Invalid user nagesh from 51.77.210.216
Dec  6 23:51:19 tdfoods sshd\[29989\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.ip-51-77-210.eu
Dec  6 23:51:20 tdfoods sshd\[29989\]: Failed password for invalid user nagesh from 51.77.210.216 port 45402 ssh2
Dec  6 23:56:44 tdfoods sshd\[30517\]: Invalid user cutrufello from 51.77.210.216
Dec  6 23:56:44 tdfoods sshd\[30517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.ip-51-77-210.eu

Dec  7 07:25:03 grey postfix/smtpd\[16701\]: NOQUEUE: reject: RCPT from unknown\[23.228.73.171\]: 554 5.7.1 Service unavailable\; Client host \[23.228.73.171\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?23.228.73.171\; from=\ to=\ proto=SMTP helo=\
...

SSH bruteforce (Triggered fail2ban)

Dec  7 13:25:28 vps691689 sshd[20113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.89.10.81
Dec  7 13:25:30 vps691689 sshd[20113]: Failed password for invalid user mersey from 5.89.10.81 port 33376 ssh2
...

Dec  7 01:25:18 web1 postfix/smtpd[26375]: warning: unknown[123.233.246.52]: SASL LOGIN authentication failed: authentication failure
...

2019-12-07T12:45:39.207929abusebot-7.cloudsearch.cf sshd\[12170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.189.36  user=root

Dec  7 13:56:16 lnxweb61 sshd[16556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.216.63.46
Dec  7 13:56:16 lnxweb61 sshd[16556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.216.63.46
Dec  7 13:56:19 lnxweb61 sshd[16556]: Failed password for invalid user graciosa from 200.216.63.46 port 41272 ssh2

Dec  7 02:11:23 kapalua sshd\[8816\]: Invalid user Atte from 114.32.153.15
Dec  7 02:11:23 kapalua sshd\[8816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114-32-153-15.hinet-ip.hinet.net
Dec  7 02:11:25 kapalua sshd\[8816\]: Failed password for invalid user Atte from 114.32.153.15 port 34512 ssh2
Dec  7 02:18:17 kapalua sshd\[9515\]: Invalid user helen from 114.32.153.15
Dec  7 02:18:17 kapalua sshd\[9515\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114-32-153-15.hinet-ip.hinet.net

Dec  7 13:35:24 markkoudstaal sshd[13757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.25.60
Dec  7 13:35:26 markkoudstaal sshd[13757]: Failed password for invalid user guest from 115.159.25.60 port 53938 ssh2
Dec  7 13:43:22 markkoudstaal sshd[14729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.25.60

UTC: 2019-12-06 pkts: 2
ports(tcp): 143, 443