Jun 12 13:38:03 ws26vmsma01 sshd[96167]: Failed password for root from 119.252.143.6 port 35869 ssh2
...

Jun 12 02:04:17 web1 sshd\[6042\]: Invalid user fyw from 183.109.79.253
Jun 12 02:04:17 web1 sshd\[6042\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.109.79.253
Jun 12 02:04:19 web1 sshd\[6042\]: Failed password for invalid user fyw from 183.109.79.253 port 63010 ssh2
Jun 12 02:06:56 web1 sshd\[6403\]: Invalid user xoadmin from 183.109.79.253
Jun 12 02:06:56 web1 sshd\[6403\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.109.79.253

Jun 12 15:08:14 ovpn sshd\[2991\]: Invalid user nivinform from 222.180.162.8
Jun 12 15:08:14 ovpn sshd\[2991\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.180.162.8
Jun 12 15:08:16 ovpn sshd\[2991\]: Failed password for invalid user nivinform from 222.180.162.8 port 33892 ssh2
Jun 12 15:15:04 ovpn sshd\[4635\]: Invalid user jhartley from 222.180.162.8
Jun 12 15:15:04 ovpn sshd\[4635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.180.162.8

Jun 12 09:20:20 ny01 sshd[488]: Failed password for root from 59.41.93.166 port 9389 ssh2
Jun 12 09:25:01 ny01 sshd[1153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.41.93.166
Jun 12 09:25:03 ny01 sshd[1153]: Failed password for invalid user camilo from 59.41.93.166 port 11557 ssh2

Received: from 76V6cL (kmsevernii.ru [193.124.16.29])
From: =?UTF-8?B?U29uZw==?= 
Subject: =?utf-8?B?VmHFoWUgdsO9cGxhdGEgamUgMSAzNQ==?= =?utf-8?B?OCwwMCBFVVI=?=
MIME-Version: 1.0
Date: Fri, 12 Jun 2020 00:20:09 +0300
X-Priority: 3 (Normal)
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: base64
Máte právo na transakci ve výši 1 358,00 EUR detaily https://rissowv.blogspot.com

Here more information about 45.227.254.18 
info: [Panama] 51852 Private Layer INC 
rDNS: hostby.xwinnet.biz 
Connected: 12 servere(s) 
Reason: ssh 
Portscan/portflood
Ports: 20,22,23,81,110,135,143,993 
Services: imaps,ftp-data,pop3,telnet,loc-srv,hosts2-ns,ssh,imap 
servere: Europe/Moscow (UTC+3) 
Found at blocklist: zen.spamhaus.org, spfbl.net, abuseIPDB.com
myIP:89.179.244.250 
 
[2020-06-10 02:23:10] (tcp) myIP:993 <- 45.227.254.18:48363
[2020-06-10 04:05:15] (tcp) myIP:20 <- 45.227.254.18:48363
[2020-06-10 10:56:14] (tcp) myIP:110 <- 45.227.254.18:52766
[2020-06-10 15:39:39] (tcp) myIP:993 <- 45.227.254.18:52766
[2020-06-10 15:49:31] (tcp) myIP:20 <- 45.227.254.18:52766
[2020-06-10 16:13:00] (tcp) myIP:23 <- 45.227.254.18:52766
[2020-06-10 17:48:21] (tcp) myIP:135 <- 45.227.254.18:52766
[2020-06-10 20:02:25] (tcp) myIP:81 <- 45.227.254.18:52766
[2020-06-10 20:08:07] (tcp) myIP:22 <- 45.227.254.18:52766
[2020-06-10 21:26:56] (tcp) myIP:22 <- 45.227.254.18:52766
[2........
---------------------------------

Jun 12 15:37:20 PorscheCustomer sshd[17904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.158.30
Jun 12 15:37:22 PorscheCustomer sshd[17904]: Failed password for invalid user sunny123 from 159.65.158.30 port 43900 ssh2
Jun 12 15:38:19 PorscheCustomer sshd[17921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.158.30
...

Brute force attempt

Jun 12 16:09:38 vps sshd[29431]: Failed password for root from 222.186.173.183 port 29946 ssh2
Jun 12 16:09:41 vps sshd[29431]: Failed password for root from 222.186.173.183 port 29946 ssh2
Jun 12 16:09:45 vps sshd[29431]: Failed password for root from 222.186.173.183 port 29946 ssh2
Jun 12 16:09:48 vps sshd[29431]: Failed password for root from 222.186.173.183 port 29946 ssh2
Jun 12 16:09:51 vps sshd[29431]: Failed password for root from 222.186.173.183 port 29946 ssh2
...

SSH Brute-Forcing (server1)

2020-06-12T15:52:18.621379rocketchat.forhosting.nl sshd[26390]: Failed password for root from 222.186.175.202 port 26538 ssh2
2020-06-12T15:52:24.074288rocketchat.forhosting.nl sshd[26390]: Failed password for root from 222.186.175.202 port 26538 ssh2
2020-06-12T15:52:26.781747rocketchat.forhosting.nl sshd[26390]: Failed password for root from 222.186.175.202 port 26538 ssh2
...

Jun 12 16:10:07 santamaria sshd\[25415\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.147.154  user=root
Jun 12 16:10:09 santamaria sshd\[25415\]: Failed password for root from 49.234.147.154 port 56824 ssh2
Jun 12 16:14:31 santamaria sshd\[25477\]: Invalid user xiaoping from 49.234.147.154
Jun 12 16:14:31 santamaria sshd\[25477\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.147.154
...

Jun 12 12:05:13 rush sshd[2116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.231.11.182
Jun 12 12:05:14 rush sshd[2116]: Failed password for invalid user virl from 180.231.11.182 port 47744 ssh2
Jun 12 12:07:40 rush sshd[2163]: Failed password for root from 180.231.11.182 port 44950 ssh2
...

port scan and connect, tcp 23 (telnet)

Jun 12 08:23:38 mail sshd\[42156\]: Invalid user test1 from 103.200.23.81
Jun 12 08:23:38 mail sshd\[42156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.200.23.81
...