Feb 20 18:33:36 marvibiene sshd[4664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212  user=root
Feb 20 18:33:38 marvibiene sshd[4664]: Failed password for root from 218.92.0.212 port 18685 ssh2
Feb 20 18:33:41 marvibiene sshd[4664]: Failed password for root from 218.92.0.212 port 18685 ssh2
Feb 20 18:33:36 marvibiene sshd[4664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.212  user=root
Feb 20 18:33:38 marvibiene sshd[4664]: Failed password for root from 218.92.0.212 port 18685 ssh2
Feb 20 18:33:41 marvibiene sshd[4664]: Failed password for root from 218.92.0.212 port 18685 ssh2
...

suspicious action Thu, 20 Feb 2020 10:25:08 -0300

Feb 20 14:18:41 twattle sshd[22040]: reveeclipse mapping checking getaddrin=
fo for 191-211-120-7.user.vivozap.com.br [191.211.120.7] failed - POSSI=
BLE BREAK-IN ATTEMPT!
Feb 20 14:18:42 twattle sshd[22040]: Received disconnect from 191.211.1=
20.7: 11: Bye Bye [preauth]
Feb 20 14:18:43 twattle sshd[22042]: reveeclipse mapping checking getaddrin=
fo for 191-211-120-7.user.vivozap.com.br [191.211.120.7] failed - POSSI=
BLE BREAK-IN ATTEMPT!
Feb 20 14:18:44 twattle sshd[22042]: Received disconnect from 191.211.1=
20.7: 11: Bye Bye [preauth]
Feb 20 14:18:46 twattle sshd[22044]: reveeclipse mapping checking getaddrin=
fo for 191-211-120-7.user.vivozap.com.br [191.211.120.7] failed - POSSI=
BLE BREAK-IN ATTEMPT!
Feb 20 14:18:46 twattle sshd[22044]: Invalid user ubnt from 191.211.120=
.7
Feb 20 14:18:46 twattle sshd[22044]: Received disconnect from 191.211.1=
20.7: 11: Bye Bye [preauth]
Feb 20 14:18:48 twattle sshd[22046]: reveeclipse mapping checking getaddrin=
fo for 191-2........
-------------------------------

Unauthorized access detected from black listed ip!

Feb 20 18:43:14 vps647732 sshd[19038]: Failed password for root from 45.148.10.92 port 58750 ssh2
...

20.02.2020 18:08:51 SSH access blocked by firewall

Unauthorized connection attempt from IP address 49.146.2.41 on Port 445(SMB)

Feb 20 15:18:38 sd-53420 sshd\[30776\]: Invalid user cpaneleximscanner from 182.61.3.119
Feb 20 15:18:38 sd-53420 sshd\[30776\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.3.119
Feb 20 15:18:41 sd-53420 sshd\[30776\]: Failed password for invalid user cpaneleximscanner from 182.61.3.119 port 37029 ssh2
Feb 20 15:21:37 sd-53420 sshd\[31088\]: Invalid user ela from 182.61.3.119
Feb 20 15:21:37 sd-53420 sshd\[31088\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.3.119
...

Feb 20 07:41:52 php1 sshd\[3928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.164.143.82  user=gnats
Feb 20 07:41:54 php1 sshd\[3928\]: Failed password for gnats from 46.164.143.82 port 37896 ssh2
Feb 20 07:44:48 php1 sshd\[4195\]: Invalid user at from 46.164.143.82
Feb 20 07:44:48 php1 sshd\[4195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.164.143.82
Feb 20 07:44:50 php1 sshd\[4195\]: Failed password for invalid user at from 46.164.143.82 port 37940 ssh2

Feb 20 14:24:30 grey postfix/smtpd\[19208\]: NOQUEUE: reject: RCPT from o4.31pqt.s2shared.sendgrid.net\[167.89.55.65\]: 554 5.7.1 Service unavailable\; Client host \[167.89.55.65\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?167.89.55.65\; from=\ to=\ proto=ESMTP helo=\
...

Feb 20 11:54:30 ny01 sshd[10210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.9.57
Feb 20 11:54:32 ny01 sshd[10210]: Failed password for invalid user administrator from 80.211.9.57 port 44246 ssh2
Feb 20 11:56:29 ny01 sshd[11329]: Failed password for gnats from 80.211.9.57 port 34096 ssh2

Feb 21 00:10:58 areeb-Workstation sshd[17433]: Failed password for root from 222.186.180.147 port 54546 ssh2
Feb 21 00:11:02 areeb-Workstation sshd[17433]: Failed password for root from 222.186.180.147 port 54546 ssh2
...

From CCTV User Interface Log
...::ffff:68.115.188.98 - - [20/Feb/2020:08:24:14 +0000] "GET / HTTP/1.1" 200 960
...

ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic

Feb 20 12:33:23 firewall sshd[22083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.32.47.97  user=daemon
Feb 20 12:33:25 firewall sshd[22083]: Failed password for daemon from 178.32.47.97 port 39978 ssh2
Feb 20 12:35:49 firewall sshd[22137]: Invalid user cpanellogin from 178.32.47.97
...