Sep 11 15:35:43 lukav-desktop sshd\[29972\]: Invalid user test from 104.128.69.146
Sep 11 15:35:43 lukav-desktop sshd\[29972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.128.69.146
Sep 11 15:35:46 lukav-desktop sshd\[29972\]: Failed password for invalid user test from 104.128.69.146 port 57325 ssh2
Sep 11 15:41:57 lukav-desktop sshd\[30093\]: Invalid user postgres from 104.128.69.146
Sep 11 15:41:57 lukav-desktop sshd\[30093\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.128.69.146

$f2bV_matches

Lines containing failures of 180.126.50.42
Sep 11 07:37:31 shared07 sshd[2773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.126.50.42  user=r.r
Sep 11 07:37:33 shared07 sshd[2773]: Failed password for r.r from 180.126.50.42 port 13564 ssh2
Sep 11 07:37:36 shared07 sshd[2773]: Failed password for r.r from 180.126.50.42 port 13564 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=180.126.50.42

Sep 11 14:04:04 vps01 sshd[28636]: Failed password for root from 54.39.138.251 port 38132 ssh2

Sep 11 07:45:09 ny01 sshd[7913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.235.61
Sep 11 07:45:11 ny01 sshd[7913]: Failed password for invalid user mcserver from 159.89.235.61 port 36944 ssh2
Sep 11 07:51:23 ny01 sshd[9021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.235.61

Unauthorised access (Sep 11) SRC=222.184.131.91 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=59580 TCP DPT=23 WINDOW=33109 SYN

2019-09-11T14:17:18.702672ns1.unifynetsol.net postfix/smtpd\[1523\]: warning: unknown\[185.36.81.250\]: SASL LOGIN authentication failed: authentication failure
2019-09-11T15:11:07.436991ns1.unifynetsol.net postfix/smtpd\[3958\]: warning: unknown\[185.36.81.250\]: SASL LOGIN authentication failed: authentication failure
2019-09-11T16:06:05.958617ns1.unifynetsol.net postfix/smtpd\[6654\]: warning: unknown\[185.36.81.250\]: SASL LOGIN authentication failed: authentication failure
2019-09-11T17:00:13.336672ns1.unifynetsol.net postfix/smtpd\[8472\]: warning: unknown\[185.36.81.250\]: SASL LOGIN authentication failed: authentication failure
2019-09-11T17:55:30.102507ns1.unifynetsol.net postfix/smtpd\[9865\]: warning: unknown\[185.36.81.250\]: SASL LOGIN authentication failed: authentication failure

Sep 11 06:52:05 aat-srv002 sshd[13031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.159.8
Sep 11 06:52:08 aat-srv002 sshd[13031]: Failed password for invalid user rtest from 128.199.159.8 port 41606 ssh2
Sep 11 06:58:22 aat-srv002 sshd[13222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.159.8
Sep 11 06:58:24 aat-srv002 sshd[13222]: Failed password for invalid user admin3 from 128.199.159.8 port 44596 ssh2
...

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-11 06:51:29,069 INFO [amun_request_handler] PortScan Detected on Port: 445 (183.4.43.162)

Sep 11 12:02:41 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=61.37.150.6, lip=10.140.194.78, TLS, session=<18zwy0WSOgA9JZYG>
Sep 11 12:02:54 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 10 secs): user=, method=PLAIN, rip=61.37.150.6, lip=10.140.194.78, TLS: Disconnected, session=
Sep 11 12:03:05 flomail dovecot: imap-login: Disconnected (auth failed, 1 attempts in 13 secs): user=, method=PLAIN, rip=61.37.150.6, lip=10.140.194.78, TLS, session=

Sep 10 23:49:37 web9 sshd\[30471\]: Invalid user hduser from 37.187.248.10
Sep 10 23:49:37 web9 sshd\[30471\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.248.10
Sep 10 23:49:39 web9 sshd\[30471\]: Failed password for invalid user hduser from 37.187.248.10 port 30496 ssh2
Sep 10 23:55:23 web9 sshd\[31696\]: Invalid user wwwadmin from 37.187.248.10
Sep 10 23:55:23 web9 sshd\[31696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.248.10

Sep 11 14:13:42 srv206 sshd[26036]: Invalid user sinusbot from 159.65.92.3
Sep 11 14:13:42 srv206 sshd[26036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.92.3
Sep 11 14:13:42 srv206 sshd[26036]: Invalid user sinusbot from 159.65.92.3
Sep 11 14:13:44 srv206 sshd[26036]: Failed password for invalid user sinusbot from 159.65.92.3 port 59942 ssh2
...

IN - 1H : (57)  Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : IN 
 NAME ASN : ASN18101 
 
 IP : 115.248.253.137 
 
 CIDR : 115.248.252.0/22 
 
 PREFIX COUNT : 1082 
 
 UNIQUE IP COUNT : 518912 
 
 
 WYKRYTE ATAKI Z ASN18101 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery 
  https://help-dysk.pl

Sep 11 14:18:38 vmanager6029 sshd\[13578\]: Invalid user odoo from 132.232.43.115 port 41890
Sep 11 14:18:38 vmanager6029 sshd\[13578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.43.115
Sep 11 14:18:40 vmanager6029 sshd\[13578\]: Failed password for invalid user odoo from 132.232.43.115 port 41890 ssh2

Sep 11 13:04:51 herz-der-gamer sshd[14074]: Invalid user web from 5.148.3.212 port 47792
Sep 11 13:04:51 herz-der-gamer sshd[14074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.148.3.212
Sep 11 13:04:51 herz-der-gamer sshd[14074]: Invalid user web from 5.148.3.212 port 47792
Sep 11 13:04:54 herz-der-gamer sshd[14074]: Failed password for invalid user web from 5.148.3.212 port 47792 ssh2
...