201.80.1.100 - - [18/Oct/2019:15:47:27 -0400] "GET /?page=products&action=../../../../../etc/passwd%00&manufacturerID=61&productID=4701-RIM&linkID=16812 HTTP/1.1" 200 17462 "https://exitdevice.com/?page=products&action=../../../../../etc/passwd%00&manufacturerID=61&productID=4701-RIM&linkID=16812" "Mozilla/5.0 (Windows NT 10.0; WOW64; Rv:50.0) Gecko/20100101 Firefox/50.0"
...

Aug 18 13:16:44 h2646465 sshd[21896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.92  user=root
Aug 18 13:16:46 h2646465 sshd[21896]: Failed password for root from 201.80.108.92 port 40510 ssh2
Aug 18 13:58:08 h2646465 sshd[26916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.92  user=root
Aug 18 13:58:10 h2646465 sshd[26916]: Failed password for root from 201.80.108.92 port 42458 ssh2
Aug 18 14:10:53 h2646465 sshd[29225]: Invalid user test from 201.80.108.92
Aug 18 14:10:53 h2646465 sshd[29225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.92
Aug 18 14:10:53 h2646465 sshd[29225]: Invalid user test from 201.80.108.92
Aug 18 14:10:56 h2646465 sshd[29225]: Failed password for invalid user test from 201.80.108.92 port 49355 ssh2
Aug 18 14:29:44 h2646465 sshd[31237]: Invalid user czt from 201.80.108.92
...

$f2bV_matches

Lines containing failures of 201.80.108.92
Aug  2 21:24:40 MAKserver05 sshd[4632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.92  user=r.r
Aug  2 21:24:42 MAKserver05 sshd[4632]: Failed password for r.r from 201.80.108.92 port 60976 ssh2
Aug  2 21:24:44 MAKserver05 sshd[4632]: Received disconnect from 201.80.108.92 port 60976:11: Bye Bye [preauth]
Aug  2 21:24:44 MAKserver05 sshd[4632]: Disconnected from authenticating user r.r 201.80.108.92 port 60976 [preauth]
Aug  2 21:58:16 MAKserver05 sshd[6793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.92  user=r.r
Aug  2 21:58:18 MAKserver05 sshd[6793]: Failed password for r.r from 201.80.108.92 port 47852 ssh2
Aug  2 21:58:18 MAKserver05 sshd[6793]: Received disconnect from 201.80.108.92 port 47852:11: Bye Bye [preauth]
Aug  2 21:58:18 MAKserver05 sshd[6793]: Disconnected from authenticating user r.r 201.80.108.92 por........
------------------------------

Unauthorized connection attempt from IP address 201.80.1.217 on Port 445(SMB)

Feb 25 01:50:10 localhost sshd\[24816\]: Invalid user es from 201.80.108.234 port 30942
Feb 25 01:50:10 localhost sshd\[24816\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.234
Feb 25 01:50:12 localhost sshd\[24816\]: Failed password for invalid user es from 201.80.108.234 port 30942 ssh2

Feb 19 01:37:21 XXX sshd[10155]: Invalid user fzs from 201.80.112.188 port 43772

$f2bV_matches

Feb  5 16:07:35 hpm sshd\[7520\]: Invalid user kjc from 201.80.108.35
Feb  5 16:07:35 hpm sshd\[7520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.35
Feb  5 16:07:37 hpm sshd\[7520\]: Failed password for invalid user kjc from 201.80.108.35 port 32039 ssh2
Feb  5 16:11:53 hpm sshd\[8201\]: Invalid user vnp from 201.80.108.35
Feb  5 16:11:53 hpm sshd\[8201\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.35

2019-12-18T15:35:49.015341host3.slimhost.com.ua sshd[1763468]: Invalid user jfujita from 201.80.108.83 port 31824
2019-12-18T15:35:49.020107host3.slimhost.com.ua sshd[1763468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.83
2019-12-18T15:35:49.015341host3.slimhost.com.ua sshd[1763468]: Invalid user jfujita from 201.80.108.83 port 31824
2019-12-18T15:35:51.044932host3.slimhost.com.ua sshd[1763468]: Failed password for invalid user jfujita from 201.80.108.83 port 31824 ssh2
2019-12-18T15:45:34.490607host3.slimhost.com.ua sshd[1766477]: Invalid user tsuda from 201.80.108.83 port 31922
2019-12-18T15:45:34.494912host3.slimhost.com.ua sshd[1766477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.83
2019-12-18T15:45:34.490607host3.slimhost.com.ua sshd[1766477]: Invalid user tsuda from 201.80.108.83 port 31922
2019-12-18T15:45:35.831911host3.slimhost.com.ua sshd[1766477]: Failed password 
...

Invalid user admin from 201.80.108.83 port 30838
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.83
Failed password for invalid user admin from 201.80.108.83 port 30838 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.83  user=root
Failed password for root from 201.80.108.83 port 31477 ssh2

Dec 15 21:32:02 server sshd\[27348\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.83  user=root
Dec 15 21:32:04 server sshd\[27348\]: Failed password for root from 201.80.108.83 port 32163 ssh2
Dec 15 21:39:50 server sshd\[29489\]: Invalid user search from 201.80.108.83
Dec 15 21:39:50 server sshd\[29489\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.83 
Dec 15 21:39:52 server sshd\[29489\]: Failed password for invalid user search from 201.80.108.83 port 31164 ssh2
...

Dec  9 22:45:32 legacy sshd[31968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.83
Dec  9 22:45:34 legacy sshd[31968]: Failed password for invalid user elconix from 201.80.108.83 port 32291 ssh2
Dec  9 22:52:37 legacy sshd[32239]: Failed password for root from 201.80.108.83 port 32206 ssh2
...

Dec  8 07:23:12 OPSO sshd\[30454\]: Invalid user host from 201.80.108.83 port 31102
Dec  8 07:23:12 OPSO sshd\[30454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.83
Dec  8 07:23:13 OPSO sshd\[30454\]: Failed password for invalid user host from 201.80.108.83 port 31102 ssh2
Dec  8 07:30:42 OPSO sshd\[32096\]: Invalid user ydadc from 201.80.108.83 port 30843
Dec  8 07:30:42 OPSO sshd\[32096\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.83

Dec  8 07:01:32 OPSO sshd\[25304\]: Invalid user smmsp from 201.80.108.83 port 31701
Dec  8 07:01:32 OPSO sshd\[25304\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.83
Dec  8 07:01:34 OPSO sshd\[25304\]: Failed password for invalid user smmsp from 201.80.108.83 port 31701 ssh2
Dec  8 07:08:55 OPSO sshd\[26883\]: Invalid user kolnes from 201.80.108.83 port 31493
Dec  8 07:08:55 OPSO sshd\[26883\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.80.108.83

1574922435 - 11/28/2019 07:27:15 Host: 201.80.108.83/201.80.108.83 Port: 22 TCP Blocked

Sep 19 22:26:46 IngegnereFirenze sshd[30261]: User root from 159.203.188.175 not allowed because not listed in AllowUsers
...

Sep 20 00:11:48 jane sshd[29085]: Failed password for root from 218.92.0.158 port 29223 ssh2
Sep 20 00:11:53 jane sshd[29085]: Failed password for root from 218.92.0.158 port 29223 ssh2
...

Invalid user sebastien from 211.112.18.37 port 52902

Sep 14 20:07:08 www sshd[9949]: reveeclipse mapping checking getaddrinfo for dynamic-ip-adsl.viettel.vn [171.250.169.227] failed - POSSIBLE BREAK-IN ATTEMPT!
Sep 14 20:07:08 www sshd[9949]: Invalid user admin from 171.250.169.227
Sep 14 20:07:09 www sshd[9949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.250.169.227 
Sep 14 20:07:11 www sshd[9949]: Failed password for invalid user admin from 171.250.169.227 port 48660 ssh2
Sep 14 20:07:12 www sshd[9949]: Connection closed by 171.250.169.227 [preauth]
Sep 17 08:00:27 www sshd[4818]: Address 171.250.169.227 maps to dynamic-ip-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep 17 08:00:28 www sshd[4818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.250.169.227  user=r.r
Sep 17 08:00:29 www sshd[4818]: Failed password for r.r from 171.250.169.227 port 41532 ssh2
Sep 17 08:00:30 www sshd[481........
-------------------------------

Brute-force attempt banned

Sep 19 20:36:51 ip106 sshd[25744]: Failed password for root from 217.111.239.37 port 56272 ssh2
...

Invalid user suser from 174.138.42.143 port 53068

Unauthorized connection attempt from IP address 85.116.124.27 on Port 445(SMB)

Email rejected due to spam filtering

[2020-09-19 18:04:26] NOTICE[1239][C-000055a3] chan_sip.c: Call from '' (103.145.12.227:58137) to extension '01146812410910' rejected because extension not found in context 'public'.
[2020-09-19 18:04:26] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-19T18:04:26.594-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="01146812410910",SessionID="0x7f4d48488fa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.227/58137",ACLName="no_extension_match"
[2020-09-19 18:06:09] NOTICE[1239][C-000055a5] chan_sip.c: Call from '' (103.145.12.227:52418) to extension '901146812410910' rejected because extension not found in context 'public'.
[2020-09-19 18:06:09] SECURITY[1264] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-19T18:06:09.567-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="901146812410910",SessionID="0x7f4d48488fa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP
...

 TCP (SYN) 39.86.61.57:36130 -> port 23, len 44

Sep 19 10:32:50 sip sshd[11357]: Failed password for root from 221.127.42.228 port 39028 ssh2
Sep 19 19:01:25 sip sshd[17380]: Failed password for root from 221.127.42.228 port 57651 ssh2

2020-09-19T16:40:49.047749linuxbox-skyline sshd[28838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.41.68  user=root
2020-09-19T16:40:50.726514linuxbox-skyline sshd[28838]: Failed password for root from 123.206.41.68 port 36734 ssh2
...

Unauthorized connection attempt from IP address 185.134.232.118 on Port 445(SMB)

145.239.211.242 - - [19/Sep/2020:23:10:49 +0100] "POST /wp-login.php HTTP/1.1" 200 2191 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
145.239.211.242 - - [19/Sep/2020:23:10:50 +0100] "POST /wp-login.php HTTP/1.1" 200 2173 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
145.239.211.242 - - [19/Sep/2020:23:10:50 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...