firewall-block, port(s): 9001/tcp

Unauthorized connection attempt from IP address 177.85.7.35 on Port 445(SMB)

Dec  5 09:44:33 sachi sshd\[3073\]: Invalid user nawawi from 193.112.72.180
Dec  5 09:44:33 sachi sshd\[3073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.72.180
Dec  5 09:44:34 sachi sshd\[3073\]: Failed password for invalid user nawawi from 193.112.72.180 port 60922 ssh2
Dec  5 09:49:55 sachi sshd\[3627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.72.180  user=root
Dec  5 09:49:57 sachi sshd\[3627\]: Failed password for root from 193.112.72.180 port 34912 ssh2

Rude login attack (8 tries in 1d)

Dec  5 11:24:07 sshd: Connection from 223.112.69.58 port 55044
Dec  5 11:24:16 sshd: Received disconnect from 223.112.69.58: 11: Bye Bye [preauth]

Dec  5 18:47:02 pi sshd\[24884\]: Invalid user 123456789 from 118.24.210.86 port 39780
Dec  5 18:47:02 pi sshd\[24884\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.210.86
Dec  5 18:47:05 pi sshd\[24884\]: Failed password for invalid user 123456789 from 118.24.210.86 port 39780 ssh2
Dec  5 18:53:26 pi sshd\[25170\]: Invalid user testpw from 118.24.210.86 port 40087
Dec  5 18:53:26 pi sshd\[25170\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.210.86
...

Unauthorized connection attempt from IP address 89.218.159.162 on Port 445(SMB)

Dec  5 16:00:42 grey postfix/smtpd\[5731\]: NOQUEUE: reject: RCPT from unknown\[180.124.236.112\]: 554 5.7.1 Service unavailable\; Client host \[180.124.236.112\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[180.124.236.112\]\; from=\ to=\ proto=ESMTP helo=\
...

Dec  5 20:50:39 minden010 sshd[4171]: Failed password for root from 222.186.180.17 port 46270 ssh2
Dec  5 20:50:41 minden010 sshd[4171]: Failed password for root from 222.186.180.17 port 46270 ssh2
Dec  5 20:50:45 minden010 sshd[4171]: Failed password for root from 222.186.180.17 port 46270 ssh2
Dec  5 20:50:48 minden010 sshd[4171]: Failed password for root from 222.186.180.17 port 46270 ssh2
...

Dec  5 19:45:52 h2812830 sshd[30194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.232.119  user=root
Dec  5 19:45:54 h2812830 sshd[30194]: Failed password for root from 94.177.232.119 port 37080 ssh2
Dec  5 19:55:43 h2812830 sshd[30586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.232.119  user=rpc
Dec  5 19:55:45 h2812830 sshd[30586]: Failed password for rpc from 94.177.232.119 port 54194 ssh2
Dec  5 20:01:16 h2812830 sshd[30875]: Invalid user nagios from 94.177.232.119 port 36138
...

Dec  5 20:12:45 MK-Soft-Root2 sshd[5848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.222.56.80 
Dec  5 20:12:46 MK-Soft-Root2 sshd[5848]: Failed password for invalid user akiba from 61.222.56.80 port 36992 ssh2
...

firewall-block, port(s): 445/tcp

$f2bV_matches

2019-12-05T19:16:41.153183shield sshd\[17774\]: Invalid user leasau from 24.4.128.213 port 41504
2019-12-05T19:16:41.157434shield sshd\[17774\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-24-4-128-213.hsd1.ca.comcast.net
2019-12-05T19:16:43.214453shield sshd\[17774\]: Failed password for invalid user leasau from 24.4.128.213 port 41504 ssh2
2019-12-05T19:22:37.853772shield sshd\[18959\]: Invalid user ikey from 24.4.128.213 port 50020
2019-12-05T19:22:37.858905shield sshd\[18959\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-24-4-128-213.hsd1.ca.comcast.net

Dec  5 15:18:26 firewall sshd[4283]: Invalid user ann1 from 104.236.226.93
Dec  5 15:18:27 firewall sshd[4283]: Failed password for invalid user ann1 from 104.236.226.93 port 58564 ssh2
Dec  5 15:24:07 firewall sshd[4480]: Invalid user stauf from 104.236.226.93
...