2020-01-01T07:23:28.574607shield sshd\[29507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.86.123.242  user=nobody
2020-01-01T07:23:30.699835shield sshd\[29507\]: Failed password for nobody from 218.86.123.242 port 54407 ssh2
2020-01-01T07:27:02.595819shield sshd\[31165\]: Invalid user test from 218.86.123.242 port 14241
2020-01-01T07:27:02.600711shield sshd\[31165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.86.123.242
2020-01-01T07:27:04.103771shield sshd\[31165\]: Failed password for invalid user test from 218.86.123.242 port 14241 ssh2

Jan  1 07:28:46 icecube postfix/smtpd[86440]: NOQUEUE: reject: RCPT from FAST-INTERNET-103-206-254-242.solnet.net.id[103.206.254.242]: 554 5.7.1 Service unavailable; Client host [103.206.254.242] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBL422967 / https://www.spamhaus.org/query/ip/103.206.254.242 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=

2020-01-01T07:41:44.942488abusebot-6.cloudsearch.cf sshd[7753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238  user=root
2020-01-01T07:41:46.862064abusebot-6.cloudsearch.cf sshd[7753]: Failed password for root from 222.186.173.238 port 55712 ssh2
2020-01-01T07:41:50.567524abusebot-6.cloudsearch.cf sshd[7753]: Failed password for root from 222.186.173.238 port 55712 ssh2
2020-01-01T07:41:44.942488abusebot-6.cloudsearch.cf sshd[7753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.238  user=root
2020-01-01T07:41:46.862064abusebot-6.cloudsearch.cf sshd[7753]: Failed password for root from 222.186.173.238 port 55712 ssh2
2020-01-01T07:41:50.567524abusebot-6.cloudsearch.cf sshd[7753]: Failed password for root from 222.186.173.238 port 55712 ssh2
2020-01-01T07:41:44.942488abusebot-6.cloudsearch.cf sshd[7753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh
...

Unauthorized IMAP connection attempt

165.231.248.106 - - [01/Jan/2020:07:28:52 +0100] "GET /awstats.pl?lang=en&output=main HTTP/1.0" 404 280 "https://oraux.pnzone.net/" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/24.0.1309.0 Safari/537.17"

Jan  1 07:27:49 ns381471 sshd[1196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.192.152.202
Jan  1 07:27:52 ns381471 sshd[1196]: Failed password for invalid user mdnsd from 201.192.152.202 port 53014 ssh2

MultiHost/MultiPort Probe, Scan, Hack -

(From RosalieBuchanan129@gmail.com) Hello.

I'm an expert in search engine optimization and can have your website dominate in the rankings of major search engines like Google. Are you getting a good amount of traffic and potential leads from your website? If not, I can help you achieve that and more. 

It's been proven that search engine optimization plays a major part in creating the success of the best-known websites to this day. This can be a great opportunity to have your site promoted and taken care of by professionals. I'd like to accomplish the same for you and take you on as a client. I'm a freelance professional and my fees are affordable for just about anyone. 

I'll show you the data about your website's potential and get into details if you are interested. Please write back with your contact info and your preferred time for a free consultation over the phone. Talk to you soon! 

Sincerely,
Rosalie Buchanan

Jan  1 07:27:45 debian-2gb-nbg1-2 kernel: \[119398.048178\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=165.227.6.12 DST=195.201.40.59 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=42811 DF PROTO=TCP SPT=54034 DPT=5432 WINDOW=29200 RES=0x00 SYN URGP=0

Jan  1 08:53:56 debian-2gb-nbg1-2 kernel: \[124569.245267\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.175.93.18 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=45227 PROTO=TCP SPT=51393 DPT=43489 WINDOW=1024 RES=0x00 SYN URGP=0

Automatic report - Banned IP Access

Jan  1 08:04:33 mout sshd[32627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.52.60  user=root
Jan  1 08:04:35 mout sshd[32627]: Failed password for root from 132.232.52.60 port 48346 ssh2

Jan  1 07:21:49 pl3server sshd[29293]: Address 14.248.214.194 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jan  1 07:21:49 pl3server sshd[29293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.248.214.194  user=r.r
Jan  1 07:21:51 pl3server sshd[29293]: Failed password for r.r from 14.248.214.194 port 51200 ssh2
Jan  1 07:21:51 pl3server sshd[29293]: Connection closed by 14.248.214.194 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=14.248.214.194

Jan  1 13:01:19 gw1 sshd[21862]: Failed password for root from 222.186.173.154 port 44394 ssh2
Jan  1 13:01:32 gw1 sshd[21862]: error: maximum authentication attempts exceeded for root from 222.186.173.154 port 44394 ssh2 [preauth]
...

2020-01-01 04:58:20,205 fail2ban.actions        [2870]: NOTICE  [sshd] Ban 182.71.188.10
2020-01-01 05:34:41,885 fail2ban.actions        [2870]: NOTICE  [sshd] Ban 182.71.188.10
2020-01-01 06:11:53,634 fail2ban.actions        [2870]: NOTICE  [sshd] Ban 182.71.188.10
2020-01-01 06:49:33,229 fail2ban.actions        [2870]: NOTICE  [sshd] Ban 182.71.188.10
2020-01-01 07:28:04,857 fail2ban.actions        [2870]: NOTICE  [sshd] Ban 182.71.188.10
...