Jul  8 15:26:44 server sshd\[109716\]: Invalid user one from 170.0.60.70
Jul  8 15:26:44 server sshd\[109716\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.0.60.70
Jul  8 15:26:47 server sshd\[109716\]: Failed password for invalid user one from 170.0.60.70 port 50835 ssh2
...

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/103.130.141.113/ 
 KH - 1H : (8)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : KH 
 NAME ASN : ASN138340 
 
 IP : 103.130.141.113 
 
 CIDR : 103.130.141.0/24 
 
 PREFIX COUNT : 4 
 
 UNIQUE IP COUNT : 1024 
 
 
 WYKRYTE ATAKI Z ASN138340 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 2 
 24H - 2 
 
 DateTime : 2019-10-09 05:56:45 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

Oct  9 06:52:43 sso sshd[2383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.75.174
Oct  9 06:52:45 sso sshd[2383]: Failed password for invalid user applmgr from 167.99.75.174 port 44038 ssh2
...

Oct  9 06:08:17 mail sshd[27640]: Failed password for root from 123.207.167.233 port 32996 ssh2
Oct  9 06:13:05 mail sshd[29573]: Failed password for root from 123.207.167.233 port 39468 ssh2

2019-10-09T00:08:10.7948801495-001 sshd\[4727\]: Failed password for root from 123.206.22.145 port 46754 ssh2
2019-10-09T00:20:45.8935111495-001 sshd\[5523\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.22.145  user=root
2019-10-09T00:20:47.5797611495-001 sshd\[5523\]: Failed password for root from 123.206.22.145 port 34952 ssh2
2019-10-09T00:24:55.8803701495-001 sshd\[5771\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.22.145  user=root
2019-10-09T00:24:57.5520071495-001 sshd\[5771\]: Failed password for root from 123.206.22.145 port 40430 ssh2
2019-10-09T00:29:04.7939371495-001 sshd\[6076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.22.145  user=root
...

Oct  9 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\<**REMOVED**p@**REMOVED**.de\>, method=PLAIN, rip=208.104.83.211, lip=**REMOVED**, TLS, session=\
Oct  9 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=208.104.83.211, lip=**REMOVED**, TLS, session=\
Oct  9 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=208.104.83.211, lip=**REMOVED**, TLS, session=\

Honeypot hit.

2019-10-09T06:37:32.599173+02:00 lumpi kernel: [418270.104622] INPUT:DROP:SPAMHAUS_EDROP:IN=eth0 OUT= MAC=52:54:a2:01:a5:04:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.107 DST=172.31.1.100 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=30868 PROTO=TCP SPT=49905 DPT=1328 WINDOW=1024 RES=0x00 SYN URGP=0 
...

May 15 04:19:16 server sshd\[238397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.130.166  user=root
May 15 04:19:18 server sshd\[238397\]: Failed password for root from 168.232.130.166 port 44221 ssh2
May 15 04:19:39 server sshd\[238400\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.130.166  user=root
...

Oct  9 07:13:02 www sshd\[4433\]: Invalid user 123Lobster from 92.88.7.37Oct  9 07:13:04 www sshd\[4433\]: Failed password for invalid user 123Lobster from 92.88.7.37 port 58002 ssh2Oct  9 07:13:51 www sshd\[4442\]: Invalid user Montana@2017 from 92.88.7.37
...

Oct  9 08:13:56 pkdns2 sshd\[13977\]: Invalid user P@ssw0rd01 from 180.97.80.55Oct  9 08:13:57 pkdns2 sshd\[13977\]: Failed password for invalid user P@ssw0rd01 from 180.97.80.55 port 55474 ssh2Oct  9 08:18:39 pkdns2 sshd\[14192\]: Invalid user P@ssw0rd01 from 180.97.80.55Oct  9 08:18:40 pkdns2 sshd\[14192\]: Failed password for invalid user P@ssw0rd01 from 180.97.80.55 port 35820 ssh2Oct  9 08:23:17 pkdns2 sshd\[14402\]: Invalid user Voiture1@3 from 180.97.80.55Oct  9 08:23:19 pkdns2 sshd\[14402\]: Failed password for invalid user Voiture1@3 from 180.97.80.55 port 44380 ssh2
...

Jun 29 08:47:47 server sshd\[182790\]: Invalid user web8 from 170.239.85.17
Jun 29 08:47:47 server sshd\[182790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.239.85.17
Jun 29 08:47:49 server sshd\[182790\]: Failed password for invalid user web8 from 170.239.85.17 port 50968 ssh2
...

Apr 19 23:43:32 server sshd\[205385\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.128.195  user=root
Apr 19 23:43:34 server sshd\[205385\]: Failed password for root from 168.232.128.195 port 47887 ssh2
Apr 19 23:43:53 server sshd\[205391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.232.128.195  user=root
...

May  8 20:58:32 server sshd\[236349\]: Invalid user nagios from 167.99.46.145
May  8 20:58:32 server sshd\[236349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.46.145
May  8 20:58:35 server sshd\[236349\]: Failed password for invalid user nagios from 167.99.46.145 port 45620 ssh2
...

Oct  9 08:14:58 server sshd\[22229\]: User root from 222.186.180.41 not allowed because listed in DenyUsers
Oct  9 08:15:00 server sshd\[22229\]: Failed none for invalid user root from 222.186.180.41 port 44244 ssh2
Oct  9 08:15:01 server sshd\[22229\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.41  user=root
Oct  9 08:15:03 server sshd\[22229\]: Failed password for invalid user root from 222.186.180.41 port 44244 ssh2
Oct  9 08:15:08 server sshd\[22229\]: Failed password for invalid user root from 222.186.180.41 port 44244 ssh2