Oct 10 07:44:33 OPSO sshd\[28287\]: Invalid user Atlantique-123 from 91.121.109.45 port 59081
Oct 10 07:44:33 OPSO sshd\[28287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.109.45
Oct 10 07:44:35 OPSO sshd\[28287\]: Failed password for invalid user Atlantique-123 from 91.121.109.45 port 59081 ssh2
Oct 10 07:48:38 OPSO sshd\[28940\]: Invalid user Atlantique@123 from 91.121.109.45 port 50901
Oct 10 07:48:38 OPSO sshd\[28940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.109.45

Lines containing failures of 27.104.208.151
Oct 10 06:32:48 myhost sshd[2516]: Invalid user pi from 27.104.208.151 port 50328
Oct 10 06:32:48 myhost sshd[2515]: Invalid user pi from 27.104.208.151 port 50324
Oct 10 06:32:48 myhost sshd[2516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.104.208.151
Oct 10 06:32:48 myhost sshd[2515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.104.208.151


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=27.104.208.151

Oct 10 08:52:05 hosting sshd[14558]: Invalid user Passwort!234 from 201.52.45.218 port 36890
...

2019-10-10T07:45:11.110708shield sshd\[4286\]: Invalid user 123 from 178.62.37.168 port 48003
2019-10-10T07:45:11.114939shield sshd\[4286\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.37.168
2019-10-10T07:45:13.591896shield sshd\[4286\]: Failed password for invalid user 123 from 178.62.37.168 port 48003 ssh2
2019-10-10T07:49:11.085919shield sshd\[4692\]: Invalid user Ben@2017 from 178.62.37.168 port 39524
2019-10-10T07:49:11.090457shield sshd\[4692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.37.168

Telnetd brute force attack detected by fail2ban

Oct 10 05:44:05 xzibhostname postfix/smtpd[29813]: warning: hostname static.vnpt.vn does not resolve to address 14.169.108.107
Oct 10 05:44:05 xzibhostname postfix/smtpd[29813]: connect from unknown[14.169.108.107]
Oct 10 05:44:05 xzibhostname postfix/smtpd[29815]: warning: hostname static.vnpt.vn does not resolve to address 14.169.108.107
Oct 10 05:44:05 xzibhostname postfix/smtpd[29815]: connect from unknown[14.169.108.107]
Oct 10 05:44:06 xzibhostname postfix/smtpd[29317]: warning: hostname static.vnpt.vn does not resolve to address 14.169.108.107
Oct 10 05:44:06 xzibhostname postfix/smtpd[29317]: connect from unknown[14.169.108.107]
Oct 10 05:44:06 xzibhostname postfix/smtpd[29816]: warning: hostname static.vnpt.vn does not resolve to address 14.169.108.107
Oct 10 05:44:06 xzibhostname postfix/smtpd[29816]: connect from unknown[14.169.108.107]
Oct 10 05:44:06 xzibhostname postfix/smtpd[29817]: warning: hostname static.vnpt.vn does not resolve to address 14.169.108.1........
-------------------------------

Oct 10 09:12:30 MainVPS sshd[26056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.36.38  user=root
Oct 10 09:12:32 MainVPS sshd[26056]: Failed password for root from 182.61.36.38 port 33760 ssh2
Oct 10 09:17:04 MainVPS sshd[26386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.36.38  user=root
Oct 10 09:17:06 MainVPS sshd[26386]: Failed password for root from 182.61.36.38 port 39718 ssh2
Oct 10 09:21:33 MainVPS sshd[26695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.36.38  user=root
Oct 10 09:21:35 MainVPS sshd[26695]: Failed password for root from 182.61.36.38 port 45676 ssh2
...

2019-10-09 22:50:32 H=(loveless.it) [103.230.155.6]:46388 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.11, 127.0.0.3) (https://www.spamhaus.org/query/ip/103.230.155.6)
2019-10-09 22:50:33 H=(loveless.it) [103.230.155.6]:46388 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-10-09 22:50:33 H=(loveless.it) [103.230.155.6]:46388 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
...

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/78.128.38.80/ 
 BG - 1H : (13)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : BG 
 NAME ASN : ASN43205 
 
 IP : 78.128.38.80 
 
 CIDR : 78.128.36.0/22 
 
 PREFIX COUNT : 75 
 
 UNIQUE IP COUNT : 249856 
 
 
 WYKRYTE ATAKI Z ASN43205 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 2 
 24H - 2 
 
 DateTime : 2019-10-10 05:49:52 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

firewall-block, port(s): 445/tcp

2019-10-10T02:52:53.9904841495-001 sshd\[32091\]: Invalid user 123 from 46.29.8.150 port 36964
2019-10-10T02:52:53.9973401495-001 sshd\[32091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.29.8.150
2019-10-10T02:52:56.3493761495-001 sshd\[32091\]: Failed password for invalid user 123 from 46.29.8.150 port 36964 ssh2
2019-10-10T02:56:48.4971481495-001 sshd\[32230\]: Invalid user Pablo1@3 from 46.29.8.150 port 46872
2019-10-10T02:56:48.5004021495-001 sshd\[32230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.29.8.150
2019-10-10T02:56:49.7782901495-001 sshd\[32230\]: Failed password for invalid user Pablo1@3 from 46.29.8.150 port 46872 ssh2
...

Oct  6 12:41:32 mxgate1 sshd[23651]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.77.142.89  user=r.r
Oct  6 12:41:34 mxgate1 sshd[23651]: Failed password for r.r from 13.77.142.89 port 34568 ssh2
Oct  6 12:41:34 mxgate1 sshd[23651]: Received disconnect from 13.77.142.89 port 34568:11: Bye Bye [preauth]
Oct  6 12:41:34 mxgate1 sshd[23651]: Disconnected from 13.77.142.89 port 34568 [preauth]
Oct  6 12:54:42 mxgate1 sshd[24000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.77.142.89  user=r.r
Oct  6 12:54:44 mxgate1 sshd[24000]: Failed password for r.r from 13.77.142.89 port 40694 ssh2
Oct  6 12:54:44 mxgate1 sshd[24000]: Received disconnect from 13.77.142.89 port 40694:11: Bye Bye [preauth]
Oct  6 12:54:44 mxgate1 sshd[24000]: Disconnected from 13.77.142.89 port 40694 [preauth]
Oct  6 12:58:26 mxgate1 sshd[24065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ........
-------------------------------

Oct 10 03:10:10 ny01 sshd[28152]: Failed password for root from 121.136.119.7 port 39384 ssh2
Oct 10 03:15:08 ny01 sshd[28607]: Failed password for root from 121.136.119.7 port 50954 ssh2

B: Magento admin pass /admin/ test (wrong country)

2019-10-10T05:50:07.943493stark.klein-stark.info postfix/smtpd\[5417\]: NOQUEUE: reject: RCPT from longing.stop-snore-de.com\[81.28.107.30\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\
...