Sep 10 07:11:04 www sshd\[60218\]: Address 89.231.11.25 maps to 25.pwsz.kalisz.pl, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Sep 10 07:11:04 www sshd\[60218\]: Invalid user demo from 89.231.11.25Sep 10 07:11:06 www sshd\[60218\]: Failed password for invalid user demo from 89.231.11.25 port 44504 ssh2
...

Sep  9 18:29:49 wbs sshd\[9791\]: Invalid user teste1 from 206.189.108.59
Sep  9 18:29:49 wbs sshd\[9791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.108.59
Sep  9 18:29:51 wbs sshd\[9791\]: Failed password for invalid user teste1 from 206.189.108.59 port 43374 ssh2
Sep  9 18:35:42 wbs sshd\[10342\]: Invalid user gmod from 206.189.108.59
Sep  9 18:35:42 wbs sshd\[10342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.108.59

Sep  9 18:04:36 lcprod sshd\[10835\]: Invalid user redmine from 192.163.224.116
Sep  9 18:04:36 lcprod sshd\[10835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=server.biocuckoo.org
Sep  9 18:04:38 lcprod sshd\[10835\]: Failed password for invalid user redmine from 192.163.224.116 port 37490 ssh2
Sep  9 18:10:37 lcprod sshd\[11428\]: Invalid user ftpuser2 from 192.163.224.116
Sep  9 18:10:37 lcprod sshd\[11428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=server.biocuckoo.org

Sep 10 07:08:44 server sshd\[26355\]: Invalid user svnuser from 46.28.110.35 port 49678
Sep 10 07:08:44 server sshd\[26355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.28.110.35
Sep 10 07:08:46 server sshd\[26355\]: Failed password for invalid user svnuser from 46.28.110.35 port 49678 ssh2
Sep 10 07:14:59 server sshd\[796\]: Invalid user ts3 from 46.28.110.35 port 60030
Sep 10 07:14:59 server sshd\[796\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.28.110.35

Sep  9 18:22:15 hiderm sshd\[30318\]: Invalid user ftptest from 203.110.90.195
Sep  9 18:22:15 hiderm sshd\[30318\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.110.90.195
Sep  9 18:22:17 hiderm sshd\[30318\]: Failed password for invalid user ftptest from 203.110.90.195 port 60293 ssh2
Sep  9 18:29:23 hiderm sshd\[31009\]: Invalid user postgres from 203.110.90.195
Sep  9 18:29:23 hiderm sshd\[31009\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.110.90.195

Sep 10 05:30:35 v22019058497090703 sshd[27380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.64.224
Sep 10 05:30:37 v22019058497090703 sshd[27380]: Failed password for invalid user minecraft from 167.71.64.224 port 59270 ssh2
Sep 10 05:35:55 v22019058497090703 sshd[27734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.64.224
...

Sep 10 03:20:53 smtp postfix/smtpd[67362]: NOQUEUE: reject: RCPT from unknown[89.175.151.230]: 554 5.7.1 Service unavailable; Client host [89.175.151.230] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?89.175.151.230; from= to= proto=ESMTP helo=
...

Sep 10 07:10:43 www sshd\[2571\]: Invalid user ubuntu from 49.232.32.188
Sep 10 07:10:43 www sshd\[2571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.32.188
Sep 10 07:10:45 www sshd\[2571\]: Failed password for invalid user ubuntu from 49.232.32.188 port 48090 ssh2
...

SSH Brute Force, server-1 sshd[3626]: Failed password for root from 218.98.40.138 port 29599 ssh2

Sep 10 03:37:29 vtv3 sshd\[2149\]: Invalid user hadoop from 167.71.215.72 port 13384
Sep 10 03:37:29 vtv3 sshd\[2149\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.215.72
Sep 10 03:37:32 vtv3 sshd\[2149\]: Failed password for invalid user hadoop from 167.71.215.72 port 13384 ssh2
Sep 10 03:43:44 vtv3 sshd\[5180\]: Invalid user test from 167.71.215.72 port 21347
Sep 10 03:43:44 vtv3 sshd\[5180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.215.72
Sep 10 03:55:54 vtv3 sshd\[11365\]: Invalid user oneadmin from 167.71.215.72 port 33873
Sep 10 03:55:54 vtv3 sshd\[11365\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.215.72
Sep 10 03:55:56 vtv3 sshd\[11365\]: Failed password for invalid user oneadmin from 167.71.215.72 port 33873 ssh2
Sep 10 04:02:11 vtv3 sshd\[14250\]: Invalid user mysql from 167.71.215.72 port 40088
Sep 10 04:02:11 vtv3 sshd\[14250\]: pam

" "

Sep 10 05:16:02 h2177944 kernel: \[961896.067651\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.86.114 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=54645 PROTO=TCP SPT=44580 DPT=3294 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 10 05:27:05 h2177944 kernel: \[962559.271418\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.86.114 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=56182 PROTO=TCP SPT=44580 DPT=3205 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 10 05:39:45 h2177944 kernel: \[963318.805878\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.86.114 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=27668 PROTO=TCP SPT=44580 DPT=3088 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 10 05:48:39 h2177944 kernel: \[963853.037586\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.86.114 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=250 ID=29179 PROTO=TCP SPT=44580 DPT=3016 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 10 05:49:56 h2177944 kernel: \[963929.567532\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=5.188.86.114 DST=85.214.117.9 LEN=40 TO

Sep 10 00:21:44 plusreed sshd[9666]: Invalid user test2 from 104.254.244.205
...

firewall-block, port(s): 500/udp

Sep 10 06:09:30 xeon sshd[19824]: Failed password for invalid user itadmin from 27.111.83.239 port 38233 ssh2