Dec 13 19:36:22 vpn01 sshd[28812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.79.34.202
Dec 13 19:36:24 vpn01 sshd[28812]: Failed password for invalid user odoo from 217.79.34.202 port 49161 ssh2
...

2019-12-13T11:29:50.797998ns547587 sshd\[24487\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns561359.ip-54-39-107.net  user=root
2019-12-13T11:29:52.564282ns547587 sshd\[24487\]: Failed password for root from 54.39.107.119 port 41426 ssh2
2019-12-13T11:35:29.967488ns547587 sshd\[920\]: Invalid user kassey from 54.39.107.119 port 50554
2019-12-13T11:35:29.973190ns547587 sshd\[920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns561359.ip-54-39-107.net
...

Dec 13 20:08:01 microserver sshd[24417]: Invalid user busalacc from 51.83.98.52 port 34538
Dec 13 20:08:01 microserver sshd[24417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.98.52
Dec 13 20:08:04 microserver sshd[24417]: Failed password for invalid user busalacc from 51.83.98.52 port 34538 ssh2
Dec 13 20:13:18 microserver sshd[25233]: Invalid user nzee from 51.83.98.52 port 42434
Dec 13 20:13:18 microserver sshd[25233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.98.52
Dec 13 20:23:39 microserver sshd[26830]: Invalid user kibitnr1 from 51.83.98.52 port 58932
Dec 13 20:23:39 microserver sshd[26830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.98.52
Dec 13 20:23:41 microserver sshd[26830]: Failed password for invalid user kibitnr1 from 51.83.98.52 port 58932 ssh2
Dec 13 20:28:53 microserver sshd[27607]: Invalid user safwat from 51.83.98.52 port 38928
Dec 13 20:2

Dec 13 08:27:43 home sshd[12748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.57.28.210  user=backup
Dec 13 08:27:45 home sshd[12748]: Failed password for backup from 96.57.28.210 port 46768 ssh2
Dec 13 08:33:35 home sshd[12788]: Invalid user dingarevalo from 96.57.28.210 port 45164
Dec 13 08:33:35 home sshd[12788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.57.28.210
Dec 13 08:33:35 home sshd[12788]: Invalid user dingarevalo from 96.57.28.210 port 45164
Dec 13 08:33:37 home sshd[12788]: Failed password for invalid user dingarevalo from 96.57.28.210 port 45164 ssh2
Dec 13 08:38:54 home sshd[12805]: Invalid user awmiller from 96.57.28.210 port 54878
Dec 13 08:38:54 home sshd[12805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.57.28.210
Dec 13 08:38:54 home sshd[12805]: Invalid user awmiller from 96.57.28.210 port 54878
Dec 13 08:38:56 home sshd[12805]: Failed password fo

Brute force attempt

Dec 13 19:31:32 ns3042688 sshd\[4435\]: Invalid user mihm from 54.36.183.33
Dec 13 19:31:34 ns3042688 sshd\[4435\]: Failed password for invalid user mihm from 54.36.183.33 port 50244 ssh2
Dec 13 19:36:28 ns3042688 sshd\[5611\]: Invalid user moltu from 54.36.183.33
Dec 13 19:36:30 ns3042688 sshd\[5611\]: Failed password for invalid user moltu from 54.36.183.33 port 59034 ssh2
Dec 13 19:41:23 ns3042688 sshd\[6812\]: Invalid user suleiman from 54.36.183.33
...

DLink DSL Remote OS Command Injection Vulnerability, PTR: PTR record not found

Dec 13 18:19:42 ns41 sshd[5244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.73.104

Dec 13 08:22:31 php1 sshd\[2104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167  user=root
Dec 13 08:22:33 php1 sshd\[2104\]: Failed password for root from 222.186.175.167 port 38226 ssh2
Dec 13 08:22:46 php1 sshd\[2104\]: Failed password for root from 222.186.175.167 port 38226 ssh2
Dec 13 08:22:49 php1 sshd\[2131\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167  user=root
Dec 13 08:22:52 php1 sshd\[2131\]: Failed password for root from 222.186.175.167 port 9846 ssh2

Says bank of america  I don't even bank there

Received: from p-mtain019.msg.pkvw.co.charter.net ([107.14.174.244])
          by cdptpa-fep16.email.rr.com
          (InterMail vM.8.04.03.24 201-2389-100-172-20151028) with ESMTP
          id <20191213055620.HGET16311.cdptpa-fep16.email.rr.com@p-mtain019.msg.pkvw.co.charter.net>
          for ; Fri, 13 Dec 2019 05:56:20 +0000
Received: from p-impin017.msg.pkvw.co.charter.net ([47.43.26.158])
          by p-mtain019.msg.pkvw.co.charter.net
          (InterMail vM.9.01.00.037.1 201-2473-137-122-172) with ESMTP
          id <20191213055620.IDYP27565.p-mtain019.msg.pkvw.co.charter.net@p-impin017.msg.pkvw.co.charter.net>
          for ; Fri, 13 Dec 2019 05:56:20 +0000
Received: from mx-n06.wc1.lan3.stabletransit.com ([207.246.249.46])
	by cmsmtp with ESMTP
	id fdw3i9SPh7XNKfdw3i7JNm; Fri, 13 Dec 2019 05:56:20 +0000

Dec 13 19:02:08 srv01 postfix/smtpd\[2387\]: warning: unknown\[78.128.113.125\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 13 19:02:15 srv01 postfix/smtpd\[2387\]: warning: unknown\[78.128.113.125\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 13 19:03:34 srv01 postfix/smtpd\[5916\]: warning: unknown\[78.128.113.125\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 13 19:03:41 srv01 postfix/smtpd\[5916\]: warning: unknown\[78.128.113.125\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 13 19:06:02 srv01 postfix/smtpd\[3258\]: warning: unknown\[78.128.113.125\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...

" "

Dec 13 23:41:25 areeb-Workstation sshd[30157]: Failed password for root from 180.76.108.151 port 33838 ssh2
...

89.248.168.217 was recorded 52 times by 29 hosts attempting to connect to the following ports: 1284,1101,1083. Incident counter (4h, 24h, all-time): 52, 369, 11408

Dec 10 08:00:50 v2hgb sshd[17424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.82.217.15  user=r.r
Dec 10 08:00:53 v2hgb sshd[17424]: Failed password for r.r from 36.82.217.15 port 38050 ssh2
Dec 10 08:00:53 v2hgb sshd[17424]: Received disconnect from 36.82.217.15 port 38050:11: Bye Bye [preauth]
Dec 10 08:00:53 v2hgb sshd[17424]: Disconnected from authenticating user r.r 36.82.217.15 port 38050 [preauth]
Dec 10 08:03:32 v2hgb sshd[17659]: Invalid user odroid from 36.82.217.15 port 37033
Dec 10 08:03:32 v2hgb sshd[17659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.82.217.15 
Dec 10 08:03:34 v2hgb sshd[17659]: Failed password for invalid user odroid from 36.82.217.15 port 37033 ssh2
Dec 10 08:03:35 v2hgb sshd[17659]: Received disconnect from 36.82.217.15 port 37033:11: Bye Bye [preauth]
Dec 10 08:03:35 v2hgb sshd[17659]: Disconnected from invalid user odroid 36.82.217.15 port 3........
-------------------------------