Sep  4 09:40:35 h2022099 sshd[22924]: Did not receive identification string from 165.22.230.226
Sep  4 09:40:59 h2022099 sshd[22937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.230.226  user=r.r
Sep  4 09:41:01 h2022099 sshd[22937]: Failed password for r.r from 165.22.230.226 port 53568 ssh2
Sep  4 09:41:01 h2022099 sshd[22937]: Received disconnect from 165.22.230.226: 11: Normal Shutdown, Thank you for playing [preauth]
Sep  4 09:41:18 h2022099 sshd[22953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.230.226  user=r.r
Sep  4 09:41:21 h2022099 sshd[22953]: Failed password for r.r from 165.22.230.226 port 42530 ssh2
Sep  4 09:41:21 h2022099 sshd[22953]: Received disconnect from 165.22.230.226: 11: Normal Shutdown, Thank you for playing [preauth]
Sep  4 09:41:37 h2022099 sshd[23000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=........
-------------------------------

2020-09-05T07:09:14.331709galaxy.wi.uni-potsdam.de sshd[5730]: Invalid user tarcisio from 1.245.61.144 port 32745
2020-09-05T07:09:14.333642galaxy.wi.uni-potsdam.de sshd[5730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.245.61.144
2020-09-05T07:09:14.331709galaxy.wi.uni-potsdam.de sshd[5730]: Invalid user tarcisio from 1.245.61.144 port 32745
2020-09-05T07:09:16.488159galaxy.wi.uni-potsdam.de sshd[5730]: Failed password for invalid user tarcisio from 1.245.61.144 port 32745 ssh2
2020-09-05T07:12:10.443192galaxy.wi.uni-potsdam.de sshd[6102]: Invalid user techsupport from 1.245.61.144 port 31853
2020-09-05T07:12:10.445140galaxy.wi.uni-potsdam.de sshd[6102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.245.61.144
2020-09-05T07:12:10.443192galaxy.wi.uni-potsdam.de sshd[6102]: Invalid user techsupport from 1.245.61.144 port 31853
2020-09-05T07:12:12.093018galaxy.wi.uni-potsdam.de sshd[6102]: Failed p
...

2020-09-05 08:21:46 dovecot_login authenticator failed for \(User\) \[45.142.120.137\]: 535 Incorrect authentication data \(set_id=jody@org.ua\)2020-09-05 08:22:23 dovecot_login authenticator failed for \(User\) \[45.142.120.137\]: 535 Incorrect authentication data \(set_id=thekla@org.ua\)2020-09-05 08:23:01 dovecot_login authenticator failed for \(User\) \[45.142.120.137\]: 535 Incorrect authentication data \(set_id=jeri@org.ua\)
...

Sep  5 01:38:36 NPSTNNYC01T sshd[13335]: Failed password for root from 222.186.180.41 port 9294 ssh2
Sep  5 01:38:39 NPSTNNYC01T sshd[13335]: Failed password for root from 222.186.180.41 port 9294 ssh2
Sep  5 01:38:50 NPSTNNYC01T sshd[13335]: error: maximum authentication attempts exceeded for root from 222.186.180.41 port 9294 ssh2 [preauth]
...

Sep  5 07:35:01 jane sshd[32145]: Failed password for root from 218.92.0.248 port 56426 ssh2
Sep  5 07:35:05 jane sshd[32145]: Failed password for root from 218.92.0.248 port 56426 ssh2
...

(sshd) Failed SSH login from 218.92.0.210 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  5 01:31:10 optimus sshd[10227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.210  user=root
Sep  5 01:31:12 optimus sshd[10231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.210  user=root
Sep  5 01:31:13 optimus sshd[10227]: Failed password for root from 218.92.0.210 port 31910 ssh2
Sep  5 01:31:14 optimus sshd[10231]: Failed password for root from 218.92.0.210 port 64419 ssh2
Sep  5 01:31:14 optimus sshd[10229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.210  user=root

Sep  4 18:49:17 vm1 sshd[10841]: Failed password for root from 111.161.74.121 port 58483 ssh2
...

Sep  5 06:11:33 marvibiene sshd[9124]: Failed password for root from 159.203.184.19 port 48366 ssh2

Sep  4 18:51:41 mellenthin postfix/smtpd[32154]: NOQUEUE: reject: RCPT from unknown[151.50.88.96]: 554 5.7.1 Service unavailable; Client host [151.50.88.96] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/151.50.88.96; from= to= proto=ESMTP helo=

Honeypot attack, port: 445, PTR: dsl-189-229-94-38-dyn.prod-infinitum.com.mx.

Sep  5 07:05:33 jane sshd[9000]: Failed password for root from 218.92.0.171 port 64569 ssh2
Sep  5 07:05:36 jane sshd[9000]: Failed password for root from 218.92.0.171 port 64569 ssh2
...

Honeypot attack, port: 5555, PTR: 104-249-252-113-on-nets.com.

Invalid user hostmaster from 106.54.52.35 port 45460

Wordpress malicious attack:[sshd]

Sep  5 06:48:56 rancher-0 sshd[1444338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.80.37.70  user=root
Sep  5 06:48:58 rancher-0 sshd[1444338]: Failed password for root from 189.80.37.70 port 42300 ssh2
...