Jun  2 22:35:10 server1 sshd\[6661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.151.17  user=root
Jun  2 22:35:12 server1 sshd\[6661\]: Failed password for root from 120.92.151.17 port 1600 ssh2
Jun  2 22:39:39 server1 sshd\[7940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.151.17  user=root
Jun  2 22:39:42 server1 sshd\[7940\]: Failed password for root from 120.92.151.17 port 57382 ssh2
Jun  2 22:44:19 server1 sshd\[9202\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.151.17  user=root
...

Jun  3 06:56:10 vpn01 sshd[31015]: Failed password for root from 65.191.76.227 port 39502 ssh2
...

20/6/2@23:58:08: FAIL: Alarm-Network address from=113.23.29.127
20/6/2@23:58:09: FAIL: Alarm-Network address from=113.23.29.127
...

Jun  3 06:28:19 abendstille sshd\[32365\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.113.246  user=root
Jun  3 06:28:22 abendstille sshd\[32365\]: Failed password for root from 94.191.113.246 port 52552 ssh2
Jun  3 06:30:43 abendstille sshd\[2264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.113.246  user=root
Jun  3 06:30:44 abendstille sshd\[2264\]: Failed password for root from 94.191.113.246 port 52064 ssh2
Jun  3 06:33:16 abendstille sshd\[4494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.113.246  user=root
...

20 attempts against mh-misbehave-ban on pine

Jun  3 07:13:38 abendstille sshd\[20222\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.83  user=root
Jun  3 07:13:40 abendstille sshd\[20222\]: Failed password for root from 222.186.31.83 port 43264 ssh2
Jun  3 07:13:42 abendstille sshd\[20222\]: Failed password for root from 222.186.31.83 port 43264 ssh2
Jun  3 07:13:47 abendstille sshd\[20222\]: Failed password for root from 222.186.31.83 port 43264 ssh2
Jun  3 07:13:50 abendstille sshd\[20526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.83  user=root
...

Jun  3 06:41:09 inter-technics sshd[17252]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.174.87  user=root
Jun  3 06:41:11 inter-technics sshd[17252]: Failed password for root from 106.75.174.87 port 35730 ssh2
Jun  3 06:45:34 inter-technics sshd[17527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.174.87  user=root
Jun  3 06:45:36 inter-technics sshd[17527]: Failed password for root from 106.75.174.87 port 53316 ssh2
Jun  3 06:49:54 inter-technics sshd[17781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.174.87  user=root
Jun  3 06:49:56 inter-technics sshd[17781]: Failed password for root from 106.75.174.87 port 42670 ssh2
...

 TCP (SYN) 106.13.211.155:41379 -> port 15059, len 44

20 attempts against mh-misbehave-ban on sonic

2020-06-0305:56:441jgKWB-0001nA-5U\<=info@whatsup2013.chH=\(localhost\)[14.187.26.79]:41652P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3043id=8eb0545f547faa597a8472212afec76b48a235ab4a@whatsup2013.chT="tobobadkins1"forbobadkins1@yahoo.commarciarandy123@gmail.comsoygcatalan6@gmail.com2020-06-0305:57:061jgKWX-0001ox-FA\<=info@whatsup2013.chH=\(localhost\)[123.20.100.222]:49975P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3054id=285fe9bab19ab0b82421973bdca8829e32dde5@whatsup2013.chT="tomalindadouglas86"formalindadouglas86@gmail.comstonejon128@gmail.comhendrewzazua@gmail.com2020-06-0305:56:551jgKWM-0001oM-Fz\<=info@whatsup2013.chH=\(localhost\)[163.53.204.86]:51023P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3047id=a5d7b3e0ebc015193e7bcd9e6aad272b18af4c9d@whatsup2013.chT="tosamuelmashipe7"forsamuelmashipe7@gmail.comnathanchildress@gmail.comlajshsnsn@gmail.com2020-06-0305:

 TCP (SYN) 206.189.188.218:56621 -> port 9076, len 44

 TCP (SYN) 31.220.1.210:20646 -> port 22, len 48

Automatic report - Banned IP Access

DATE:2020-06-03 05:58:24, IP:77.42.127.136, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)

Rude login attack (9 tries in 1d)