Dec  6 05:48:45 gw1 sshd[15611]: Failed password for root from 222.186.169.194 port 26980 ssh2
Dec  6 05:48:58 gw1 sshd[15611]: error: maximum authentication attempts exceeded for root from 222.186.169.194 port 26980 ssh2 [preauth]
...

Dec  6 01:36:41 sso sshd[454]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.243.100
Dec  6 01:36:43 sso sshd[454]: Failed password for invalid user admin from 119.29.243.100 port 52970 ssh2
...

Dec  6 00:41:23 markkoudstaal sshd[24842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.214.9.174
Dec  6 00:41:25 markkoudstaal sshd[24842]: Failed password for invalid user ee from 58.214.9.174 port 37864 ssh2
Dec  6 00:47:45 markkoudstaal sshd[25565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.214.9.174

Dec  5 19:50:51 ny01 sshd[8832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.11.239
Dec  5 19:50:53 ny01 sshd[8832]: Failed password for invalid user erkes from 129.211.11.239 port 58912 ssh2
Dec  5 19:57:30 ny01 sshd[9842]: Failed password for root from 129.211.11.239 port 41038 ssh2

Dec  5 14:40:04 tdfoods sshd\[15495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.88.96  user=root
Dec  5 14:40:06 tdfoods sshd\[15495\]: Failed password for root from 49.235.88.96 port 36924 ssh2
Dec  5 14:46:46 tdfoods sshd\[16145\]: Invalid user nenon from 49.235.88.96
Dec  5 14:46:46 tdfoods sshd\[16145\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.88.96
Dec  5 14:46:48 tdfoods sshd\[16145\]: Failed password for invalid user nenon from 49.235.88.96 port 37594 ssh2

Dec  5 21:28:32 sshd: Connection from 37.59.158.100 port 37724
Dec  5 21:28:39 sshd: Failed password for root from 37.59.158.100 port 37724 ssh2
Dec  5 21:28:39 sshd: Received disconnect from 37.59.158.100: 11: Bye Bye [preauth]

2019-12-06T00:43:42.057830abusebot-5.cloudsearch.cf sshd\[19404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.175.71  user=root

Dec  5 23:53:46 server sshd\[28839\]: Invalid user uftp from 124.156.172.11
Dec  5 23:53:46 server sshd\[28839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.172.11 
Dec  5 23:53:48 server sshd\[28839\]: Failed password for invalid user uftp from 124.156.172.11 port 33806 ssh2
Dec  6 00:00:31 server sshd\[31008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.172.11  user=root
Dec  6 00:00:33 server sshd\[31008\]: Failed password for root from 124.156.172.11 port 44836 ssh2
...

$f2bV_matches

Unauthorized connection attempt from IP address 118.69.128.182 on Port 445(SMB)

Dec  5 14:42:39 tdfoods sshd\[15759\]: Invalid user sitosh from 168.126.85.225
Dec  5 14:42:39 tdfoods sshd\[15759\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.126.85.225
Dec  5 14:42:41 tdfoods sshd\[15759\]: Failed password for invalid user sitosh from 168.126.85.225 port 58846 ssh2
Dec  5 14:49:41 tdfoods sshd\[16417\]: Invalid user sonny321 from 168.126.85.225
Dec  5 14:49:41 tdfoods sshd\[16417\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.126.85.225

Dec  5 23:00:31 grey postfix/smtpd\[30310\]: NOQUEUE: reject: RCPT from smiling.shrewdmhealth.com\[81.28.100.96\]: 554 5.7.1 Service unavailable\; Client host \[81.28.100.96\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[81.28.100.96\]\; from=\ to=\ proto=ESMTP helo=\
...

Dec  5 14:44:28 tdfoods sshd\[15909\]: Invalid user po123 from 140.143.163.22
Dec  5 14:44:28 tdfoods sshd\[15909\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.163.22
Dec  5 14:44:30 tdfoods sshd\[15909\]: Failed password for invalid user po123 from 140.143.163.22 port 43889 ssh2
Dec  5 14:51:38 tdfoods sshd\[16612\]: Invalid user horiguchi from 140.143.163.22
Dec  5 14:51:38 tdfoods sshd\[16612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.163.22

Dec  5 15:06:58 tdfoods sshd\[18107\]: Invalid user ts3 from 94.153.212.74
Dec  5 15:06:58 tdfoods sshd\[18107\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.153.212.74
Dec  5 15:07:00 tdfoods sshd\[18107\]: Failed password for invalid user ts3 from 94.153.212.74 port 39000 ssh2
Dec  5 15:07:01 tdfoods sshd\[18124\]: Invalid user judge from 94.153.212.74
Dec  5 15:07:01 tdfoods sshd\[18124\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.153.212.74

xmlrpc attack