Oct  7 10:44:42 lcl-usvr-01 sshd[24009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.202.187.48  user=root
Oct  7 10:48:20 lcl-usvr-01 sshd[25206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.202.187.48  user=root
Oct  7 10:51:59 lcl-usvr-01 sshd[26383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.202.187.48  user=root

2019-10-07T06:00:15.953990abusebot-2.cloudsearch.cf sshd\[26480\]: Invalid user 123QAZWSX from 175.207.13.200 port 52722

Oct  6 19:40:12 eddieflores sshd\[10442\]: Invalid user White123 from 5.196.7.123
Oct  6 19:40:12 eddieflores sshd\[10442\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.ip-5-196-7.eu
Oct  6 19:40:14 eddieflores sshd\[10442\]: Failed password for invalid user White123 from 5.196.7.123 port 40252 ssh2
Oct  6 19:44:01 eddieflores sshd\[10769\]: Invalid user Status123 from 5.196.7.123
Oct  6 19:44:02 eddieflores sshd\[10769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.ip-5-196-7.eu

Automatic report - XMLRPC Attack

10/07/2019-01:19:34.538511 185.175.93.101 Protocol: 6 ET DROP Dshield Block Listed Source group 1

Oct  7 04:14:03 thevastnessof sshd[5868]: Failed password for root from 197.52.196.81 port 26769 ssh2
...

port scan and connect, tcp 80 (http)

Oct  6 19:50:17 sachi sshd\[4680\]: Invalid user Puzzle123 from 115.238.236.74
Oct  6 19:50:17 sachi sshd\[4680\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74
Oct  6 19:50:19 sachi sshd\[4680\]: Failed password for invalid user Puzzle123 from 115.238.236.74 port 35723 ssh2
Oct  6 19:55:21 sachi sshd\[5075\]: Invalid user 123California from 115.238.236.74
Oct  6 19:55:21 sachi sshd\[5075\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.236.74

detected by Fail2Ban

Received: from iosqdio.ebay.com (54.196.118.126) by VE1EUR02FT047.mail.protection.outlook.com (10.152.13.237) with Microsoft SMTP Server id 15.20.2327.20 via Frontend Transport; OriginalChecksum:D6200170066A948894069BED197D6BB3CC91F2048164B999D6003FE83B8B00FA;UpperCasedChecksum:4E92F10BE319BC154A050329625C64AF208FD79D56DEB538165BC0CC9D77D87B;SizeAsReceived:512;Count:9 From: Build Wealth By Gold  Subject: IRS Loophole Converts Your IRA/401(k) to Physical Gold Reply-To: Received: from 4brinkdealbsdomain.com (172.31.45.160) by 4brinkdealbsdomain.com id PHTMCOvjFz6H for ; Sun, 06 Oct 2019 22:59:16 +0200 (envelope-from  To: joycemarie1212@hotmail.com 
Message-ID:  Return-Path: bounce@6brinkdealXQdomain.com 
X-SID-PRA: FROM@2BRINKDEALRKDOMAIN.COM X-SID-Result: NONE

Oct  7 07:54:51 h2177944 sshd\[18782\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.238  user=root
Oct  7 07:54:53 h2177944 sshd\[18782\]: Failed password for root from 112.85.42.238 port 30751 ssh2
Oct  7 07:54:56 h2177944 sshd\[18782\]: Failed password for root from 112.85.42.238 port 30751 ssh2
Oct  7 07:54:58 h2177944 sshd\[18782\]: Failed password for root from 112.85.42.238 port 30751 ssh2
...

Oct  7 05:48:35 icinga sshd[12906]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.189.253.228 
Oct  7 05:48:36 icinga sshd[12906]: Failed password for invalid user joanna from 36.189.253.228 port 9132 ssh2
Oct  7 05:51:10 icinga sshd[14211]: Failed password for root from 36.189.253.228 port 18649 ssh2
...

Oct  6 18:50:54 roadrisk sshd[9905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.6  user=r.r
Oct  6 18:50:55 roadrisk sshd[9905]: Failed password for r.r from 222.186.175.6 port 49694 ssh2
Oct  6 18:50:59 roadrisk sshd[9905]: Failed password for r.r from 222.186.175.6 port 49694 ssh2
Oct  6 18:51:03 roadrisk sshd[9905]: Failed password for r.r from 222.186.175.6 port 49694 ssh2
Oct  6 18:51:08 roadrisk sshd[9905]: Failed password for r.r from 222.186.175.6 port 49694 ssh2
Oct  6 18:51:13 roadrisk sshd[9905]: Failed password for r.r from 222.186.175.6 port 49694 ssh2
Oct  6 18:51:13 roadrisk sshd[9905]: Disconnecting: Too many authentication failures for r.r from 222.186.175.6 port 49694 ssh2 [preauth]
Oct  6 18:51:13 roadrisk sshd[9905]: PAM 4 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.6  user=r.r
Oct  6 18:51:22 roadrisk sshd[9909]: pam_unix(sshd:auth): authentication fail........
-------------------------------

Unauthorised access (Oct  7) SRC=31.163.134.193 LEN=40 TTL=52 ID=5382 TCP DPT=23 WINDOW=38205 SYN

Oct  7 03:52:08 anodpoucpklekan sshd[1904]: Invalid user 123Bingo from 106.12.51.62 port 50192
...