Sep  4 18:06:28 legacy sshd[27507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.34.12.35
Sep  4 18:06:30 legacy sshd[27507]: Failed password for invalid user tc from 118.34.12.35 port 48588 ssh2
Sep  4 18:11:42 legacy sshd[27589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.34.12.35
...

port scan and connect, tcp 23 (telnet)

Sep  4 05:45:32 eddieflores sshd\[29169\]: Invalid user maria from 92.188.124.228
Sep  4 05:45:32 eddieflores sshd\[29169\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.188.124.228
Sep  4 05:45:34 eddieflores sshd\[29169\]: Failed password for invalid user maria from 92.188.124.228 port 57414 ssh2
Sep  4 05:49:14 eddieflores sshd\[29526\]: Invalid user bigdiawusr from 92.188.124.228
Sep  4 05:49:14 eddieflores sshd\[29526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.188.124.228

60001/tcp
[2019-09-04]1pkt

Sep  2 02:36:29 itv-usvr-01 sshd[25391]: Invalid user mai from 89.254.148.26
Sep  2 02:36:29 itv-usvr-01 sshd[25391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.254.148.26
Sep  2 02:36:29 itv-usvr-01 sshd[25391]: Invalid user mai from 89.254.148.26
Sep  2 02:36:31 itv-usvr-01 sshd[25391]: Failed password for invalid user mai from 89.254.148.26 port 52532 ssh2
Sep  2 02:45:51 itv-usvr-01 sshd[25828]: Invalid user ksb from 89.254.148.26

firewall-block, port(s): 80/tcp

2019-09-04T17:33:12.480544lon01.zurich-datacenter.net sshd\[15820\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=tor.piratenpartei-nrw.de  user=root
2019-09-04T17:33:14.579823lon01.zurich-datacenter.net sshd\[15820\]: Failed password for root from 5.199.130.188 port 38147 ssh2
2019-09-04T17:33:16.848900lon01.zurich-datacenter.net sshd\[15820\]: Failed password for root from 5.199.130.188 port 38147 ssh2
2019-09-04T17:33:20.575972lon01.zurich-datacenter.net sshd\[15820\]: Failed password for root from 5.199.130.188 port 38147 ssh2
2019-09-04T17:33:23.189729lon01.zurich-datacenter.net sshd\[15820\]: Failed password for root from 5.199.130.188 port 38147 ssh2
...

Sep  4 15:29:33 andromeda postfix/smtpd\[48461\]: warning: unknown\[103.207.38.153\]: SASL LOGIN authentication failed: authentication failure
Sep  4 15:29:34 andromeda postfix/smtpd\[46310\]: warning: unknown\[103.207.38.153\]: SASL LOGIN authentication failed: authentication failure
Sep  4 15:29:36 andromeda postfix/smtpd\[41036\]: warning: unknown\[103.207.38.153\]: SASL LOGIN authentication failed: authentication failure
Sep  4 15:29:37 andromeda postfix/smtpd\[46104\]: warning: unknown\[103.207.38.153\]: SASL LOGIN authentication failed: authentication failure
Sep  4 15:29:39 andromeda postfix/smtpd\[48461\]: warning: unknown\[103.207.38.153\]: SASL LOGIN authentication failed: authentication failure

Sep  4 23:32:18 itv-usvr-02 sshd[19713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.234.157.254  user=root
Sep  4 23:32:20 itv-usvr-02 sshd[19713]: Failed password for root from 89.234.157.254 port 34113 ssh2

2019-09-04T23:21:51.657265enmeeting.mahidol.ac.th sshd\[3169\]: Invalid user tc from 113.176.89.116 port 43942
2019-09-04T23:21:51.675599enmeeting.mahidol.ac.th sshd\[3169\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.176.89.116
2019-09-04T23:21:53.497069enmeeting.mahidol.ac.th sshd\[3169\]: Failed password for invalid user tc from 113.176.89.116 port 43942 ssh2
...

\[2019-09-04 11:40:57\] NOTICE\[1829\] chan_sip.c: Registration from '"8795" \' failed for '185.53.88.66:5340' - Wrong password
\[2019-09-04 11:40:57\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-04T11:40:57.615-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8795",SessionID="0x7f7b301c17c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.66/5340",Challenge="650b436c",ReceivedChallenge="650b436c",ReceivedHash="899050107e23377cca06e8fb14f7012a"
\[2019-09-04 11:40:57\] NOTICE\[1829\] chan_sip.c: Registration from '"8795" \' failed for '185.53.88.66:5340' - Wrong password
\[2019-09-04 11:40:57\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-04T11:40:57.760-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8795",SessionID="0x7f7b302170b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/1

Sep  4 06:09:37 kapalua sshd\[6923\]: Invalid user user from 167.71.217.110
Sep  4 06:09:37 kapalua sshd\[6923\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.217.110
Sep  4 06:09:39 kapalua sshd\[6923\]: Failed password for invalid user user from 167.71.217.110 port 39272 ssh2
Sep  4 06:17:02 kapalua sshd\[7682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.217.110  user=root
Sep  4 06:17:05 kapalua sshd\[7682\]: Failed password for root from 167.71.217.110 port 43914 ssh2

$f2bV_matches

Sep  4 15:34:09 mail sshd\[23397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.146.145.104
Sep  4 15:34:10 mail sshd\[23397\]: Failed password for invalid user lukas from 119.146.145.104 port 4896 ssh2
Sep  4 15:38:38 mail sshd\[24089\]: Invalid user wp from 119.146.145.104 port 4897
Sep  4 15:38:38 mail sshd\[24089\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.146.145.104
Sep  4 15:38:40 mail sshd\[24089\]: Failed password for invalid user wp from 119.146.145.104 port 4897 ssh2

$f2bV_matches