Unauthorized connection attempt detected from IP address 177.107.196.46 to port 445

Dec  9 06:24:12 MK-Soft-VM6 sshd[20747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.141.128.42 
Dec  9 06:24:13 MK-Soft-VM6 sshd[20747]: Failed password for invalid user nagle from 187.141.128.42 port 53734 ssh2
...

Dec  9 05:56:42 v22018076622670303 sshd\[22512\]: Invalid user daschle from 118.187.5.37 port 60722
Dec  9 05:56:42 v22018076622670303 sshd\[22512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.187.5.37
Dec  9 05:56:44 v22018076622670303 sshd\[22512\]: Failed password for invalid user daschle from 118.187.5.37 port 60722 ssh2
...

Dec  9 15:11:24 our-server-hostname postfix/smtpd[24507]: connect from unknown[193.17.4.148]
Dec x@x
Dec  9 15:11:27 our-server-hostname postfix/smtpd[24507]: 63B05A4007E: client=unknown[193.17.4.148]
Dec  9 15:11:28 our-server-hostname postfix/smtpd[12456]: 397CAA401F0: client=unknown[127.0.0.1], orig_client=unknown[193.17.4.148]
Dec  9 15:11:28 our-server-hostname amavis[14449]: (14449-09) Passed CLEAN, [193.17.4.148] [193.17.4.148] , mail_id: R-FFHbJkyFL7, Hhostnames: -, size: 19073, queued_as: 397CAA401F0, 138 ms
Dec  9 15:11:28 our-server-hostname postfix/smtpd[24507]: disconnect from unknown[193.17.4.148]
Dec  9 15:11:30 our-server-hostname postfix/smtpd[3899]: connect from unknown[193.17.4.148]
Dec x@x
Dec  9 15:11:31 our-server-hostname postfix/smtpd[3899]: CA953A401F3: client=unknown[193.17.4.148]
Dec  9 15:11:32 our-server-hostname postfix/smtpd[12456]: B2E8AA4007E: client=unknown[127.0.0.1], orig_client=unknown[193.17.4.148]
Dec  9 15:11:32 our-server-ho........
-------------------------------

Automatic report - Port Scan Attack

2019-12-09T04:56:39.134827abusebot.cloudsearch.cf sshd\[17844\]: Invalid user elodie12345 from 206.189.239.103 port 40422

Invalid user savage from 128.199.224.215 port 60104
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.224.215
Failed password for invalid user savage from 128.199.224.215 port 60104 ssh2
Invalid user jamelah from 128.199.224.215 port 39780
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.224.215

Dec  9 06:47:48 dedicated sshd[7172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.64  user=root
Dec  9 06:47:50 dedicated sshd[7172]: Failed password for root from 49.88.112.64 port 17665 ssh2

Dec  9 05:11:04 game-panel sshd[9522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.59.149
Dec  9 05:11:06 game-panel sshd[9522]: Failed password for invalid user clinica from 122.51.59.149 port 47576 ssh2
Dec  9 05:18:06 game-panel sshd[9865]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.59.149

2019-12-09T04:51:05.272720shield sshd\[19985\]: Invalid user rpm from 51.91.122.140 port 53320
2019-12-09T04:51:05.277346shield sshd\[19985\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.ip-51-91-122.eu
2019-12-09T04:51:07.619169shield sshd\[19985\]: Failed password for invalid user rpm from 51.91.122.140 port 53320 ssh2
2019-12-09T04:56:49.666802shield sshd\[22023\]: Invalid user aleidis from 51.91.122.140 port 34248
2019-12-09T04:56:49.671299shield sshd\[22023\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.ip-51-91-122.eu

SSH Bruteforce attack

--- report ---
Dec  9 01:55:59 sshd: Connection from 5.135.177.172 port 52296
Dec  9 01:56:03 sshd: Invalid user sarfi from 5.135.177.172
Dec  9 01:56:05 sshd: Failed password for invalid user sarfi from 5.135.177.172 port 52296 ssh2
Dec  9 01:56:05 sshd: Received disconnect from 5.135.177.172: 11: Bye Bye [preauth]

Lines containing failures of 222.186.31.127
Dec  9 05:52:43 jarvis sshd[10875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.127  user=r.r
Dec  9 05:52:45 jarvis sshd[10875]: Failed password for r.r from 222.186.31.127 port 47437 ssh2
Dec  9 05:52:47 jarvis sshd[10875]: Failed password for r.r from 222.186.31.127 port 47437 ssh2
Dec  9 05:52:49 jarvis sshd[10875]: Failed password for r.r from 222.186.31.127 port 47437 ssh2
Dec  9 05:52:51 jarvis sshd[10875]: Received disconnect from 222.186.31.127 port 47437:11:  [preauth]
Dec  9 05:52:51 jarvis sshd[10875]: Disconnected from authenticating user r.r 222.186.31.127 port 47437 [preauth]
Dec  9 05:52:51 jarvis sshd[10875]: PAM 2 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.127  user=r.r
Dec  9 05:53:44 jarvis sshd[10989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.127  user=r.r........
------------------------------

Dec  8 19:07:14 php1 sshd\[19867\]: Invalid user banca from 157.230.133.15
Dec  8 19:07:14 php1 sshd\[19867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.133.15
Dec  8 19:07:16 php1 sshd\[19867\]: Failed password for invalid user banca from 157.230.133.15 port 40348 ssh2
Dec  8 19:13:00 php1 sshd\[20762\]: Invalid user zzzzzz from 157.230.133.15
Dec  8 19:13:00 php1 sshd\[20762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.133.15

Dec  9 01:56:46 firewall sshd[7655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.85.104.202
Dec  9 01:56:46 firewall sshd[7655]: Invalid user prabir from 220.85.104.202
Dec  9 01:56:48 firewall sshd[7655]: Failed password for invalid user prabir from 220.85.104.202 port 30660 ssh2
...