Port scan(s) denied

Apr 29 00:52:22 ws22vmsma01 sshd[21936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.14.123.196
...

Apr 28 23:25:28 web9 sshd\[19357\]: Invalid user virtuoso from 195.231.1.153
Apr 28 23:25:28 web9 sshd\[19357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.231.1.153
Apr 28 23:25:30 web9 sshd\[19357\]: Failed password for invalid user virtuoso from 195.231.1.153 port 50982 ssh2
Apr 28 23:29:45 web9 sshd\[20171\]: Invalid user ils from 195.231.1.153
Apr 28 23:29:45 web9 sshd\[20171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.231.1.153

(imapd) Failed IMAP login from 41.139.171.117 (KE/Kenya/41-139-171-117.safaricombusiness.co.ke): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 29 08:22:25 ir1 dovecot[264309]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=41.139.171.117, lip=5.63.12.44, session=

Apr 29 12:55:20 Ubuntu-1404-trusty-64-minimal sshd\[27148\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.158  user=root
Apr 29 12:55:22 Ubuntu-1404-trusty-64-minimal sshd\[27148\]: Failed password for root from 222.186.15.158 port 62224 ssh2
Apr 29 12:55:28 Ubuntu-1404-trusty-64-minimal sshd\[27253\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.158  user=root
Apr 29 12:55:31 Ubuntu-1404-trusty-64-minimal sshd\[27253\]: Failed password for root from 222.186.15.158 port 48490 ssh2
Apr 29 12:55:33 Ubuntu-1404-trusty-64-minimal sshd\[27253\]: Failed password for root from 222.186.15.158 port 48490 ssh2

Apr 29 11:43:46 blackbee postfix/smtpd\[11635\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: authentication failure
Apr 29 11:45:08 blackbee postfix/smtpd\[11635\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: authentication failure
Apr 29 11:46:30 blackbee postfix/smtpd\[11635\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: authentication failure
Apr 29 11:47:52 blackbee postfix/smtpd\[11643\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: authentication failure
Apr 29 11:49:14 blackbee postfix/smtpd\[11645\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: authentication failure
...

Apr 29 08:09:22 l03 sshd[17521]: Invalid user tuan from 51.38.238.165 port 56670
...

Automatic report - Banned IP Access

Website hacking attempt: Improper php file access [php file]

Invalid user sylvie from 128.199.99.204 port 54999

Automatic report - Banned IP Access

Lines containing failures of 51.91.97.153 (max 1000)
Apr 28 01:56:42 mxbb sshd[28801]: Invalid user zlc from 51.91.97.153 port 42764
Apr 28 01:56:44 mxbb sshd[28801]: Failed password for invalid user zlc from 51.91.97.153 port 42764 ssh2
Apr 28 01:56:44 mxbb sshd[28801]: Received disconnect from 51.91.97.153 port 42764:11: Bye Bye [preauth]
Apr 28 01:56:44 mxbb sshd[28801]: Disconnected from 51.91.97.153 port 42764 [preauth]
Apr 28 02:07:18 mxbb sshd[29272]: Failed password for r.r from 51.91.97.153 port 34262 ssh2
Apr 28 02:07:18 mxbb sshd[29272]: Received disconnect from 51.91.97.153 port 34262:11: Bye Bye [preauth]
Apr 28 02:07:18 mxbb sshd[29272]: Disconnected from 51.91.97.153 port 34262 [preauth]
Apr 28 02:12:03 mxbb sshd[29452]: Invalid user etq from 51.91.97.153 port 50140
Apr 28 02:12:05 mxbb sshd[29452]: Failed password for invalid user etq from 51.91.97.153 port 50140 ssh2
Apr 28 02:12:05 mxbb sshd[29452]: Received disconnect from 51.91.97.153 port 50140:11: B........
------------------------------

[2020-04-29 06:40:37] NOTICE[1170][C-00008087] chan_sip.c: Call from '' (51.158.30.15:59343) to extension '5011972592277524' rejected because extension not found in context 'public'.
[2020-04-29 06:40:37] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-29T06:40:37.218-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="5011972592277524",SessionID="0x7f6c080ab528",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.158.30.15/59343",ACLName="no_extension_match"
[2020-04-29 06:43:41] NOTICE[1170][C-0000808b] chan_sip.c: Call from '' (51.158.30.15:59367) to extension '4011972592277524' rejected because extension not found in context 'public'.
[2020-04-29 06:43:41] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-29T06:43:41.330-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="4011972592277524",SessionID="0x7f6c08358818",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP
...

Apr 29 10:22:42 mail.srvfarm.net postfix/smtpd[59270]: NOQUEUE: reject: RCPT from unknown[200.115.157.210]: 554 5.7.1 Service unavailable; Client host [200.115.157.210] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/200.115.157.210; from= to= proto=ESMTP helo=
Apr 29 10:22:43 mail.srvfarm.net postfix/smtpd[59270]: NOQUEUE: reject: RCPT from unknown[200.115.157.210]: 554 5.7.1 Service unavailable; Client host [200.115.157.210] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/200.115.157.210; from= to= proto=ESMTP helo=
Apr 29 10:22:52 mail.srvfarm.net postfix/smtpd[59270]: NOQUEUE: reject: RCPT from unknown[200.115.157.210]: 450 4.1.8 : Sender address rejected: Domain not found; from= to=

$f2bV_matches