Nov  7 21:49:01 raspberrypi sshd\[6708\]: Failed password for root from 218.255.122.102 port 61283 ssh2Nov  7 22:05:22 raspberrypi sshd\[6986\]: Invalid user zabbix from 218.255.122.102Nov  7 22:05:24 raspberrypi sshd\[6986\]: Failed password for invalid user zabbix from 218.255.122.102 port 50232 ssh2
...

Nov  7 19:38:16 fr01 sshd[16406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.27.122  user=ftp
Nov  7 19:38:18 fr01 sshd[16406]: Failed password for ftp from 51.255.27.122 port 43547 ssh2
...

Nov  8 01:03:19 mail postfix/smtpd\[21753\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.148\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.151\]\>
Nov  8 01:03:19 mail postfix/smtpd\[21753\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.148\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.151\]\>
Nov  8 01:03:19 mail postfix/smtpd\[21753\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.148\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.151\]\>
Nov  8 01:03:19 mail postfix/smtpd\[21753\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.148\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[193.32.160.151\]\

Nov  7 22:46:56 server sshd\[27785\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.129.14.218  user=root
Nov  7 22:46:57 server sshd\[27785\]: Failed password for root from 181.129.14.218 port 12368 ssh2
Nov  7 22:56:39 server sshd\[30235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.129.14.218  user=root
Nov  7 22:56:40 server sshd\[30235\]: Failed password for root from 181.129.14.218 port 35749 ssh2
Nov  7 23:00:30 server sshd\[31936\]: Invalid user git from 181.129.14.218
Nov  7 23:00:30 server sshd\[31936\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.129.14.218 
...

Nov  7 15:33:20 vps691689 sshd[20437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.182.253.204
Nov  7 15:33:22 vps691689 sshd[20437]: Failed password for invalid user alec from 41.182.253.204 port 58166 ssh2
...

port scan and connect, tcp 22 (ssh)

Nov  7 22:23:31 srv01 sshd[21047]: Invalid user akerjord from 107.179.95.9
Nov  7 22:23:31 srv01 sshd[21047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.179.95.9
Nov  7 22:23:31 srv01 sshd[21047]: Invalid user akerjord from 107.179.95.9
Nov  7 22:23:33 srv01 sshd[21047]: Failed password for invalid user akerjord from 107.179.95.9 port 58926 ssh2
Nov  7 22:31:53 srv01 sshd[21537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.179.95.9  user=root
Nov  7 22:31:55 srv01 sshd[21537]: Failed password for root from 107.179.95.9 port 50052 ssh2
...

Nov  7 12:03:42 hanapaa sshd\[18609\]: Invalid user andree from 111.231.71.157
Nov  7 12:03:42 hanapaa sshd\[18609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.71.157
Nov  7 12:03:44 hanapaa sshd\[18609\]: Failed password for invalid user andree from 111.231.71.157 port 44432 ssh2
Nov  7 12:08:24 hanapaa sshd\[18975\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.71.157  user=root
Nov  7 12:08:26 hanapaa sshd\[18975\]: Failed password for root from 111.231.71.157 port 45182 ssh2

Nov 07 16:15:00 askasleikir sshd[38120]: Failed password for invalid user applmgr from 76.27.163.60 port 33620 ssh2

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/46.177.26.18/ 
 
 GR - 1H : (58)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : GR 
 NAME ASN : ASN3329 
 
 IP : 46.177.26.18 
 
 CIDR : 46.177.0.0/19 
 
 PREFIX COUNT : 167 
 
 UNIQUE IP COUNT : 788480 
 
 
 ATTACKS DETECTED ASN3329 :  
  1H - 1 
  3H - 2 
  6H - 13 
 12H - 20 
 24H - 39 
 
 DateTime : 2019-11-07 15:38:48 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery

Nov  7 10:59:23 auw2 sshd\[7095\]: Invalid user prueba1234 from 159.203.139.128
Nov  7 10:59:23 auw2 sshd\[7095\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128
Nov  7 10:59:25 auw2 sshd\[7095\]: Failed password for invalid user prueba1234 from 159.203.139.128 port 35284 ssh2
Nov  7 11:03:23 auw2 sshd\[7423\]: Invalid user 23dec1987 from 159.203.139.128
Nov  7 11:03:23 auw2 sshd\[7423\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.139.128

2019-11-07T23:14:57.246404mail01 postfix/smtpd[12901]: warning: unknown[185.162.235.99]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-11-07T23:15:03.435940mail01 postfix/smtpd[12901]: warning: unknown[185.162.235.99]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2019-11-07T23:15:13.340762mail01 postfix/smtpd[12901]: warning: unknown[185.162.235.99]: SASL LOGIN authentication failed: UGFzc3dvcmQ6

scan r

firewall-block, port(s): 2362/udp

Nov  7 22:17:40 server sshd\[20049\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.213.168  user=root
Nov  7 22:17:41 server sshd\[20049\]: Failed password for root from 192.241.213.168 port 58616 ssh2
Nov  7 22:35:59 server sshd\[25045\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.213.168  user=root
Nov  7 22:36:01 server sshd\[25045\]: Failed password for root from 192.241.213.168 port 58712 ssh2
Nov  7 22:39:26 server sshd\[25642\]: Invalid user mmathenge from 192.241.213.168
Nov  7 22:39:26 server sshd\[25642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.213.168 
...