$f2bV_matches

Mar  3 18:01:43 MK-Soft-VM3 sshd[6128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.213.220.70 
Mar  3 18:01:45 MK-Soft-VM3 sshd[6128]: Failed password for invalid user git from 139.213.220.70 port 37693 ssh2
...

Fail2Ban Ban Triggered

Lines containing failures of 220.149.231.165
Mar  2 15:12:22 www sshd[28405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.149.231.165  user=mysql
Mar  2 15:12:24 www sshd[28405]: Failed password for mysql from 220.149.231.165 port 39348 ssh2
Mar  2 15:12:24 www sshd[28405]: Received disconnect from 220.149.231.165 port 39348:11: Normal Shutdown [preauth]
Mar  2 15:12:24 www sshd[28405]: Disconnected from authenticating user mysql 220.149.231.165 port 39348 [preauth]
Mar  2 15:15:47 www sshd[28761]: Invalid user nimara from 220.149.231.165 port 37024
Mar  2 15:15:47 www sshd[28761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.149.231.165
Mar  2 15:15:50 www sshd[28761]: Failed password for invalid user nimara from 220.149.231.165 port 37024 ssh2
Mar  2 15:15:50 www sshd[28761]: Received disconnect from 220.149.231.165 port 37024:11: Normal Shutdown [preauth]
Mar  2 15:15:50 www........
------------------------------

suspicious action Tue, 03 Mar 2020 10:22:06 -0300

REQUESTED PAGE: /wp-admin/admin.php?page=miwoftp&option=com_miwoftp&action=download&dir=/&item=wp-config.php&order=name&srt=yes

Mar  3 18:36:20 markkoudstaal sshd[13531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.215.1.181
Mar  3 18:36:22 markkoudstaal sshd[13531]: Failed password for invalid user postgres from 113.215.1.181 port 48068 ssh2
Mar  3 18:41:08 markkoudstaal sshd[14339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.215.1.181

Mar  3 20:21:16 vpn01 sshd[6615]: Failed password for root from 222.186.173.154 port 54576 ssh2
Mar  3 20:21:19 vpn01 sshd[6615]: Failed password for root from 222.186.173.154 port 54576 ssh2
...

2020-02-14T04:56:00.345Z CLOSE host=1.1.184.121 port=58905 fd=4 time=20.015 bytes=3
...

firewall-block, port(s): 2375/tcp, 8081/tcp, 8088/tcp

Too many connections or unauthorized access detected from Arctic banned ip

Lines containing failures of 34.92.230.129
Mar  3 14:01:58 mx-in-01 sshd[17950]: Invalid user act from 34.92.230.129 port 58436
Mar  3 14:01:58 mx-in-01 sshd[17950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.230.129 
Mar  3 14:02:00 mx-in-01 sshd[17950]: Failed password for invalid user act from 34.92.230.129 port 58436 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=34.92.230.129

2020-03-03T20:29:11.963126v22018076590370373 sshd[1240]: Invalid user aion from 133.242.132.151 port 44672
2020-03-03T20:29:11.968379v22018076590370373 sshd[1240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.242.132.151
2020-03-03T20:29:11.963126v22018076590370373 sshd[1240]: Invalid user aion from 133.242.132.151 port 44672
2020-03-03T20:29:13.463257v22018076590370373 sshd[1240]: Failed password for invalid user aion from 133.242.132.151 port 44672 ssh2
2020-03-03T20:32:04.881955v22018076590370373 sshd[12719]: Invalid user yyg from 133.242.132.151 port 39230
...

Feb 25 03:35:04 mercury smtpd[1148]: 43d2bef86a933dd8 smtp event=failed-command address=101.53.144.150 host=e2e-41-150.e2enetworks.net.in command="RCPT to:" result="550 Invalid recipient"
...

Mar  3 14:21:55 grey postfix/smtpd\[27767\]: NOQUEUE: reject: RCPT from mine.saparel.com\[63.82.48.87\]: 554 5.7.1 Service unavailable\; Client host \[63.82.48.87\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[63.82.48.87\]\; from=\ to=\ proto=ESMTP helo=\
...