Jun  1 18:15:53 santamaria sshd\[9285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.160.141  user=root
Jun  1 18:15:55 santamaria sshd\[9285\]: Failed password for root from 118.89.160.141 port 48746 ssh2
Jun  1 18:18:56 santamaria sshd\[9344\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.160.141  user=root
...

Jun  1 17:20:09 hell sshd[4313]: Failed password for root from 68.183.169.251 port 48966 ssh2
...

Unauthorized connection attempt detected from IP address 34.65.62.151 to port 23 [T]

2020-06-0115:51:541jfkr2-0005qS-Rw\<=info@whatsup2013.chH=\(localhost\)[222.135.142.82]:44078P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2994id=2c798f111a31e41734ca3c6f64b0892506ec9f0f85@whatsup2013.chT="tobill_buckingham2807"forbill_buckingham2807@yahoo.combrendonchedondo96@gmail.comkhaled.23101999@gmail.com2020-06-0115:54:021jfkt7-00061T-K4\<=info@whatsup2013.chH=\(localhost\)[177.19.164.149]:38389P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3027id=8c908d8e85ae7b88ab55a3f0fb2f16ba99738b3e7d@whatsup2013.chT="tosinghrudrandh42"forsinghrudrandh42@gmail.comjuanjosegomez528@gmail.comct.timbercreek@yahoo.com2020-06-0115:55:331jfkuR-000670-8P\<=info@whatsup2013.chH=\(localhost\)[117.176.136.11]:2609P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3047id=0c5d685c577ca95a7987712229fdc4684ba1eb5574@whatsup2013.chT="toacobenais"foracobenais@gmail.comalejandrorobles77@hotmail.com.

Bad Postfix AUTH attempts

Jun  1 08:02:00 Tower sshd[42006]: Connection from 170.84.172.13 port 62056 on 192.168.10.220 port 22 rdomain ""
Jun  1 08:02:01 Tower sshd[42006]: Invalid user administrator from 170.84.172.13 port 62056
Jun  1 08:02:02 Tower sshd[42006]: error: Could not get shadow information for NOUSER
Jun  1 08:02:02 Tower sshd[42006]: Failed password for invalid user administrator from 170.84.172.13 port 62056 ssh2
Jun  1 08:02:03 Tower sshd[42006]: Connection closed by invalid user administrator 170.84.172.13 port 62056 [preauth]

Jun  1 17:07:09 journals sshd\[55512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.144.211.235  user=root
Jun  1 17:07:11 journals sshd\[55512\]: Failed password for root from 122.144.211.235 port 44902 ssh2
Jun  1 17:10:37 journals sshd\[55882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.144.211.235  user=root
Jun  1 17:10:39 journals sshd\[55882\]: Failed password for root from 122.144.211.235 port 58730 ssh2
Jun  1 17:14:20 journals sshd\[56472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.144.211.235  user=root
...

 TCP (SYN) 209.141.37.175:53787 -> port 22, len 44

Dovecot Invalid User Login Attempt.

Jun  1 09:01:56 firewall sshd[31266]: Failed password for root from 192.3.139.56 port 48068 ssh2
Jun  1 09:02:10 firewall sshd[31272]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.3.139.56  user=root
Jun  1 09:02:12 firewall sshd[31272]: Failed password for root from 192.3.139.56 port 49066 ssh2
...

Unauthorized connection attempt from IP address 213.6.65.114 on Port 445(SMB)

2020-06-01T21:19:40.403206vps751288.ovh.net sshd\[8528\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.115.187.31  user=root
2020-06-01T21:19:42.544945vps751288.ovh.net sshd\[8528\]: Failed password for root from 109.115.187.31 port 56870 ssh2
2020-06-01T21:23:17.856759vps751288.ovh.net sshd\[8542\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.115.187.31  user=root
2020-06-01T21:23:19.456282vps751288.ovh.net sshd\[8542\]: Failed password for root from 109.115.187.31 port 34196 ssh2
2020-06-01T21:26:56.930554vps751288.ovh.net sshd\[8552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.115.187.31  user=root

ET SCAN Sipvicious User-Agent Detected (friendly-scanner) - port: 5060 proto: UDP cat: Attempted Information Leak

VoIP Brute Force - 149.202.68.132 - Auto Report
...

Port Scan detected!
...