Dec  4 06:10:03 kapalua sshd\[24578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.58.157  user=root
Dec  4 06:10:05 kapalua sshd\[24578\]: Failed password for root from 94.191.58.157 port 49892 ssh2
Dec  4 06:18:33 kapalua sshd\[25295\]: Invalid user yoyo from 94.191.58.157
Dec  4 06:18:33 kapalua sshd\[25295\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.58.157
Dec  4 06:18:35 kapalua sshd\[25295\]: Failed password for invalid user yoyo from 94.191.58.157 port 58300 ssh2

Dec  4 19:28:18 localhost sshd\[17592\]: Invalid user bruce from 112.30.185.8 port 35362
Dec  4 19:28:18 localhost sshd\[17592\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.30.185.8
Dec  4 19:28:21 localhost sshd\[17592\]: Failed password for invalid user bruce from 112.30.185.8 port 35362 ssh2
...

12/04/2019-19:53:48.503035 77.247.108.77 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 74

IP was detected trying to Brute-Force SSH, FTP, Web Apps or Hacking.

Dec  4 19:14:25 server sshd\[30518\]: Invalid user lindseth from 111.231.66.135
Dec  4 19:14:25 server sshd\[30518\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.66.135 
Dec  4 19:14:27 server sshd\[30518\]: Failed password for invalid user lindseth from 111.231.66.135 port 58124 ssh2
Dec  4 19:25:28 server sshd\[1544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.66.135  user=root
Dec  4 19:25:31 server sshd\[1544\]: Failed password for root from 111.231.66.135 port 38206 ssh2
...

Received: from localhost (5.9.36.180) by ExchangeServer.*.* (10.0.7.78) with Microsoft SMTP Server id 14.3.468.0; Wed, 4 Dec 2019 
11:01:** +0100
Received: by localhost (Postfix, from userid 0)            id B2E2EA*****; Wed,  4 Dec 2019 04:00:** -0500 (EST)
To: <*@*.de>
Subject: Der Einweisungsprozess ist obligatorisch #DE1D22H11788Z*..*
From: DeutscheBank  
MIME-Version: 1.0
Content-Type: text/html; charset="UTF-8"
Date: Wed, 4 Dec 2019 04:00:* -0500
Return-Path: root@localhost

20 attempts against mh-ssh on echoip.magehost.pro

Repeated brute force against a port

Dec  4 14:27:55 plusreed sshd[4509]: Invalid user hirdler from 164.132.196.98
...

Dec  4 14:40:33 ny01 sshd[18502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.87.254
Dec  4 14:40:36 ny01 sshd[18502]: Failed password for invalid user test from 94.191.87.254 port 49464 ssh2
Dec  4 14:46:51 ny01 sshd[19149]: Failed password for root from 94.191.87.254 port 55762 ssh2

Unauthorised access (Dec  4) SRC=117.0.32.35 LEN=52 TTL=109 ID=7240 DF TCP DPT=445 WINDOW=8192 SYN

180.250.204.162 - - [04/Dec/2019:12:13:55 +0100] "GET /awstats.pl?lang=en&output=main HTTP/1.0" 404 280 "https://oraux.pnzone.net/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36"

Dec  4 20:19:24 sbg01 sshd[6610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.97.124.200
Dec  4 20:19:26 sbg01 sshd[6610]: Failed password for invalid user server from 103.97.124.200 port 38824 ssh2
Dec  4 20:28:08 sbg01 sshd[6641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.97.124.200

Dec  4 20:28:46 vps691689 sshd[31201]: Failed password for root from 222.186.180.8 port 56078 ssh2
Dec  4 20:29:00 vps691689 sshd[31201]: error: maximum authentication attempts exceeded for root from 222.186.180.8 port 56078 ssh2 [preauth]
...

20 attempts against mh-ssh on cloud.magehost.pro