Nov807:29:10server2pure-ftpd:\(\?@117.22.68.46\)[WARNING]Authenticationfailedforuser[ticinoscout]Nov807:29:17server2pure-ftpd:\(\?@117.22.68.46\)[WARNING]Authenticationfailedforuser[ticinoscout]Nov807:29:29server2pure-ftpd:\(\?@117.22.68.46\)[WARNING]Authenticationfailedforuser[www]Nov807:29:38server2pure-ftpd:\(\?@117.22.68.46\)[WARNING]Authenticationfailedforuser[www]Nov807:29:49server2pure-ftpd:\(\?@117.22.68.46\)[WARNING]Authenticationfailedforuser[www]Nov807:30:01server2pure-ftpd:\(\?@117.22.68.46\)[WARNING]Authenticationfailedforuser[www]Nov807:30:10server2pure-ftpd:\(\?@117.22.68.46\)[WARNING]Authenticationfailedforuser[www]Nov807:30:16server2pure-ftpd:\(\?@117.22.68.46\)[WARNING]Authenticationfailedforuser[www]

POST /wp-login.php HTTP/1.1 200 1827 Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0

Nov  8 07:30:55 MK-Soft-VM7 sshd[4390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.161.135 
Nov  8 07:30:57 MK-Soft-VM7 sshd[4390]: Failed password for invalid user 1q2w3e4r5t from 209.97.161.135 port 50084 ssh2
...

Nov  8 06:59:15 web8 sshd\[31136\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.22.184  user=root
Nov  8 06:59:17 web8 sshd\[31136\]: Failed password for root from 154.92.22.184 port 50710 ssh2
Nov  8 07:03:25 web8 sshd\[1009\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.22.184  user=root
Nov  8 07:03:26 web8 sshd\[1009\]: Failed password for root from 154.92.22.184 port 33164 ssh2
Nov  8 07:07:48 web8 sshd\[3493\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.22.184  user=root

11/08/2019-02:11:08.928925 222.186.180.223 Protocol: 6 ET SCAN Potential SSH Scan

Nov  8 00:03:39 mailman postfix/smtpd[24687]: NOQUEUE: reject: RCPT from unknown[95.57.225.134]: 554 5.7.1 Service unavailable; Client host [95.57.225.134] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/95.57.225.134; from= to= proto=ESMTP helo=<[95.57.225.134]>
Nov  8 00:30:43 mailman postfix/smtpd[24919]: NOQUEUE: reject: RCPT from unknown[95.57.225.134]: 554 5.7.1 Service unavailable; Client host [95.57.225.134] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/95.57.225.134; from= to= proto=ESMTP helo=<[95.57.225.134]>

Nov  8 07:30:59 MK-Soft-VM3 sshd[8240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.243.100 
Nov  8 07:31:01 MK-Soft-VM3 sshd[8240]: Failed password for invalid user jatin from 119.29.243.100 port 47482 ssh2
...

11/08/2019-07:30:32.768676 176.10.107.180 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 17

Nov  7 21:01:02 eddieflores sshd\[9662\]: Invalid user fms from 203.121.116.11
Nov  7 21:01:02 eddieflores sshd\[9662\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.121.116.11
Nov  7 21:01:05 eddieflores sshd\[9662\]: Failed password for invalid user fms from 203.121.116.11 port 57836 ssh2
Nov  7 21:05:27 eddieflores sshd\[10000\]: Invalid user gon from 203.121.116.11
Nov  7 21:05:27 eddieflores sshd\[10000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.121.116.11

(From robertJag@gmail.com) The legendary "Eldorado"investment Fund has returned to the international cryptocurrency market in your country. 
 
10% BTC to each member of the club " Eldorado" 
10 % accrual to your bitcoin wallet every 2 days. 
9% Daily bonus to each member of the affiliate program. 
 
Free registration only on the official website of " Eldorado" 
https://eldor.cc#engbtc

Nov  8 07:26:01 ns381471 sshd[27192]: Failed password for uucp from 122.192.33.102 port 42200 ssh2

Nov  8 07:30:11 MK-Soft-VM7 sshd[4379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.149.79.247 
Nov  8 07:30:13 MK-Soft-VM7 sshd[4379]: Failed password for invalid user ftpd from 93.149.79.247 port 51574 ssh2
...

Nov  6 13:42:04 server6 sshd[26546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c83-255-117-106.bredband.comhem.se  user=r.r
Nov  6 13:42:05 server6 sshd[26546]: Failed password for r.r from 83.255.117.106 port 34058 ssh2
Nov  6 13:42:05 server6 sshd[26546]: Received disconnect from 83.255.117.106: 11: Bye Bye [preauth]
Nov  6 13:48:23 server6 sshd[31015]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c83-255-117-106.bredband.comhem.se
Nov  6 13:48:25 server6 sshd[31015]: Failed password for invalid user ddtddt from 83.255.117.106 port 35626 ssh2
Nov  6 13:48:25 server6 sshd[31015]: Received disconnect from 83.255.117.106: 11: Bye Bye [preauth]
Nov  6 13:52:35 server6 sshd[1834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c83-255-117-106.bredband.comhem.se  user=r.r
Nov  6 13:52:37 server6 sshd[1834]: Failed password for r.r from 83.255.117........
-------------------------------

2019-11-08T07:22:26.248198abusebot-5.cloudsearch.cf sshd\[29189\]: Invalid user zw from 114.67.228.184 port 58038

Nov  8 07:30:32 jane sshd[14133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.54.73.98 
Nov  8 07:30:35 jane sshd[14133]: Failed password for invalid user ftpuser from 92.54.73.98 port 50780 ssh2
...