Jul  8 08:45:11 firewall sshd[27634]: Invalid user xiaoyan from 54.36.163.141
Jul  8 08:45:13 firewall sshd[27634]: Failed password for invalid user xiaoyan from 54.36.163.141 port 36074 ssh2
Jul  8 08:48:28 firewall sshd[27723]: Invalid user marko from 54.36.163.141
...

Blocked for UA/Referrer/IP Range not allowed.

Jul  8 14:17:51 debian-2gb-nbg1-2 kernel: \[16469269.799938\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=142.93.161.85 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=37106 PROTO=TCP SPT=45577 DPT=32295 WINDOW=1024 RES=0x00 SYN URGP=0

07/08/2020-08:29:02.717324 222.186.31.83 Protocol: 6 ET SCAN Potential SSH Scan

scans once in preceeding hours on the ports (in chronological order) 27126 resulting in total of 7 scans from 167.99.0.0/16 block.

$f2bV_matches

Jul  8 12:56:46 vps1 sshd[2315224]: Invalid user shoji from 145.239.88.43 port 43808
Jul  8 12:56:49 vps1 sshd[2315224]: Failed password for invalid user shoji from 145.239.88.43 port 43808 ssh2
...

2020-07-08T11:45:15.995933abusebot-7.cloudsearch.cf sshd[27968]: Invalid user kristin from 154.92.18.55 port 39814
2020-07-08T11:45:16.000614abusebot-7.cloudsearch.cf sshd[27968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.18.55
2020-07-08T11:45:15.995933abusebot-7.cloudsearch.cf sshd[27968]: Invalid user kristin from 154.92.18.55 port 39814
2020-07-08T11:45:18.094824abusebot-7.cloudsearch.cf sshd[27968]: Failed password for invalid user kristin from 154.92.18.55 port 39814 ssh2
2020-07-08T11:48:28.187904abusebot-7.cloudsearch.cf sshd[28105]: Invalid user jiaxing from 154.92.18.55 port 37892
2020-07-08T11:48:28.191587abusebot-7.cloudsearch.cf sshd[28105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.92.18.55
2020-07-08T11:48:28.187904abusebot-7.cloudsearch.cf sshd[28105]: Invalid user jiaxing from 154.92.18.55 port 37892
2020-07-08T11:48:30.444527abusebot-7.cloudsearch.cf sshd[28105]: Fai
...

[Mon Jun 29 16:09:40 2020] - DDoS Attack From IP: 192.241.228.65 Port: 36530

Jul  8 13:11:04 heicom postfix/smtpd\[13094\]: warning: unknown\[193.169.253.27\]: SASL LOGIN authentication failed: authentication failure
Jul  8 13:23:26 heicom postfix/smtpd\[13077\]: warning: unknown\[193.169.253.27\]: SASL LOGIN authentication failed: authentication failure
Jul  8 13:35:49 heicom postfix/smtpd\[14932\]: warning: unknown\[193.169.253.27\]: SASL LOGIN authentication failed: authentication failure
Jul  8 13:48:11 heicom postfix/smtpd\[15141\]: warning: unknown\[193.169.253.27\]: SASL LOGIN authentication failed: authentication failure
...

Jul  8 13:48:13 pornomens sshd\[32596\]: Invalid user appowner from 162.196.204.142 port 48438
Jul  8 13:48:13 pornomens sshd\[32596\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.196.204.142
Jul  8 13:48:15 pornomens sshd\[32596\]: Failed password for invalid user appowner from 162.196.204.142 port 48438 ssh2
...

Jul  8 13:12:08 gestao sshd[17833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.67.240 
Jul  8 13:12:10 gestao sshd[17833]: Failed password for invalid user evelyne from 151.80.67.240 port 45626 ssh2
Jul  8 13:14:53 gestao sshd[17920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.67.240 
...

Jul  8 05:48:15 Host-KLAX-C dovecot: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=14.162.147.38, lip=185.198.26.142, TLS: Disconnected, session=
...

Jul  8 13:49:21 sip sshd[20090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.47.215
Jul  8 13:49:23 sip sshd[20090]: Failed password for invalid user svn from 206.189.47.215 port 47354 ssh2
Jul  8 14:12:08 sip sshd[28533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.47.215

Jul  8 13:48:10 mail sshd[41440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.67.66.50 
Jul  8 13:48:12 mail sshd[41440]: Failed password for invalid user zhoujingyu from 124.67.66.50 port 58571 ssh2
...