2020-04-13T17:15:06.203655shield sshd\[20134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=15-241-47-212.rev.cloud.scaleway.com  user=root
2020-04-13T17:15:08.425558shield sshd\[20134\]: Failed password for root from 212.47.241.15 port 46898 ssh2
2020-04-13T17:20:52.195224shield sshd\[21760\]: Invalid user light from 212.47.241.15 port 55052
2020-04-13T17:20:52.199229shield sshd\[21760\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=15-241-47-212.rev.cloud.scaleway.com
2020-04-13T17:20:54.587494shield sshd\[21760\]: Failed password for invalid user light from 212.47.241.15 port 55052 ssh2

2020-04-13 19:19:36 H=(hotmail.com) [115.216.43.50] F=: Unknown user


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=115.216.43.50

Email rejected due to spam filtering

2020-04-13T17:32:21.213381shield sshd\[24452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-34-246-37-66.eu-west-1.compute.amazonaws.com  user=root
2020-04-13T17:32:23.188503shield sshd\[24452\]: Failed password for root from 34.246.37.66 port 58398 ssh2
2020-04-13T17:36:14.398154shield sshd\[25308\]: Invalid user test from 34.246.37.66 port 38458
2020-04-13T17:36:14.401935shield sshd\[25308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-34-246-37-66.eu-west-1.compute.amazonaws.com
2020-04-13T17:36:16.031278shield sshd\[25308\]: Failed password for invalid user test from 34.246.37.66 port 38458 ssh2

2020-04-13T17:12:42.392272abusebot-7.cloudsearch.cf sshd[24096]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.ip-51-38-112.eu  user=root
2020-04-13T17:12:44.672271abusebot-7.cloudsearch.cf sshd[24096]: Failed password for root from 51.38.112.45 port 47012 ssh2
2020-04-13T17:16:59.432831abusebot-7.cloudsearch.cf sshd[24356]: Invalid user demon from 51.38.112.45 port 55560
2020-04-13T17:16:59.437001abusebot-7.cloudsearch.cf sshd[24356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.ip-51-38-112.eu
2020-04-13T17:16:59.432831abusebot-7.cloudsearch.cf sshd[24356]: Invalid user demon from 51.38.112.45 port 55560
2020-04-13T17:17:01.497920abusebot-7.cloudsearch.cf sshd[24356]: Failed password for invalid user demon from 51.38.112.45 port 55560 ssh2
2020-04-13T17:21:01.183985abusebot-7.cloudsearch.cf sshd[24698]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.i
...

Apr 13 19:53:40 pve sshd[26892]: Failed password for root from 222.186.173.142 port 4420 ssh2
Apr 13 19:53:44 pve sshd[26892]: Failed password for root from 222.186.173.142 port 4420 ssh2
Apr 13 19:53:47 pve sshd[26892]: Failed password for root from 222.186.173.142 port 4420 ssh2
Apr 13 19:53:52 pve sshd[26892]: Failed password for root from 222.186.173.142 port 4420 ssh2

Apr 13 19:21:00 debian-2gb-nbg1-2 kernel: \[9057454.193377\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=165.22.187.76 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=54752 PROTO=TCP SPT=56182 DPT=28001 WINDOW=1024 RES=0x00 SYN URGP=0

Apr 13 19:34:24 vps647732 sshd[10059]: Failed password for root from 220.81.13.91 port 44923 ssh2
Apr 13 19:39:09 vps647732 sshd[10120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.81.13.91
...

Apr 13 19:20:29  sshd[10943]: Failed password for invalid user nagios from 137.74.159.147 port 55246 ssh2

Email rejected due to spam filtering

2020-04-13T19:16:41.815741v22018076590370373 sshd[4238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.201.28
2020-04-13T19:16:41.809330v22018076590370373 sshd[4238]: Invalid user gold from 51.75.201.28 port 46912
2020-04-13T19:16:44.070902v22018076590370373 sshd[4238]: Failed password for invalid user gold from 51.75.201.28 port 46912 ssh2
2020-04-13T19:20:23.429479v22018076590370373 sshd[1858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.201.28  user=root
2020-04-13T19:20:25.493996v22018076590370373 sshd[1858]: Failed password for root from 51.75.201.28 port 55622 ssh2
...

[2020-04-13 13:16:30] NOTICE[1170] chan_sip.c: Registration from '"270"' failed for '212.129.50.137:6598' - Wrong password
[2020-04-13 13:16:30] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-13T13:16:30.688-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="270",SessionID="0x7f6c08023648",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.129.50.137/6598",Challenge="35e6320f",ReceivedChallenge="35e6320f",ReceivedHash="5583a31610aa41244aa770882e44d541"
[2020-04-13 13:21:01] NOTICE[1170] chan_sip.c: Registration from '"271"' failed for '212.129.50.137:6654' - Wrong password
[2020-04-13 13:21:01] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-13T13:21:01.110-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="271",SessionID="0x7f6c08041578",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.129
...

Apr 14 00:16:01 webhost01 sshd[19127]: Failed password for root from 93.186.254.22 port 51282 ssh2
...

Apr 13 19:19:02 OPSO sshd\[18668\]: Invalid user dwairiuko from 182.61.34.155 port 57748
Apr 13 19:19:02 OPSO sshd\[18668\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.34.155
Apr 13 19:19:04 OPSO sshd\[18668\]: Failed password for invalid user dwairiuko from 182.61.34.155 port 57748 ssh2
Apr 13 19:21:03 OPSO sshd\[19579\]: Invalid user alumni from 182.61.34.155 port 50382
Apr 13 19:21:03 OPSO sshd\[19579\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.34.155

Automatic report - Port Scan Attack