2019-11-20 UTC: 4x - root(4x)

Nov 21 11:48:19 lnxmysql61 sshd[1416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.110.210
Nov 21 11:48:21 lnxmysql61 sshd[1416]: Failed password for invalid user balasingham from 104.200.110.210 port 45714 ssh2
Nov 21 11:52:09 lnxmysql61 sshd[1958]: Failed password for root from 104.200.110.210 port 53778 ssh2

(From raphaeAnteftacceva@gmail.com) Hello!  lakechirocenter.com 
 
Have you ever heard that you can send a message through the feedback form? 
These forms are located on many sites. We sent you our message in the same way, and the fact that you received and read it shows the effectiveness of this method of sending messages. 
Since people in any case will read the message received through the contact form. 
Our database includes more than 35 million websites from all over the world. 
The price of sending one million messages 49 USD. 
There is a discount program for large orders. 
 
Free trial mailing of 50,000 messages to any country of your selection. 
 
(We also provide other services. 
1. Mailing email message to corporate addresses of any country 
2. Selling the email database of any country in the world) 
 
This message is created automatically. Please use the contact details below to contact us. 
 
Contact us. 
Telegram - @FeedbackFormEU 
Skype  FeedbackForm2019 
Email - feedbackform@

Honeypot attack, port: 445, PTR: PTR record not found

Nov 21 07:23:15 dedicated sshd[5102]: Invalid user ratanam from 61.148.16.162 port 2799

Nov 21 07:05:09 server02 sshd[13821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.153.161
Nov 21 07:05:11 server02 sshd[13821]: Failed password for invalid user etiremart from 68.183.153.161 port 33454 ssh2
Nov 21 07:16:49 server02 sshd[14176]: User daemon from 68.183.153.161 not allowed because not listed in AllowUsers
Nov 21 07:16:49 server02 sshd[14176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.153.161  user=daemon

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=68.183.153.161

2019-11-21T07:22:39.507394stark.klein-stark.info postfix/smtpd\[2270\]: NOQUEUE: reject: RCPT from marmalade.shrewdmhealth.com\[81.28.100.129\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\
...

Nov 21 10:51:25   DDOS Attack: SRC=111.19.179.158 DST=[Masked] LEN=52 TOS=0x08 PREC=0x20 TTL=237  PROTO=TCP SPT=5 DPT=80 WINDOW=29200 RES=0x00 ACK RST URGP=0

Fail2Ban Ban Triggered

$f2bV_matches

Nov 21 06:53:57 ny01 sshd[17776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.204
Nov 21 06:54:00 ny01 sshd[17776]: Failed password for invalid user arulchelam from 120.201.125.204 port 33274 ssh2
Nov 21 07:00:05 ny01 sshd[19124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.204

Nov 21 15:22:29 areeb-Workstation sshd[19531]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.231.104.82
Nov 21 15:22:31 areeb-Workstation sshd[19531]: Failed password for invalid user alexandre from 101.231.104.82 port 47240 ssh2
...

Nov 21 13:15:40 MK-Soft-VM3 sshd[9142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.223.181 
Nov 21 13:15:43 MK-Soft-VM3 sshd[9142]: Failed password for invalid user axi from 188.131.223.181 port 41042 ssh2
...

2019-11-21T11:46:10.393822abusebot-5.cloudsearch.cf sshd\[19968\]: Invalid user mcaleer from 80.211.137.127 port 54472

21.11.2019 08:54:18 SMTP access blocked by firewall