Jan  6 16:51:06 server6 sshd[3260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109-92-88-111.dynamic.isp.telekom.rs
Jan  6 16:51:07 server6 sshd[3260]: Failed password for invalid user rkf from 109.92.88.111 port 41867 ssh2
Jan  6 16:51:07 server6 sshd[3260]: Received disconnect from 109.92.88.111: 11: Bye Bye [preauth]
Jan  6 17:05:42 server6 sshd[18708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109-92-88-111.dynamic.isp.telekom.rs
Jan  6 17:05:44 server6 sshd[18708]: Failed password for invalid user adm from 109.92.88.111 port 54366 ssh2
Jan  6 17:05:48 server6 sshd[18708]: Received disconnect from 109.92.88.111: 11: Bye Bye [preauth]
Jan  6 17:10:38 server6 sshd[22260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109-92-88-111.dynamic.isp.telekom.rs
Jan  6 17:10:39 server6 sshd[22260]: Failed password for invalid user ap from 109.92.........
-------------------------------

\[2020-01-08 07:06:55\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '81.171.107.159:55090' - Wrong password
\[2020-01-08 07:06:55\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-08T07:06:55.755-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1298",SessionID="0x7f0fb4a5a908",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.107.159/55090",Challenge="2806b727",ReceivedChallenge="2806b727",ReceivedHash="629621210f218c4a34f9ca7331e49c15"
\[2020-01-08 07:07:12\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '81.171.107.159:65201' - Wrong password
\[2020-01-08 07:07:12\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-08T07:07:12.370-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="896",SessionID="0x7f0fb408ed28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.1

Jan  8 13:01:23 MK-Soft-VM5 sshd[6435]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=146.66.244.246 
Jan  8 13:01:25 MK-Soft-VM5 sshd[6435]: Failed password for invalid user vyduna from 146.66.244.246 port 41204 ssh2
...

Unauthorized connection attempt from IP address 177.8.172.218 on Port 445(SMB)

(sshd) Failed SSH login from 186.103.223.10 (CL/Chile/186-103-223-10.static.tie.cl): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jan  8 05:01:28 svr sshd[3673410]: Invalid user archiva from 186.103.223.10 port 44428
Jan  8 05:01:31 svr sshd[3673410]: Failed password for invalid user archiva from 186.103.223.10 port 44428 ssh2
Jan  8 05:14:37 svr sshd[3716739]: Invalid user odroid from 186.103.223.10 port 53593
Jan  8 05:14:39 svr sshd[3716739]: Failed password for invalid user odroid from 186.103.223.10 port 53593 ssh2
Jan  8 05:18:22 svr sshd[3728766]: Invalid user hzk from 186.103.223.10 port 40576

01/07/2020-23:46:08.963690 159.203.201.91 Protocol: 6 ET DROP Dshield Block Listed Source group 1

Jan  8 03:15:42 linuxvps sshd\[48322\]: Invalid user nol from 222.122.94.10
Jan  8 03:15:42 linuxvps sshd\[48322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.122.94.10
Jan  8 03:15:44 linuxvps sshd\[48322\]: Failed password for invalid user nol from 222.122.94.10 port 40130 ssh2
Jan  8 03:21:37 linuxvps sshd\[52309\]: Invalid user xbb from 222.122.94.10
Jan  8 03:21:37 linuxvps sshd\[52309\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.122.94.10

Unauthorized connection attempt detected from IP address 177.173.218.136 to port 22

Jan  8 05:46:10 mail sshd\[4548\]: Invalid user teodora from 133.242.155.85
Jan  8 05:46:10 mail sshd\[4548\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=133.242.155.85
Jan  8 05:46:13 mail sshd\[4548\]: Failed password for invalid user teodora from 133.242.155.85 port 41490 ssh2
...

$f2bV_matches

Jan  8 03:59:00 firewall sshd[30035]: Invalid user bw from 108.191.86.23
Jan  8 03:59:02 firewall sshd[30035]: Failed password for invalid user bw from 108.191.86.23 port 38590 ssh2
Jan  8 04:04:05 firewall sshd[30163]: Invalid user wbh from 108.191.86.23
...

Unauthorized connection attempt from IP address 222.65.231.185 on Port 445(SMB)

Jan  8 08:46:40 firewall sshd[13439]: Failed password for root from 222.186.173.238 port 10980 ssh2
Jan  8 08:46:55 firewall sshd[13439]: error: maximum authentication attempts exceeded for root from 222.186.173.238 port 10980 ssh2 [preauth]
Jan  8 08:46:55 firewall sshd[13439]: Disconnecting: Too many authentication failures [preauth]
...

1578462207 - 01/08/2020 06:43:27 Host: 185.222.93.84/185.222.93.84 Port: 445 TCP Blocked

[portscan] udp/1900 [ssdp]
*(RWIN=-)(01081307)