2020-06-02T08:26:26.462339afi-git.jinr.ru sshd[12205]: Failed password for root from 52.55.98.75 port 58200 ssh2
2020-06-02T08:28:20.361182afi-git.jinr.ru sshd[12855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-52-55-98-75.compute-1.amazonaws.com  user=root
2020-06-02T08:28:22.730451afi-git.jinr.ru sshd[12855]: Failed password for root from 52.55.98.75 port 38736 ssh2
2020-06-02T08:29:18.505023afi-git.jinr.ru sshd[13116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ec2-52-55-98-75.compute-1.amazonaws.com  user=root
2020-06-02T08:29:20.169790afi-git.jinr.ru sshd[13116]: Failed password for root from 52.55.98.75 port 43118 ssh2
...

spam

(sshd) Failed SSH login from 157.245.207.198 (SG/Singapore/mail.courier-integrator.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun  2 05:50:49 ubnt-55d23 sshd[3170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.207.198  user=root
Jun  2 05:50:51 ubnt-55d23 sshd[3170]: Failed password for root from 157.245.207.198 port 46476 ssh2

Jun  2 06:35:05 vps687878 sshd\[25327\]: Failed password for root from 103.93.161.161 port 51926 ssh2
Jun  2 06:37:15 vps687878 sshd\[25731\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.93.161.161  user=root
Jun  2 06:37:17 vps687878 sshd\[25731\]: Failed password for root from 103.93.161.161 port 47760 ssh2
Jun  2 06:39:30 vps687878 sshd\[25983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.93.161.161  user=root
Jun  2 06:39:31 vps687878 sshd\[25983\]: Failed password for root from 103.93.161.161 port 43616 ssh2
...

Jun  2 09:43:48 ArkNodeAT sshd\[18217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.178  user=root
Jun  2 09:43:50 ArkNodeAT sshd\[18217\]: Failed password for root from 112.85.42.178 port 59988 ssh2
Jun  2 09:43:59 ArkNodeAT sshd\[18217\]: Failed password for root from 112.85.42.178 port 59988 ssh2

(imapd) Failed IMAP login from 78.140.7.9 (RU/Russia/n7-c9.client.tomica.ru): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jun  2 11:22:58 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=78.140.7.9, lip=5.63.12.44, session=

 TCP (SYN) 134.122.28.158:54248 -> port 7859, len 44

"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:

 TCP (SYN) 200.2.162.34:61000 -> port 80, len 44

Jun  2 14:35:50 webhost01 sshd[12493]: Failed password for root from 183.82.2.22 port 59430 ssh2
...

Jun  2 09:20:09 piServer sshd[10892]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.154.58.154 
Jun  2 09:20:12 piServer sshd[10892]: Failed password for invalid user passw0rd8\r from 27.154.58.154 port 13928 ssh2
Jun  2 09:22:38 piServer sshd[11061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.154.58.154 
...

Jun  1 20:47:42 mockhub sshd[23737]: Failed password for root from 122.117.19.66 port 48184 ssh2
...

Jun  2 01:20:39 server1 sshd\[21449\]: Invalid user hanna from 185.240.65.251
Jun  2 01:20:39 server1 sshd\[21449\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.240.65.251 
Jun  2 01:20:42 server1 sshd\[21449\]: Failed password for invalid user hanna from 185.240.65.251 port 6664 ssh2
Jun  2 01:29:04 server1 sshd\[23810\]: Invalid user photo from 185.240.65.251
Jun  2 01:29:04 server1 sshd\[23810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.240.65.251 
...

TCP ports : 81 / 84 / 90

"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: