Chinese spam

I glanced through the log files of CSF's temporary IP bans and "surprise, surprise" — the majority of the entries originated from China. For the most part these entries are standard brute force attempts, nothing to get too excited about.

The included logs are all heavily cut-down / snipped.

Here's one sample log taken from a VM running a Meteor application:

183.3.202.108 # lfd: (sshd) Failed SSH login from 183.3.202.108 (CN/China/-): 5 in the last 3600 secs - Thu Jan 21 08:32:09 2016  
184.170.137.244 # lfd: (sshd) Failed SSH login from 184.170.137.244 (CA/Canada/-): 5 in the last 3600 secs - Fri Jan 22 04:13:03 2016  
189.57.57.218 # lfd: (sshd) Failed SSH login from 189.57.57.218 (BR/Brazil/189-57-57-218.customer.tdatabrasil.net.br): 5 in the last 3600 secs - Fri Jan 22 04:37:04 2016  
183.3.202.106 # lfd: (sshd) Failed SSH login from 183.3.202.106 (CN/China/-): 5 in the last 3600 secs - Fri Jan 22 11:20:08 2016  
184.170.137.238 # lfd: (sshd) Failed SSH login from 184.170.137.238 (CA/Canada/-): 5 in the last 3600 secs - Sat Jan 23 02:40:11 2016  
45.55.229.30 # lfd: (sshd) Failed SSH login from 45.55.229.30 (US/United States/vmtrace.ether.camp): 5 in the last 3600 secs - Sun Jan 24 07:25:23 2016  
177.204.152.54 # lfd: (sshd) Failed SSH login from 177.204.152.54 (BR/Brazil/177.204.152.54.static.gvt.net.br): 5 in the last 3600 secs - Sun Jan 24 13:58:20 2016  
85.25.103.12 # lfd: (sshd) Failed SSH login from 85.25.103.12 (DE/Germany/atlantic797.serverprofi24.eu): 5 in the last 3600 secs - Sun Jan 24 14:04:20 2016  
183.3.202.109 # lfd: (sshd) Failed SSH login from 183.3.202.109 (CN/China/-): 5 in the last 3600 secs - Tue Jan 26 11:39:08 2016  
123.25.21.23 # lfd: (sshd) Failed SSH login from 123.25.21.23 (VN/Vietnam/static.vnpt-hanoi.com.vn): 5 in the last 3600 secs - Wed Jan 27 00:10:11 2016  
46.151.53.217 # lfd: (sshd) Failed SSH login from 46.151.53.217 (UA/Ukraine/-): 5 in the last 3600 secs - Wed Jan 27 08:44:03 2016  
125.16.16.22 # lfd: (sshd) Failed SSH login from 125.16.16.22 (IN/India/-): 5 in the last 3600 secs - Wed Jan 27 23:08:18 2016  
222.186.34.242 # lfd: (sshd) Failed SSH login from 222.186.34.242 (CN/China/-): 5 in the last 3600 secs - Thu Jan 28 06:01:02 2016  
85.93.0.77 # lfd: (sshd) Failed SSH login from 85.93.0.77 (RO/Romania/hostby.guardomicro.com): 5 in the last 3600 secs - Sat Jan 30 13:00:22 2016  
183.3.202.107 # lfd: (sshd) Failed SSH login from 183.3.202.107 (CN/China/-): 5 in the last 3600 secs - Sat Jan 30 13:31:23 2016  
212.12.30.149 # lfd: (sshd) Failed SSH login from 212.12.30.149 (RU/Russian Federation/rev-149-30-12-212.tula.net): 5 in the last 3600 secs - Sat Jan 30 14:15:45 2016  
222.186.56.103 # lfd: (sshd) Failed SSH login from 222.186.56.103 (CN/China/-): 5 in the last 3600 secs - Mon Feb  1 01:40:02 2016  
76.175.104.213 # lfd: (sshd) Failed SSH login from 76.175.104.213 (US/United States/cpe-76-175-104-213.socal.res.rr.com): 5 in the last 3600 secs - Tue Feb  2 19:35:39 2016  
222.186.34.87 # lfd: (sshd) Failed SSH login from 222.186.34.87 (CN/China/-): 5 in the last 3600 secs - Wed Feb  3 12:56:47 2016  
46.148.22.10 # lfd: (sshd) Failed SSH login from 46.148.22.10 (UA/Ukraine/-): 5 in the last 3600 secs - Wed Feb  3 21:01:37 2016  
58.248.49.140 # lfd: (sshd) Failed SSH login from 58.248.49.140 (CN/China/-): 5 in the last 3600 secs - Fri Feb  5 18:30:23 2016  
173.165.25.142 # lfd: (sshd) Failed SSH login from 173.165.25.142 (US/United States/173-165-25-142-Illinois.hfc.comcastbusiness.net): 5 in the last 3600 secs - Fri Feb  5 20:47:39 2016  
183.3.202.112 # lfd: (sshd) Failed SSH login from 183.3.202.112 (CN/China/-): 5 in the last 3600 secs - Sat Feb  6 10:44:29 2016  
78.21.139.144 # lfd: (sshd) Failed SSH login from 78.21.139.144 (BE/Belgium/78-21-139-144.access.telenet.be): 5 in the last 3600 secs - Sun Feb  7 04:49:26 2016  
91.201.236.114 # lfd: (sshd) Failed SSH login from 91.201.236.114 (UA/Ukraine/-): 5 in the last 3600 secs - Sun Feb  7 11:20:26 2016  
222.186.56.70 # lfd: (sshd) Failed SSH login from 222.186.56.70 (CN/China/-): 5 in the last 3600 secs - Tue Feb  9 01:37:49 2016  
123.59.55.83 # lfd: (sshd) Failed SSH login from 123.59.55.83 (CN/China/-): 5 in the last 3600 secs - Tue Feb  9 07:27:10 2016  
180.211.164.131 # lfd: (sshd) Failed SSH login from 180.211.164.131 (BD/Bangladesh/-): 5 in the last 3600 secs - Wed Feb 10 15:00:14 2016  
61.175.198.188 # lfd: (sshd) Failed SSH login from 61.175.198.188 (CN/China/-): 5 in the last 3600 secs - Wed Feb 10 17:30:16 2016  
218.75.108.204 # lfd: (sshd) Failed SSH login from 218.75.108.204 (CN/China/-): 5 in the last 3600 secs - Wed Feb 10 19:48:07 2016  
120.132.57.175 # lfd: (sshd) Failed SSH login from 120.132.57.175 (CN/China/-): 5 in the last 3600 secs - Wed Feb 10 20:26:09 2016  
212.129.48.134 # lfd: (sshd) Failed SSH login from 212.129.48.134 (FR/France/212-129-48-134.rev.poneytelecom.eu): 5 in the last 3600 secs - Thu Feb 11 05:08:21 2016  
222.186.56.47 # lfd: (sshd) Failed SSH login from 222.186.56.47 (CN/China/-): 5 in the last 3600 secs - Fri Feb 12 05:21:11 2016  
222.186.56.120 # lfd: (sshd) Failed SSH login from 222.186.56.120 (CN/China/-): 5 in the last 3600 secs - Fri Feb 12 12:15:55 2016  

Sample taken from a mail server:

177.220.212.90 # lfd: (sshd) Failed SSH login from 177.220.212.90 (BR/Brazil/177-220-212-90.static.stech.net.br): 5 in the last 3600 secs - Tue Dec  8 06:44:03 2015  
43.229.53.67 # lfd: (sshd) Failed SSH login from 43.229.53.67 (HK/Hong Kong/-): 5 in the last 3600 secs - Tue Dec  8 07:01:50 2015  
62.210.8.61 # lfd: (sshd) Failed SSH login from 62.210.8.61 (FR/France/62-210-8-61.rev.poneytelecom.eu): 5 in the last 3600 secs - Tue Dec  8 13:43:17 2015  
193.104.41.54 # lfd: (sshd) Failed SSH login from 193.104.41.54 (MD/Moldova, Republic of/-): 5 in the last 3600 secs - Tue Dec  8 17:47:34 2015  
222.186.21.166 # lfd: (sshd) Failed SSH login from 222.186.21.166 (CN/China/-): 5 in the last 3600 secs - Wed Dec  9 09:42:22 2015  
95.80.124.40 # lfd: (sshd) Failed SSH login from 95.80.124.40 (RU/Russian Federation/40.124.80.95.krasnodar.ptl.ru): 5 in the last 3600 secs - Wed Dec  9 17:34:47 2015  
178.49.197.48 # lfd: (sshd) Failed SSH login from 178.49.197.48 (RU/Russian Federation/l49-197-48.cn.ru): 5 in the last 3600 secs - Wed Dec  9 19:19:26 2015  
179.106.81.184 # lfd: (sshd) Failed SSH login from 179.106.81.184 (BR/Brazil/179-106-81-184.redenets.com.br): 5 in the last 3600 secs - Wed Dec  9 19:20:41 2015  
109.161.221.221 # lfd: (sshd) Failed SSH login from 109.161.221.221 (BH/Bahrain/-): 5 in the last 3600 secs - Wed Dec  9 23:18:22 2015  
171.251.41.53 # lfd: (sshd) Failed SSH login from 171.251.41.53 (VN/Vietnam/-): 5 in the last 3600 secs - Thu Dec 10 00:40:15 2015  
195.154.32.57 # lfd: (sshd) Failed SSH login from 195.154.32.57 (FR/France/195-154-32-57.rev.poneytelecom.eu): 5 in the last 3600 secs - Thu Dec 10 15:16:44 2015  
14.167.159.51 # lfd: (sshd) Failed SSH login from 14.167.159.51 (VN/Vietnam/-): 5 in the last 3600 secs - Thu Dec 10 17:17:51 2015  
222.186.21.34 # lfd: (sshd) Failed SSH login from 222.186.21.34 (CN/China/-): 5 in the last 3600 secs - Sun Dec 13 22:02:38 2015  
222.186.34.91 # lfd: (sshd) Failed SSH login from 222.186.34.91 (CN/China/-): 5 in the last 3600 secs - Mon Dec 14 03:38:27 2015  
223.105.0.131 # lfd: (sshd) Failed SSH login from 223.105.0.131 (CN/China/-): 5 in the last 3600 secs - Tue Dec 15 02:18:56 2015  
222.186.21.70 # lfd: (sshd) Failed SSH login from 222.186.21.70 (CN/China/-): 5 in the last 3600 secs - Tue Dec 15 20:57:31 2015  
184.172.128.196 # lfd: (sshd) Failed SSH login from 184.172.128.196 (US/United States/c4.80.acb8.ip4.static.sl-reverse.com): 5 in the last 3600 secs - Fri Dec 18 07:06:39 2015  
46.148.22.10 # lfd: (sshd) Failed SSH login from 46.148.22.10 (UA/Ukraine/-): 5 in the last 3600 secs - Sat Dec 19 08:30:16 2015  
62.210.30.8 # lfd: (sshd) Failed SSH login from 62.210.30.8 (FR/France/62-210-30-8.rev.poneytelecom.eu): 5 in the last 3600 secs - Sat Dec 19 13:37:17 2015  
176.60.66.139 # lfd: (sshd) Failed SSH login from 176.60.66.139 (BY/Belarus/-): 5 in the last 3600 secs - Sat Dec 19 16:35:08 2015  
212.129.59.201 # lfd: (sshd) Failed SSH login from 212.129.59.201 (FR/France/212-129-59-201.rev.poneytelecom.eu): 5 in the last 3600 secs - Sat Dec 19 19:54:50 2015  
103.237.145.179 # lfd: (sshd) Failed SSH login from 103.237.145.179 (VN/Vietnam/-): 5 in the last 3600 secs - Sun Dec 20 13:40:10 2015  
104.243.16.126 # lfd: (sshd) Failed SSH login from 104.243.16.126 (US/United States/-): 5 in the last 3600 secs - Sun Dec 20 14:27:44 2015  
128.199.174.70 # lfd: (sshd) Failed SSH login from 128.199.174.70 (SG/Singapore/-): 5 in the last 3600 secs - Mon Dec 21 12:38:30 2015  
115.76.105.2 # lfd: (sshd) Failed SSH login from 115.76.105.2 (VN/Vietnam/adsl.viettel.vn): 5 in the last 3600 secs - Wed Dec 23 09:33:57 2015  
163.20.154.49 # lfd: (sshd) Failed SSH login from 163.20.154.49 (TW/Taiwan/-): 5 in the last 3600 secs - Wed Dec 23 20:41:29 2015  
120.105.49.211 # lfd: (sshd) Failed SSH login from 120.105.49.211 (TW/Taiwan/-): 5 in the last 3600 secs - Thu Dec 24 07:55:18 2015  
222.186.56.42 # lfd: (sshd) Failed SSH login from 222.186.56.42 (CN/China/-): 5 in the last 3600 secs - Thu Dec 24 21:14:17 2015  
116.110.69.166 # lfd: (sshd) Failed SSH login from 116.110.69.166 (VN/Vietnam/-): 5 in the last 3600 secs - Sat Dec 26 01:48:32 2015  
74.208.174.89 # lfd: (sshd) Failed SSH login from 74.208.174.89 (US/United States/united-internet.company): 5 in the last 3600 secs - Sat Dec 26 15:28:02 2015  
216.52.0.100 # lfd: (sshd) Failed SSH login from 216.52.0.100 (US/United States/-): 5 in the last 3600 secs - Sat Dec 26 17:46:43 2015  
85.93.0.77 # lfd: (sshd) Failed SSH login from 85.93.0.77 (RO/Romania/hostby.guardomicro.com): 5 in the last 3600 secs - Sat Dec 26 20:18:32 2015  
69.197.143.181 # lfd: (sshd) Failed SSH login from 69.197.143.181 (US/United States/sighsbloke.com): 5 in the last 3600 secs - Sat Dec 26 21:54:35 2015  
188.143.232.17 # lfd: (sshd) Failed SSH login from 188.143.232.17 (RU/Russian Federation/-): 5 in the last 3600 secs - Sun Dec 27 21:13:39 2015  
222.186.21.208 # lfd: (sshd) Failed SSH login from 222.186.21.208 (CN/China/-): 5 in the last 3600 secs - Mon Dec 28 00:08:29 2015  
117.4.240.22 # lfd: (sshd) Failed SSH login from 117.4.240.22 (VN/Vietnam/-): 5 in the last 3600 secs - Mon Dec 28 00:31:11 2015  
183.56.173.20 # lfd: (sshd) Failed SSH login from 183.56.173.20 (CN/China/-): 5 in the last 3600 secs - Mon Dec 28 16:23:49 2015  
222.186.56.89 # lfd: (sshd) Failed SSH login from 222.186.56.89 (CN/China/-): 5 in the last 3600 secs - Mon Dec 28 18:47:45 2015  
222.186.21.71 # lfd: (sshd) Failed SSH login from 222.186.21.71 (CN/China/-): 5 in the last 3600 secs - Tue Dec 29 00:58:52 2015  
222.186.56.87 # lfd: (sshd) Failed SSH login from 222.186.56.87 (CN/China/-): 5 in the last 3600 secs - Tue Dec 29 11:13:04 2015  
120.72.118.37 # lfd: (sshd) Failed SSH login from 120.72.118.37 (VN/Vietnam/-): 5 in the last 3600 secs - Thu Dec 31 05:37:56 2015  
46.151.52.195 # lfd: (sshd) Failed SSH login from 46.151.52.195 (UA/Ukraine/-): 5 in the last 3600 secs - Thu Dec 31 17:53:23 2015  
222.186.34.225 # lfd: (sshd) Failed SSH login from 222.186.34.225 (CN/China/-): 5 in the last 3600 secs - Fri Jan  1 12:43:51 2016  
104.197.13.210 # lfd: (sshd) Failed SSH login from 104.197.13.210 (US/United States/210.13.197.104.bc.googleusercontent.com): 5 in the last 3600 secs - Fri Jan  1 16:24:56 2016  
91.201.236.114 # lfd: (sshd) Failed SSH login from 91.201.236.114 (UA/Ukraine/-): 5 in the last 3600 secs - Fri Jan  1 21:37:33 2016  
45.32.44.161 # lfd: (sshd) Failed SSH login from 45.32.44.161 (NL/Netherlands/-): 5 in the last 3600 secs - Sat Jan  2 08:18:07 2016  
116.110.76.137 # lfd: (sshd) Failed SSH login from 116.110.76.137 (VN/Vietnam/-): 5 in the last 3600 secs - Sat Jan  2 11:56:05 2016  
176.121.5.146 # lfd: (sshd) Failed SSH login from 176.121.5.146 (UA/Ukraine/-): 5 in the last 3600 secs - Mon Jan  4 02:36:50 2016  
74.208.70.153 # lfd: (sshd) Failed SSH login from 74.208.70.153 (US/United States/u18775308.onlinehome-server.com): 5 in the last 3600 secs - Mon Jan  4 08:48:11 2016  
50.22.145.10 # lfd: (sshd) Failed SSH login from 50.22.145.10 (US/United States/a.91.1632.ip4.static.sl-reverse.com): 5 in the last 3600 secs - Tue Jan  5 10:40:06 2016  
212.129.2.234 # lfd: (sshd) Failed SSH login from 212.129.2.234 (FR/France/212-129-2-234.rev.poneytelecom.eu): 5 in the last 3600 secs - Wed Jan  6 06:19:38 2016  
77.51.102.147 # lfd: (sshd) Failed SSH login from 77.51.102.147 (RU/Russian Federation/-): 5 in the last 3600 secs - Thu Jan  7 01:31:24 2016  
186.219.99.12 # lfd: (sshd) Failed SSH login from 186.219.99.12 (BR/Brazil/186-219-99-12.cabonnet.com.br): 5 in the last 3600 secs - Thu Jan  7 02:29:16 2016  
120.72.118.18 # lfd: (sshd) Failed SSH login from 120.72.118.18 (VN/Vietnam/-): 5 in the last 3600 secs - Thu Jan  7 14:48:01 2016  
218.9.183.70 # lfd: (sshd) Failed SSH login from 218.9.183.70 (CN/China/-): 5 in the last 3600 secs - Sat Jan  9 17:15:03 2016  
218.4.117.26 # lfd: (sshd) Failed SSH login from 218.4.117.26 (CN/China/-): 5 in the last 3600 secs - Sun Jan 10 16:20:22 2016  
202.198.129.78 # lfd: (sshd) Failed SSH login from 202.198.129.78 (CN/China/-): 5 in the last 3600 secs - Sun Jan 10 18:34:32 2016  
74.208.238.93 # lfd: (sshd) Failed SSH login from 74.208.238.93 (US/United States/u18361439.onlinehome-server.com): 5 in the last 3600 secs - Mon Jan 11 19:01:11 2016  
27.254.67.157 # lfd: (sshd) Failed SSH login from 27.254.67.157 (TH/Thailand/-): 5 in the last 3600 secs - Mon Jan 11 19:26:38 2016  
58.210.107.96 # lfd: (sshd) Failed SSH login from 58.210.107.96 (CN/China/-): 5 in the last 3600 secs - Tue Jan 12 00:59:12 2016  
5.63.119.34 # lfd: (sshd) Failed SSH login from 5.63.119.34 (KZ/Kazakhstan/5.63.119.34.telecom.kz): 5 in the last 3600 secs - Tue Jan 12 09:55:35 2016  
117.39.60.82 # lfd: (sshd) Failed SSH login from 117.39.60.82 (CN/China/-): 5 in the last 3600 secs - Wed Jan 13 16:09:02 2016  
178.129.247.23 # lfd: (sshd) Failed SSH login from 178.129.247.23 (RU/Russian Federation/h178-129-247-23.dyn.bashtel.ru): 5 in the last 3600 secs - Wed Jan 13 20:58:40 2016  
1.34.83.14 # lfd: (sshd) Failed SSH login from 1.34.83.14 (TW/Taiwan/1-34-83-14.HINET-IP.hinet.net): 5 in the last 3600 secs - Thu Jan 14 00:45:01 2016  
221.194.44.150 # lfd: (sshd) Failed SSH login from 221.194.44.150 (CN/China/-): 5 in the last 3600 secs - Thu Jan 14 05:08:49 2016  
189.1.161.45 # lfd: (sshd) Failed SSH login from 189.1.161.45 (BR/Brazil/-): 5 in the last 3600 secs - Thu Jan 14 07:27:01 2016  
58.214.233.179 # lfd: (sshd) Failed SSH login from 58.214.233.179 (CN/China/-): 5 in the last 3600 secs - Thu Jan 14 14:24:07 2016  
125.88.177.95 # lfd: (sshd) Failed SSH login from 125.88.177.95 (CN/China/-): 5 in the last 3600 secs - Thu Jan 14 17:36:30 2016  
111.73.46.231 # lfd: (sshd) Failed SSH login from 111.73.46.231 (CN/China/-): 5 in the last 3600 secs - Fri Jan 15 00:45:42 2016  
85.93.0.76 # lfd: (sshd) Failed SSH login from 85.93.0.76 (RO/Romania/hostby.guardomicro.com): 5 in the last 3600 secs - Sat Jan 16 06:22:47 2016  
119.147.137.10 # lfd: (sshd) Failed SSH login from 119.147.137.10 (CN/China/-): 5 in the last 3600 secs - Sat Jan 16 19:47:40 2016  
91.121.239.25 # lfd: (sshd) Failed SSH login from 91.121.239.25 (FR/France/-): 5 in the last 3600 secs - Sun Jan 17 03:04:24 2016  
216.9.9.245 # lfd: (sshd) Failed SSH login from 216.9.9.245 (US/United States/mail.infusedrealestate.com): 5 in the last 3600 secs - Sun Jan 17 13:49:21 2016  
210.86.225.236 # lfd: (sshd) Failed SSH login from 210.86.225.236 (VN/Vietnam/ci225-236.netnam.vn): 5 in the last 3600 secs - Sun Jan 17 14:05:43 2016  
198.12.85.180 # lfd: (sshd) Failed SSH login from 198.12.85.180 (US/United States/198-12-85-180-host.colocrossing.com): 5 in the last 3600 secs - Mon Jan 18 00:05:33 2016  
213.254.12.125 # lfd: (sshd) Failed SSH login from 213.254.12.125 (IT/Italy/-): 5 in the last 3600 secs - Tue Jan 19 17:01:43 2016  
184.170.137.244 # lfd: (sshd) Failed SSH login from 184.170.137.244 (CA/Canada/-): 5 in the last 3600 secs - Fri Jan 22 10:12:59 2016  
184.170.137.238 # lfd: (sshd) Failed SSH login from 184.170.137.238 (CA/Canada/-): 5 in the last 3600 secs - Sat Jan 23 12:00:08 2016  
183.3.202.106 # lfd: (sshd) Failed SSH login from 183.3.202.106 (CN/China/-): 5 in the last 3600 secs - Sat Jan 23 20:53:01 2016  
46.148.18.162 # lfd: (sshd) Failed SSH login from 46.148.18.162 (UA/Ukraine/-): 5 in the last 3600 secs - Sun Jan 24 10:27:40 2016  
111.204.26.22 # lfd: (sshd) Failed SSH login from 111.204.26.22 (CN/China/-): 5 in the last 3600 secs - Sun Jan 24 10:50:21 2016  
45.55.229.30 # lfd: (sshd) Failed SSH login from 45.55.229.30 (US/United States/vmtrace.ether.camp): 5 in the last 3600 secs - Sun Jan 24 13:12:43 2016  
202.174.187.206 # lfd: (sshd) Failed SSH login from 202.174.187.206 (NZ/New Zealand/-): 5 in the last 3600 secs - Sun Jan 24 16:59:28 2016  
222.189.40.171 # lfd: (sshd) Failed SSH login from 222.189.40.171 (CN/China/-): 5 in the last 3600 secs - Tue Jan 26 06:37:36 2016  
183.3.202.109 # lfd: (sshd) Failed SSH login from 183.3.202.109 (CN/China/-): 5 in the last 3600 secs - Tue Jan 26 17:42:33 2016  
123.25.21.23 # lfd: (sshd) Failed SSH login from 123.25.21.23 (VN/Vietnam/static.vnpt-hanoi.com.vn): 5 in the last 3600 secs - Wed Jan 27 06:10:18 2016  
125.16.16.22 # lfd: (sshd) Failed SSH login from 125.16.16.22 (IN/India/-): 5 in the last 3600 secs - Thu Jan 28 05:08:35 2016  
31.172.213.4 # lfd: (sshd) Failed SSH login from 31.172.213.4 (RU/Russian Federation/4.net-31.172.213.kaluga.ru): 5 in the last 3600 secs - Sat Jan 30 16:48:49 2016  
183.3.202.107 # lfd: (sshd) Failed SSH login from 183.3.202.107 (CN/China/-): 5 in the last 3600 secs - Sat Jan 30 19:31:17 2016  
212.12.30.149 # lfd: (sshd) Failed SSH login from 212.12.30.149 (RU/Russian Federation/rev-149-30-12-212.tula.net): 5 in the last 3600 secs - Sat Jan 30 19:56:50 2016  
85.93.5.65 # lfd: (sshd) Failed SSH login from 85.93.5.65 (AE/United Arab Emirates/hosted-by.emgoldexnet.com): 5 in the last 3600 secs - Mon Feb  1 12:26:36 2016  
76.175.104.213 # lfd: (sshd) Failed SSH login from 76.175.104.213 (US/United States/cpe-76-175-104-213.socal.res.rr.com): 5 in the last 3600 secs - Wed Feb  3 01:35:41 2016  
185.110.132.54 # lfd: (sshd) Failed SSH login from 185.110.132.54 (UA/Ukraine/-): 5 in the last 3600 secs - Wed Feb  3 20:38:10 2016  
58.248.49.140 # lfd: (sshd) Failed SSH login from 58.248.49.140 (CN/China/-): 5 in the last 3600 secs - Sat Feb  6 00:30:20 2016  
173.165.25.142 # lfd: (sshd) Failed SSH login from 173.165.25.142 (US/United States/173-165-25-142-Illinois.hfc.comcastbusiness.net): 5 in the last 3600 secs - Sat Feb  6 01:27:17 2016  
183.3.202.112 # lfd: (sshd) Failed SSH login from 183.3.202.112 (CN/China/-): 5 in the last 3600 secs - Sat Feb  6 16:44:22 2016  
120.197.52.8 # lfd: (sshd) Failed SSH login from 120.197.52.8 (CN/China/-): 5 in the last 3600 secs - Wed Feb 10 08:35:24 2016  
190.210.67.153 # lfd: (sshd) Failed SSH login from 190.210.67.153 (AR/Argentina/customer-static-210-67-153.iplannetworks.net): 5 in the last 3600 secs - Fri Feb 12 19:24:31 2016  

Luckily for me I have sat up the mail server to be strenuous when it comes to spam; so I receive practically no spam, 99,99% of the incoming e-mail is legit.

This is from one of the VPSes for k0nslIRC:

183.3.202.112 # lfd: (sshd) Failed SSH login from 183.3.202.112 (CN/China/-): 5 in the last 3600 secs - Sat Feb 13 11:39:57 2016  
180.211.164.131 # lfd: (sshd) Failed SSH login from 180.211.164.131 (BD/Bangladesh/-): 5 in the last 3600 secs - Sat Feb 13 11:51:53 2016  
151.225.140.80 # lfd: (sshd) Failed SSH login from 151.225.140.80 (GB/United Kingdom/97e18c50.skybroadband.com): 5 in the last 3600 secs - Sat Feb 13 17:43:35 2016  
61.175.198.188 # lfd: (sshd) Failed SSH login from 61.175.198.188 (CN/China/-): 5 in the last 3600 secs - Sun Feb 14 07:23:00 2016  
222.186.56.120 # lfd: (sshd) Failed SSH login from 222.186.56.120 (CN/China/-): 5 in the last 3600 secs - Sun Feb 14 10:51:54 2016  
31.7.237.222 # lfd: (sshd) Failed SSH login from 31.7.237.222 (RU/Russian Federation/237.mega.nn.ru): 5 in the last 3600 secs - Mon Feb 15 18:06:00 2016  
91.76.31.21 # lfd: (sshd) Failed SSH login from 91.76.31.21 (RU/Russian Federation/ppp91-76-31-21.pppoe.mtu-net.ru): 5 in the last 3600 secs - Mon Feb 15 18:08:35 2016  
177.19.171.147 # lfd: (sshd) Failed SSH login from 177.19.171.147 (BR/Brazil/trevisanconcept.static.gvt.net.br): 5 in the last 3600 secs - Mon Feb 15 18:28:51 2016  
117.253.235.243 # lfd: (sshd) Failed SSH login from 117.253.235.243 (IN/India/-): 5 in the last 3600 secs - Mon Feb 15 19:08:03 2016  
50.21.180.215 # lfd: (sshd) Failed SSH login from 50.21.180.215 (US/United States/u18912349.onlinehome-server.com): 5 in the last 3600 secs - Tue Feb 16 08:32:08 2016  
186.216.247.170 # lfd: (sshd) Failed SSH login from 186.216.247.170 (BR/Brazil/-): 5 in the last 3600 secs - Wed Feb 17 04:55:23 2016  
191.5.121.107 # lfd: (sshd) Failed SSH login from 191.5.121.107 (BR/Brazil/-): 5 in the last 3600 secs - Wed Feb 17 05:24:39 2016  
123.63.232.50 # lfd: (sshd) Failed SSH login from 123.63.232.50 (IN/India/-): 5 in the last 3600 secs - Wed Feb 17 06:23:07 2016  
173.193.56.236 # lfd: (sshd) Failed SSH login from 173.193.56.236 (US/United States/ec.38.c1ad.ip4.static.sl-reverse.com): 5 in the last 3600 secs - Wed Feb 17 07:00:49 2016  
212.83.183.88 # lfd: (sshd) Failed SSH login from 212.83.183.88 (FR/France/212-83-183-88.rev.poneytelecom.eu): 3 in the last 3600 secs - Sun Feb 14 11:41:45 2016  
40.129.22.174 # lfd: (sshd) Failed SSH login from 40.129.22.174 (US/United States/h174.22.129.40.static.ip.windstream.net): 3 in the last 3600 secs - Mon Feb 15 16:55:29 2016  
14.102.94.227 # lfd: 14.102.94.227 (IN/India/-), 3 distributed sshd attacks on account [admin] in the last 3600 secs - Mon Feb 15 23:20:24 2016  
186.216.247.221 # lfd: 186.216.247.221 (BR/Brazil/-), 3 distributed sshd attacks on account [admin] in the last 3600 secs - Mon Feb 15 23:20:25 2016  
58.65.176.10 # lfd: 58.65.176.10 (PK/Pakistan/mbl-65-176-10.dsl.net.pk), 3 distributed sshd attacks on account [admin] in the last 3600 secs - Mon Feb 15 23:20:26 2016  
43.228.93.49 # lfd: 43.228.93.49 (IN/India/-), 3 distributed sshd attacks on account [admin] in the last 3600 secs - Mon Feb 15 23:50:21 2016  
14.142.2.179 # lfd: 14.142.2.179 (IN/India/14.142.2.179.static-Delhi.vsnl.net.in), 3 distributed sshd attacks on account [admin] in the last 3600 secs - Mon Feb 15 23:50:22 2016  
95.165.50.119 # lfd: 95.165.50.119 (RU/Russian Federation/ppp95-165-50-119.pppoe.spdop.ru), 3 distributed sshd attacks on account [admin] in the last 3600 secs - Mon Feb 15 23:50:23 2016  
83.174.230.58 # lfd: 83.174.230.58 (RU/Russian Federation/h83-174-230-58.static.bashtel.ru), 3 distributed sshd attacks on account [admin] in the last 3600 secs - Tue Feb 16 00:20:15 2016  
49.204.25.126 # lfd: 49.204.25.126 (IN/India/126.25.204.49-ras.beamtele.net), 3 distributed sshd attacks on account [admin] in the last 3600 secs - Tue Feb 16 00:20:17 2016  
31.173.68.150 # lfd: 31.173.68.150 (RU/Russian Federation/clients-31.173.67.150.misp.ru), 3 distributed sshd attacks on account [admin] in the last 3600 secs - Tue Feb 16 00:20:18 2016  
178.234.37.40 # lfd: 178.234.37.40 (RU/Russian Federation/X40.bbn07-037.lipetsk.ru), 3 distributed sshd attacks on account [user] in the last 3600 secs - Tue Feb 16 01:51:04 2016  
91.78.161.82 # lfd: 91.78.161.82 (RU/Russian Federation/ppp91-78-161-82.pppoe.mtu-net.ru), 3 distributed sshd attacks on account [user] in the last 3600 secs - Tue Feb 16 01:51:05 2016  
78.36.6.101 # lfd: 78.36.6.101 (RU/Russian Federation/ppp78-36-6-101.pppoe.murmansk.dslavangard.ru), 3 distributed sshd attacks on account [user] in the last 3600 secs - Tue Feb 16 01:51:06 2016  
178.239.62.157 # lfd: (sshd) Failed SSH login from 178.239.62.157 (NL/Netherlands/-): 3 in the last 3600 secs - Tue Feb 16 20:06:54 2016  
117.255.250.165 # lfd: 117.255.250.165 (IN/India/-), 3 distributed sshd attacks on account [admin] in the last 3600 secs - Wed Feb 17 12:18:24 2016  
109.161.210.225 # lfd: 109.161.210.225 (BH/Bahrain/-), 3 distributed sshd attacks on account [admin] in the last 3600 secs - Wed Feb 17 12:18:25 2016  
201.140.222.216 # lfd: 201.140.222.216 (BR/Brazil/201-140-222-216.wifi.twtelecom.com.br), 3 distributed sshd attacks on account [admin] in the last 3600 secs - Wed Feb 17 12:18:27 2016  
191.191.4.26 # lfd: 191.191.4.26 (BR/Brazil/bfbf041a.virtua.com.br), 3 distributed sshd attacks on account [admin] in the last 3600 secs - Wed Feb 17 12:40:38 2016  
186.216.250.171 # lfd: 186.216.250.171 (BR/Brazil/-), 3 distributed sshd attacks on account [admin] in the last 3600 secs - Wed Feb 17 12:40:39 2016  
182.74.224.70 # lfd: 182.74.224.70 (IN/India/-), 3 distributed sshd attacks on account [admin] in the last 3600 secs - Wed Feb 17 12:40:50 2016  
91.77.211.165 # lfd: 91.77.211.165 (RU/Russian Federation/ppp91-77-211-165.pppoe.mtu-net.ru), 3 distributed sshd attacks on account [user] in the last 3600 secs - Wed Feb 17 14:36:39 2016  
186.216.251.155 # lfd: 186.216.251.155 (BR/Brazil/-), 3 distributed sshd attacks on account [user] in the last 3600 secs - Wed Feb 17 14:36:40 2016  
177.53.44.244 # lfd: 177.53.44.244 (BR/Brazil/177-53-44-244.ligo.net.br), 3 distributed sshd attacks on account [user] in the last 3600 secs - Wed Feb 17 14:36:40 2016  
60.173.14.144 # lfd: (sshd) Failed SSH login from 60.173.14.144 (CN/China/-): 5 in the last 3600 secs - Sun Feb 14 19:38:20 2016  
79.99.7.139 # lfd: (sshd) Failed SSH login from 79.99.7.139 (SE/Sweden/79-99-7-139.serverhotell.net): 5 in the last 3600 secs - Mon Feb 15 00:56:19 2016  
117.253.153.56 # lfd: (sshd) Failed SSH login from 117.253.153.56 (IN/India/-): 5 in the last 3600 secs - Mon Feb 15 11:43:08 2016  
182.75.99.50 # lfd: (sshd) Failed SSH login from 182.75.99.50 (IN/India/nsg-static-50.99.75.182-airtel.com): 5 in the last 3600 secs - Mon Feb 15 11:48:52 2016  
191.6.164.66 # lfd: (sshd) Failed SSH login from 191.6.164.66 (BR/Brazil/66.164.6.191.omastertelecom.com.br): 5 in the last 3600 secs - Mon Feb 15 11:59:42 2016  
117.245.79.105 # lfd: (sshd) Failed SSH login from 117.245.79.105 (IN/India/-): 5 in the last 3600 secs - Mon Feb 15 12:12:03 2016  
37.132.202.88 # lfd: (sshd) Failed SSH login from 37.132.202.88 (ES/Spain/raul12pcnas.ddns.jazztel.es): 5 in the last 3600 secs - Mon Feb 15 19:27:12 2016  
113.195.145.70 # lfd: (sshd) Failed SSH login from 113.195.145.70 (CN/China/70.145.195.113.adsl-pool.jx.chinaunicom.com): 5 in the last 3600 secs - Mon Feb 15 23:00:44 2016  
59.47.5.235 # lfd: (sshd) Failed SSH login from 59.47.5.235 (CN/China/235.5.47.59.broad.bx.ln.dynamic.163data.com.cn): 5 in the last 3600 secs - Tue Feb 16 14:46:39 2016  
182.74.34.134 # lfd: (sshd) Failed SSH login from 182.74.34.134 (IN/India/-): 5 in the last 3600 secs - Wed Feb 17 03:47:06 2016  
117.253.222.130 # lfd: (sshd) Failed SSH login from 117.253.222.130 (IN/India/-): 5 in the last 3600 secs - Wed Feb 17 04:07:35 2016  
124.109.54.140 # lfd: (sshd) Failed SSH login from 124.109.54.140 (PK/Pakistan/mbl-109-54-140.dsl.net.pk): 5 in the last 3600 secs - Wed Feb 17 04:47:16 2016  
218.87.109.253 # lfd: (sshd) Failed SSH login from 218.87.109.253 (CN/China/-): 5 in the last 3600 secs - Wed Feb 17 10:20:59 2016  

As is obvious most fails are attempts at accessing SSH, which is locked down using keys anyway ;)

Comment: