odoo8
...

May 15 00:16:54 ny01 sshd[23100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.204
May 15 00:16:56 ny01 sshd[23100]: Failed password for invalid user fiona from 120.201.125.204 port 34192 ssh2
May 15 00:19:58 ny01 sshd[23462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.204

2020-05-04T08:12:34.409862vps751288.ovh.net sshd\[6890\]: Invalid user admin from 120.201.125.204 port 59376
2020-05-04T08:12:34.421619vps751288.ovh.net sshd\[6890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.204
2020-05-04T08:12:36.564281vps751288.ovh.net sshd\[6890\]: Failed password for invalid user admin from 120.201.125.204 port 59376 ssh2
2020-05-04T08:17:25.386095vps751288.ovh.net sshd\[6899\]: Invalid user upload from 120.201.125.204 port 54681
2020-05-04T08:17:25.392921vps751288.ovh.net sshd\[6899\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.204

(sshd) Failed SSH login from 120.201.125.204 (CN/China/-): 5 in the last 3600 secs

Invalid user debian from 120.201.125.204 port 44815

Unauthorized access or intrusion attempt detected from Thor banned IP

Invalid user papoose from 120.201.125.204 port 54912

Unauthorized connection attempt detected from IP address 120.201.125.204 to port 2220 [J]

Invalid user nadir from 120.201.125.204 port 47871

Dec 31 23:40:18 xeon sshd[12143]: Failed password for invalid user gennie from 120.201.125.204 port 38228 ssh2

Dec 20 10:02:00 SilenceServices sshd[2416]: Failed password for root from 120.201.125.204 port 58717 ssh2
Dec 20 10:08:11 SilenceServices sshd[4171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.204
Dec 20 10:08:12 SilenceServices sshd[4171]: Failed password for invalid user mn from 120.201.125.204 port 49915 ssh2

Nov 25 21:50:43 vayu sshd[453105]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.204  user=r.r
Nov 25 21:50:46 vayu sshd[453105]: Failed password for r.r from 120.201.125.204 port 38707 ssh2
Nov 25 21:50:46 vayu sshd[453105]: Received disconnect from 120.201.125.204: 11: Bye Bye [preauth]
Nov 25 22:09:49 vayu sshd[459963]: Invalid user yardley from 120.201.125.204
Nov 25 22:09:49 vayu sshd[459963]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.204 
Nov 25 22:09:51 vayu sshd[459963]: Failed password for invalid user yardley from 120.201.125.204 port 53890 ssh2
Nov 25 22:09:52 vayu sshd[459963]: Received disconnect from 120.201.125.204: 11: Bye Bye [preauth]
Nov 25 22:19:56 vayu sshd[463318]: Invalid user brostigen from 120.201.125.204
Nov 25 22:19:56 vayu sshd[463318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.1........
-------------------------------

Nov 21 06:53:57 ny01 sshd[17776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.204
Nov 21 06:54:00 ny01 sshd[17776]: Failed password for invalid user arulchelam from 120.201.125.204 port 33274 ssh2
Nov 21 07:00:05 ny01 sshd[19124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.204

Jun 18 12:28:23 game-panel sshd[3079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.191
Jun 18 12:28:24 game-panel sshd[3079]: Failed password for invalid user baoyu from 120.201.125.191 port 37307 ssh2
Jun 18 12:32:20 game-panel sshd[3294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.191

Jun  3 20:15:21 vt0 sshd[34605]: Failed password for root from 120.201.125.191 port 36094 ssh2
Jun  3 20:15:21 vt0 sshd[34605]: Disconnected from authenticating user root 120.201.125.191 port 36094 [preauth]
...

Jun  2 05:21:24 h2646465 sshd[23673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.191  user=root
Jun  2 05:21:26 h2646465 sshd[23673]: Failed password for root from 120.201.125.191 port 36922 ssh2
Jun  2 05:38:13 h2646465 sshd[24588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.191  user=root
Jun  2 05:38:15 h2646465 sshd[24588]: Failed password for root from 120.201.125.191 port 35864 ssh2
Jun  2 05:40:42 h2646465 sshd[24840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.191  user=root
Jun  2 05:40:43 h2646465 sshd[24840]: Failed password for root from 120.201.125.191 port 47649 ssh2
Jun  2 05:43:08 h2646465 sshd[24935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.191  user=root
Jun  2 05:43:10 h2646465 sshd[24935]: Failed password for root from 120.201.125.191 port 59420 ssh2
Jun  2 05:45

SSH-BruteForce

SSH Brute Force

Apr 16 10:40:55 lukav-desktop sshd\[7882\]: Invalid user mt from 120.201.125.191
Apr 16 10:40:55 lukav-desktop sshd\[7882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.191
Apr 16 10:40:57 lukav-desktop sshd\[7882\]: Failed password for invalid user mt from 120.201.125.191 port 37212 ssh2
Apr 16 10:44:25 lukav-desktop sshd\[8057\]: Invalid user system from 120.201.125.191
Apr 16 10:44:25 lukav-desktop sshd\[8057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.191

Mar 17 07:58:01 itv-usvr-02 sshd[6465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.191  user=root
Mar 17 07:58:04 itv-usvr-02 sshd[6465]: Failed password for root from 120.201.125.191 port 52271 ssh2
Mar 17 08:01:37 itv-usvr-02 sshd[6579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.201.125.191  user=root
Mar 17 08:01:38 itv-usvr-02 sshd[6579]: Failed password for root from 120.201.125.191 port 43989 ssh2
Mar 17 08:05:06 itv-usvr-02 sshd[6714]: Invalid user system from 120.201.125.191 port 35709

Invalid user install from 120.201.125.191 port 44584

Distributed brute force attack

2020-01-13 dovecot_login authenticator failed for \(**REMOVED**\) \[120.201.125.238\]: 535 Incorrect authentication data \(set_id=nologin\)
2020-01-13 dovecot_login authenticator failed for \(**REMOVED**\) \[120.201.125.238\]: 535 Incorrect authentication data \(set_id=sms@**REMOVED**\)
2020-01-13 dovecot_login authenticator failed for \(**REMOVED**\) \[120.201.125.238\]: 535 Incorrect authentication data \(set_id=sms\)

Dec  2 18:26:32 cumulus sshd[4227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.193.41.173  user=backup
Dec  2 18:26:33 cumulus sshd[4227]: Failed password for backup from 190.193.41.173 port 39678 ssh2
Dec  2 18:26:34 cumulus sshd[4227]: Received disconnect from 190.193.41.173 port 39678:11: Bye Bye [preauth]
Dec  2 18:26:34 cumulus sshd[4227]: Disconnected from 190.193.41.173 port 39678 [preauth]
Dec  2 18:40:53 cumulus sshd[5022]: Invalid user cccard from 190.193.41.173 port 41206
Dec  2 18:40:53 cumulus sshd[5022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.193.41.173
Dec  2 18:40:54 cumulus sshd[5022]: Failed password for invalid user cccard from 190.193.41.173 port 41206 ssh2
Dec  2 18:40:55 cumulus sshd[5022]: Received disconnect from 190.193.41.173 port 41206:11: Bye Bye [preauth]
Dec  2 18:40:55 cumulus sshd[5022]: Disconnected from 190.193.41.173 port 41206 [preaut........
-------------------------------

[DoS attack: FIN Scan] attack packets in last 20 sec from ip [216.58.211.106], Tuesday, Dec 03,2019 23:03:08

Fail2Ban Ban Triggered

Dec  4 20:22:58 MK-Soft-VM5 sshd[2816]: Failed password for root from 80.211.133.238 port 54098 ssh2
...

Dec  4 21:19:38 legacy sshd[7378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.165.245
Dec  4 21:19:40 legacy sshd[7378]: Failed password for invalid user cynthia from 118.89.165.245 port 44306 ssh2
Dec  4 21:26:19 legacy sshd[7736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.165.245
...

Dec  4 21:46:27 sauna sshd[52335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.159.86.75
Dec  4 21:46:29 sauna sshd[52335]: Failed password for invalid user ytooga from 115.159.86.75 port 38741 ssh2
...

Dec  4 21:12:28 eventyay sshd[28776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.131.141
Dec  4 21:12:30 eventyay sshd[28776]: Failed password for invalid user xqxq from 62.234.131.141 port 58584 ssh2
Dec  4 21:18:39 eventyay sshd[29104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.131.141
...

Dec  4 20:27:36 webserver postfix/smtpd\[26851\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.133\]: 454 4.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\>
Dec  4 20:27:36 webserver postfix/smtpd\[26851\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.133\]: 454 4.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\>
Dec  4 20:27:36 webserver postfix/smtpd\[26851\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.133\]: 454 4.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\<\[181.41.216.131\]\>
Dec  4 20:27:36 webserver postfix/smtpd\[26851\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.133\]: 454 4.7.1 \: Relay access denied\; from=\

Dec  4 22:20:50 server sshd\[20020\]: Invalid user cornelle from 114.141.191.238
Dec  4 22:20:50 server sshd\[20020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.141.191.238 
Dec  4 22:20:52 server sshd\[20020\]: Failed password for invalid user cornelle from 114.141.191.238 port 53773 ssh2
Dec  4 22:29:29 server sshd\[22165\]: Invalid user wear from 114.141.191.238
Dec  4 22:29:29 server sshd\[22165\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.141.191.238 
...

port scan and connect, tcp 1433 (ms-sql-s)

Dec  4 15:17:07 plusreed sshd[17335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.54.207  user=root
Dec  4 15:17:09 plusreed sshd[17335]: Failed password for root from 106.13.54.207 port 51094 ssh2
...

Dec  4 09:40:59 hpm sshd\[16609\]: Invalid user hspice from 101.91.242.119
Dec  4 09:40:59 hpm sshd\[16609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.91.242.119
Dec  4 09:41:01 hpm sshd\[16609\]: Failed password for invalid user hspice from 101.91.242.119 port 50606 ssh2
Dec  4 09:47:15 hpm sshd\[17261\]: Invalid user idchello from 101.91.242.119
Dec  4 09:47:15 hpm sshd\[17261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.91.242.119

Dec  4 15:06:25 plusreed sshd[14432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.1.154.92  user=root
Dec  4 15:06:27 plusreed sshd[14432]: Failed password for root from 103.1.154.92 port 36296 ssh2
...

WordPress wp-login brute force :: 137.135.93.220 0.068 BYPASS [04/Dec/2019:19:27:52  0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2286 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

3389BruteforceFW21