165.22.247.130 - - [23/Aug/2019:03:56:39 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
165.22.247.130 - - [23/Aug/2019:03:56:40 +0200] "POST /wp-login.php HTTP/1.1" 200 1503 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
165.22.247.130 - - [23/Aug/2019:03:56:41 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
165.22.247.130 - - [23/Aug/2019:03:56:45 +0200] "POST /wp-login.php HTTP/1.1" 200 1489 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
165.22.247.130 - - [23/Aug/2019:03:56:45 +0200] "GET /wp-login.php HTTP/1.1" 200 1122 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
165.22.247.130 - - [23/Aug/2019:03:56:46 +0200] "POST /wp-login.php HTTP/1.1" 200 1491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...

Oct  7 20:57:33 inter-technics sshd[7439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.247.221  user=root
Oct  7 20:57:36 inter-technics sshd[7439]: Failed password for root from 165.22.247.221 port 55352 ssh2
Oct  7 21:04:26 inter-technics sshd[7842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.247.221  user=root
Oct  7 21:04:28 inter-technics sshd[7842]: Failed password for root from 165.22.247.221 port 26580 ssh2
Oct  7 21:06:45 inter-technics sshd[8075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.247.221  user=root
Oct  7 21:06:47 inter-technics sshd[8075]: Failed password for root from 165.22.247.221 port 64718 ssh2
...

2020-10-07T04:19:20.430599shield sshd\[16195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.247.221  user=root
2020-10-07T04:19:22.779353shield sshd\[16195\]: Failed password for root from 165.22.247.221 port 64900 ssh2
2020-10-07T04:23:36.277099shield sshd\[16762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.247.221  user=root
2020-10-07T04:23:38.103788shield sshd\[16762\]: Failed password for root from 165.22.247.221 port 17504 ssh2
2020-10-07T04:27:40.130944shield sshd\[17305\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.247.221  user=root

2020-09-22T13:18:23.065901ks3355764 sshd[21369]: Invalid user minecraft from 165.22.247.221 port 22062
2020-09-22T13:18:24.899188ks3355764 sshd[21369]: Failed password for invalid user minecraft from 165.22.247.221 port 22062 ssh2
...

(sshd) Failed SSH login from 165.22.247.221 (SG/Singapore/-): 5 in the last 3600 secs

Jan 18 02:13:55 odroid64 sshd\[13263\]: Invalid user elsearch from 165.22.247.254
Jan 18 02:13:55 odroid64 sshd\[13263\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.247.254
Feb  2 10:55:14 odroid64 sshd\[15532\]: Invalid user admin from 165.22.247.254
Feb  2 10:55:14 odroid64 sshd\[15532\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.247.254
...

Feb 12 23:49:51 mail sshd\[39384\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.247.254  user=root
...

Feb 11 05:01:59 ws26vmsma01 sshd[7616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.247.254
Feb 11 05:02:01 ws26vmsma01 sshd[7616]: Failed password for invalid user hbo from 165.22.247.254 port 35868 ssh2
...

Jan 29 09:15:14 OPSO sshd\[16316\]: Invalid user rabhasa from 165.22.247.254 port 54266
Jan 29 09:15:14 OPSO sshd\[16316\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.247.254
Jan 29 09:15:17 OPSO sshd\[16316\]: Failed password for invalid user rabhasa from 165.22.247.254 port 54266 ssh2
Jan 29 09:18:32 OPSO sshd\[16642\]: Invalid user holika from 165.22.247.254 port 53980
Jan 29 09:18:32 OPSO sshd\[16642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.247.254

Jan 26 03:11:46 eddieflores sshd\[21668\]: Invalid user t1 from 165.22.247.196
Jan 26 03:11:46 eddieflores sshd\[21668\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.247.196
Jan 26 03:11:47 eddieflores sshd\[21668\]: Failed password for invalid user t1 from 165.22.247.196 port 37540 ssh2
Jan 26 03:15:20 eddieflores sshd\[22107\]: Invalid user cip from 165.22.247.196
Jan 26 03:15:20 eddieflores sshd\[22107\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.247.196

Unauthorized connection attempt detected from IP address 165.22.247.254 to port 2220 [J]

Unauthorized connection attempt detected from IP address 165.22.247.246 to port 2220 [J]

Jan 15 01:57:27 www sshd\[87626\]: Invalid user carter from 165.22.247.254
Jan 15 01:57:27 www sshd\[87626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.247.254
Jan 15 01:57:29 www sshd\[87626\]: Failed password for invalid user carter from 165.22.247.254 port 36454 ssh2
...

Oct 19 22:15:44 ihdb003 sshd[27036]: Connection from 165.22.247.191 port 33094 on 178.128.173.140 port 22
Oct 19 22:15:44 ihdb003 sshd[27036]: Did not receive identification string from 165.22.247.191 port 33094
Oct 19 22:20:18 ihdb003 sshd[27053]: Connection from 165.22.247.191 port 34030 on 178.128.173.140 port 22
Oct 19 22:20:19 ihdb003 sshd[27053]: Invalid user cloud from 165.22.247.191 port 34030
Oct 19 22:20:19 ihdb003 sshd[27053]: Received disconnect from 165.22.247.191 port 34030:11: Normal Shutdown, Thank you for playing [preauth]
Oct 19 22:20:19 ihdb003 sshd[27053]: Disconnected from 165.22.247.191 port 34030 [preauth]
Oct 19 22:22:43 ihdb003 sshd[27061]: Connection from 165.22.247.191 port 45836 on 178.128.173.140 port 22
Oct 19 22:22:44 ihdb003 sshd[27061]: Invalid user x11 from 165.22.247.191 port 45836
Oct 19 22:22:44 ihdb003 sshd[27061]: Received disconnect from 165.22.247.191 port 45836:11: Normal Shutdown, Thank you for playing [preauth]
Oct 19 22:22:44........
-------------------------------

Brute-force attempt banned

Dec 24 05:55:11 serwer sshd\[32203\]: User dovecot from 122.3.172.89 not allowed because not listed in AllowUsers
Dec 24 05:55:11 serwer sshd\[32203\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.3.172.89  user=dovecot
Dec 24 05:55:14 serwer sshd\[32203\]: Failed password for invalid user dovecot from 122.3.172.89 port 60991 ssh2
...

12/24/2019-05:54:48.404560 193.31.201.20 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433

Dec 24 05:54:28 dedicated sshd[28289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.14.167  user=backup
Dec 24 05:54:30 dedicated sshd[28289]: Failed password for backup from 144.217.14.167 port 44395 ssh2

Dec 24 04:48:44 zeus sshd[18550]: Failed password for root from 176.31.217.184 port 54070 ssh2
Dec 24 04:51:34 zeus sshd[18611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.217.184 
Dec 24 04:51:36 zeus sshd[18611]: Failed password for invalid user klebsch from 176.31.217.184 port 56970 ssh2

Dec 24 05:54:54 mout sshd[19573]: Invalid user suriyati from 103.248.14.90 port 15709

\[2019-12-23 23:48:38\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '195.154.28.205:63881' - Wrong password
\[2019-12-23 23:48:38\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-23T23:48:38.722-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="0002",SessionID="0x7f0fb405db58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.28.205/63881",Challenge="4f61fde0",ReceivedChallenge="4f61fde0",ReceivedHash="63b816dba0db47026f67abc3d5f42912"
\[2019-12-23 23:54:59\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '195.154.28.205:64704' - Wrong password
\[2019-12-23 23:54:59\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-23T23:54:59.678-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="0002",SessionID="0x7f0fb4a5a908",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.15

Dec 24 05:55:39 srv-ubuntu-dev3 sshd[49573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.148  user=root
Dec 24 05:55:40 srv-ubuntu-dev3 sshd[49573]: Failed password for root from 222.186.175.148 port 64072 ssh2
Dec 24 05:55:50 srv-ubuntu-dev3 sshd[49573]: Failed password for root from 222.186.175.148 port 64072 ssh2
Dec 24 05:55:39 srv-ubuntu-dev3 sshd[49573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.148  user=root
Dec 24 05:55:40 srv-ubuntu-dev3 sshd[49573]: Failed password for root from 222.186.175.148 port 64072 ssh2
Dec 24 05:55:50 srv-ubuntu-dev3 sshd[49573]: Failed password for root from 222.186.175.148 port 64072 ssh2
Dec 24 05:55:39 srv-ubuntu-dev3 sshd[49573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.148  user=root
Dec 24 05:55:40 srv-ubuntu-dev3 sshd[49573]: Failed password for root from 222.186.175.148 p
...

Dec 24 10:54:41 vibhu-HP-Z238-Microtower-Workstation sshd\[6355\]: Invalid user schatz from 103.94.5.42
Dec 24 10:54:41 vibhu-HP-Z238-Microtower-Workstation sshd\[6355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42
Dec 24 10:54:43 vibhu-HP-Z238-Microtower-Workstation sshd\[6355\]: Failed password for invalid user schatz from 103.94.5.42 port 48688 ssh2
Dec 24 10:57:59 vibhu-HP-Z238-Microtower-Workstation sshd\[6519\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.94.5.42  user=root
Dec 24 10:58:02 vibhu-HP-Z238-Microtower-Workstation sshd\[6519\]: Failed password for root from 103.94.5.42 port 47844 ssh2
...

Unauthorized connection attempt detected from IP address 89.225.208.146 to port 445

Dec 24 06:02:00 srv-ubuntu-dev3 postfix/smtpd[49550]: warning: unknown[134.209.165.41]: SASL LOGIN authentication failed: authentication failure
Dec 24 06:02:02 srv-ubuntu-dev3 postfix/smtpd[49550]: warning: unknown[134.209.165.41]: SASL LOGIN authentication failed: authentication failure
Dec 24 06:02:03 srv-ubuntu-dev3 postfix/smtpd[49550]: warning: unknown[134.209.165.41]: SASL LOGIN authentication failed: authentication failure
Dec 24 06:02:04 srv-ubuntu-dev3 postfix/smtpd[49550]: warning: unknown[134.209.165.41]: SASL LOGIN authentication failed: authentication failure
Dec 24 06:02:06 srv-ubuntu-dev3 postfix/smtpd[49550]: warning: unknown[134.209.165.41]: SASL LOGIN authentication failed: authentication failure
...

Dec 24 06:25:38 sd-53420 sshd\[13578\]: User root from 222.186.175.181 not allowed because none of user's groups are listed in AllowGroups
Dec 24 06:25:39 sd-53420 sshd\[13578\]: Failed none for invalid user root from 222.186.175.181 port 23068 ssh2
Dec 24 06:25:39 sd-53420 sshd\[13578\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.181  user=root
Dec 24 06:25:41 sd-53420 sshd\[13578\]: Failed password for invalid user root from 222.186.175.181 port 23068 ssh2
Dec 24 06:25:44 sd-53420 sshd\[13578\]: Failed password for invalid user root from 222.186.175.181 port 23068 ssh2
...

Dec 24 05:54:45 MK-Soft-Root1 sshd[11822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.238.55.165 
Dec 24 05:54:47 MK-Soft-Root1 sshd[11822]: Failed password for invalid user hueller from 190.238.55.165 port 13919 ssh2
...

*Port Scan* detected from 104.248.71.7 (US/United States/-). 4 hits in the last 115 seconds

Dec 24 05:55:11 odroid64 sshd\[6815\]: User root from 182.61.104.247 not allowed because not listed in AllowUsers
Dec 24 05:55:11 odroid64 sshd\[6815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.104.247  user=root
...