Sep 21 17:50:42 eventyay sshd[25697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.4.33
Sep 21 17:50:45 eventyay sshd[25697]: Failed password for invalid user snadendla from 132.232.4.33 port 47660 ssh2
Sep 21 17:57:58 eventyay sshd[25849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.4.33
...

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/41.144.137.63/ 
 ZA - 1H : (14)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : ZA 
 NAME ASN : ASN5713 
 
 IP : 41.144.137.63 
 
 CIDR : 41.144.0.0/13 
 
 PREFIX COUNT : 117 
 
 UNIQUE IP COUNT : 1794304 
 
 
 WYKRYTE ATAKI Z ASN5713 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 2 
 24H - 2 
 
 INFO : SERVER - ABB - Looking for resource vulnerabilities Detected and Blocked by ADMIN  - data recovery

Unauthorized SSH login attempts

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-21 11:51:46,073 INFO [amun_request_handler] PortScan Detected on Port: 445 (103.206.138.95)

Sep 21 08:05:01 hcbb sshd\[17138\]: Invalid user rl from 178.128.21.45
Sep 21 08:05:01 hcbb sshd\[17138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.21.45
Sep 21 08:05:03 hcbb sshd\[17138\]: Failed password for invalid user rl from 178.128.21.45 port 56734 ssh2
Sep 21 08:09:51 hcbb sshd\[17612\]: Invalid user ubuntu from 178.128.21.45
Sep 21 08:09:51 hcbb sshd\[17612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.21.45

Sep 21 18:02:02 MK-Soft-VM4 sshd[7320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.97.99 
Sep 21 18:02:04 MK-Soft-VM4 sshd[7320]: Failed password for invalid user xe from 40.73.97.99 port 54192 ssh2
...

2019-09-21T09:55:25.5103521495-001 sshd\[50015\]: Failed password for invalid user tc from 109.51.146.4 port 33728 ssh2
2019-09-21T10:08:44.8255961495-001 sshd\[50922\]: Invalid user marcelo from 109.51.146.4 port 49564
2019-09-21T10:08:44.8285641495-001 sshd\[50922\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=a109-51-146-4.cpe.netcabo.pt
2019-09-21T10:08:46.5005881495-001 sshd\[50922\]: Failed password for invalid user marcelo from 109.51.146.4 port 49564 ssh2
2019-09-21T10:13:01.9843211495-001 sshd\[51220\]: Invalid user karika from 109.51.146.4 port 35868
2019-09-21T10:13:01.9875121495-001 sshd\[51220\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=a109-51-146-4.cpe.netcabo.pt
...

$f2bV_matches

Sep 21 03:04:05 cumulus sshd[27755]: Did not receive identification string from 51.38.200.249 port 41868
Sep 21 03:04:05 cumulus sshd[27756]: Did not receive identification string from 51.38.200.249 port 37632
Sep 21 03:04:05 cumulus sshd[27757]: Did not receive identification string from 51.38.200.249 port 42234
Sep 21 03:04:05 cumulus sshd[27758]: Did not receive identification string from 51.38.200.249 port 55054
Sep 21 03:04:05 cumulus sshd[27759]: Did not receive identification string from 51.38.200.249 port 48626
Sep 21 03:04:05 cumulus sshd[27760]: Did not receive identification string from 51.38.200.249 port 58322
Sep 21 03:04:05 cumulus sshd[27761]: Did not receive identification string from 51.38.200.249 port 41100
Sep 21 03:04:47 cumulus sshd[27766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.200.249  user=r.r
Sep 21 03:04:48 cumulus sshd[27768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui........
-------------------------------

Sep 21 14:53:59 dedicated sshd[14661]: Invalid user aleida from 68.183.213.39 port 32810

\[2019-09-21 13:42:48\] NOTICE\[2270\] chan_sip.c: Registration from '\' failed for '77.247.110.199:62560' - Wrong password
\[2019-09-21 13:42:48\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-21T13:42:48.891-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1000086",SessionID="0x7fcd8c197298",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.199/62560",Challenge="4b788f45",ReceivedChallenge="4b788f45",ReceivedHash="f18929b50bd605e0f7e4270b21c487e5"
\[2019-09-21 13:42:49\] NOTICE\[2270\] chan_sip.c: Registration from '\' failed for '77.247.110.199:57246' - Wrong password
\[2019-09-21 13:42:49\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-21T13:42:49.207-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1000086",SessionID="0x7fcd8c1c4788",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-21 11:47:46,230 INFO [amun_request_handler] PortScan Detected on Port: 445 (37.145.241.172)

Sep 21 18:24:54 rpi sshd[31029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.151.239 
Sep 21 18:24:57 rpi sshd[31029]: Failed password for invalid user spen from 54.37.151.239 port 51208 ssh2

WordPress wp-login brute force :: 165.22.115.137 0.052 BYPASS [22/Sep/2019:00:49:10  1000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 4630 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-21 11:50:56,143 INFO [amun_request_handler] PortScan Detected on Port: 445 (185.57.249.36)