Banned for a week because repeated abuses, for example SSH, but not only

SSH bruteforce

2020-09-02 UTC: (43x) - al,andres,anurag,beo,courier,ec2-user(2x),gangadhar,git,jader,leon,magno,memcached,odoo,pokus,praveen,reward,riana,root(12x),sistemas,ten,teresa,test,test1,tom,tomcat,user,ventas,vinci,zihang,zj,zy

[2020-09-03 03:43:56] NOTICE[1185] chan_sip.c: Registration from '"101" ' failed for '108.62.121.180:5384' - Wrong password
[2020-09-03 03:43:56] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-03T03:43:56.970-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="101",SessionID="0x7f10c4989438",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/108.62.121.180/5384",Challenge="30aa57d9",ReceivedChallenge="30aa57d9",ReceivedHash="8f4dbf526569510f95710468f4fddb1f"
[2020-09-03 03:43:57] NOTICE[1185] chan_sip.c: Registration from '"101" ' failed for '108.62.121.180:5384' - Wrong password
[2020-09-03 03:43:57] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-03T03:43:57.056-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="101",SessionID="0x7f10c4539a48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/108.6
...

Sep  2 21:23:54 srv01 postfix/smtpd\[25375\]: warning: unknown\[111.72.194.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  2 21:24:05 srv01 postfix/smtpd\[25375\]: warning: unknown\[111.72.194.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  2 21:24:21 srv01 postfix/smtpd\[25375\]: warning: unknown\[111.72.194.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  2 21:24:39 srv01 postfix/smtpd\[25375\]: warning: unknown\[111.72.194.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  2 21:24:51 srv01 postfix/smtpd\[25375\]: warning: unknown\[111.72.194.154\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...

Sep  3 11:03:41 vps639187 sshd\[6363\]: Invalid user ten from 51.68.122.147 port 41828
Sep  3 11:03:41 vps639187 sshd\[6363\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.122.147
Sep  3 11:03:43 vps639187 sshd\[6363\]: Failed password for invalid user ten from 51.68.122.147 port 41828 ssh2
...

(sshd) Failed SSH login from 94.209.159.252 (NL/Netherlands/North Holland/Amsterdam/94-209-159-252.cable.dynamic.v4.ziggo.nl): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  2 12:41:49 atlas sshd[26205]: Invalid user admin from 94.209.159.252 port 46183
Sep  2 12:41:52 atlas sshd[26205]: Failed password for invalid user admin from 94.209.159.252 port 46183 ssh2
Sep  2 12:41:53 atlas sshd[26216]: Invalid user admin from 94.209.159.252 port 46283
Sep  2 12:41:55 atlas sshd[26216]: Failed password for invalid user admin from 94.209.159.252 port 46283 ssh2
Sep  2 12:41:56 atlas sshd[26222]: Invalid user admin from 94.209.159.252 port 46389

(sshd) Failed SSH login from 172.81.241.92 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  2 22:31:04 server sshd[21384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.241.92  user=root
Sep  2 22:31:06 server sshd[21384]: Failed password for root from 172.81.241.92 port 58246 ssh2
Sep  2 22:39:11 server sshd[23923]: Invalid user postgres from 172.81.241.92 port 55070
Sep  2 22:39:13 server sshd[23923]: Failed password for invalid user postgres from 172.81.241.92 port 55070 ssh2
Sep  2 22:41:40 server sshd[24617]: Invalid user mary from 172.81.241.92 port 56360

Sep  3 10:28:26 lnxweb62 sshd[4519]: Failed password for root from 190.98.231.87 port 49006 ssh2
Sep  3 10:28:26 lnxweb62 sshd[4519]: Failed password for root from 190.98.231.87 port 49006 ssh2

Sep  3 08:58:40 vps sshd[29164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.15.91 
Sep  3 08:58:42 vps sshd[29164]: Failed password for invalid user bruna from 154.83.15.91 port 45705 ssh2
Sep  3 09:00:41 vps sshd[29239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.83.15.91 
...

[portscan] Port scan

(sshd) Failed SSH login from 51.15.177.173 (FR/France/Île-de-France/Vitry-sur-Seine/51-15-177-173.rev.poneytelecom.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  2 21:30:27 atlas sshd[28202]: Invalid user mayan from 51.15.177.173 port 50366
Sep  2 21:30:28 atlas sshd[28202]: Failed password for invalid user mayan from 51.15.177.173 port 50366 ssh2
Sep  2 21:44:36 atlas sshd[31529]: Invalid user or from 51.15.177.173 port 52198
Sep  2 21:44:38 atlas sshd[31529]: Failed password for invalid user or from 51.15.177.173 port 52198 ssh2
Sep  2 21:50:06 atlas sshd[364]: Invalid user lds from 51.15.177.173 port 57854

2020-09-03 04:41:23.997642-0500  localhost sshd[82953]: Failed password for root from 185.220.102.244 port 20096 ssh2

(mod_security) mod_security (id:210730) triggered by 103.131.71.172 (VN/Vietnam/bot-103-131-71-172.coccoc.com): 5 in the last 3600 secs

Triggered by Fail2Ban at Ares web server