Oct  8 00:53:50 kapalua sshd\[26533\]: Invalid user Micro2017 from 179.154.7.133
Oct  8 00:53:50 kapalua sshd\[26533\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.154.7.133
Oct  8 00:53:52 kapalua sshd\[26533\]: Failed password for invalid user Micro2017 from 179.154.7.133 port 47944 ssh2
Oct  8 00:59:05 kapalua sshd\[27035\]: Invalid user Senha123!@\# from 179.154.7.133
Oct  8 00:59:05 kapalua sshd\[27035\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.154.7.133

Oct  8 11:06:28 MainVPS sshd[11799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.179.165  user=root
Oct  8 11:06:31 MainVPS sshd[11799]: Failed password for root from 106.12.179.165 port 60296 ssh2
Oct  8 11:10:30 MainVPS sshd[12187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.179.165  user=root
Oct  8 11:10:32 MainVPS sshd[12187]: Failed password for root from 106.12.179.165 port 38814 ssh2
Oct  8 11:14:29 MainVPS sshd[12469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.179.165  user=root
Oct  8 11:14:31 MainVPS sshd[12469]: Failed password for root from 106.12.179.165 port 45572 ssh2
...

Oct  8 06:18:30 vps691689 sshd[22426]: Failed password for root from 148.70.204.218 port 42136 ssh2
Oct  8 06:24:37 vps691689 sshd[22647]: Failed password for root from 148.70.204.218 port 53388 ssh2
...

\[2019-10-08 02:14:56\] NOTICE\[1887\] chan_sip.c: Registration from '"705" \' failed for '51.79.81.223:5995' - Wrong password
\[2019-10-08 02:14:56\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-08T02:14:56.934-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="705",SessionID="0x7fc3ac2ed548",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.79.81.223/5995",Challenge="321becce",ReceivedChallenge="321becce",ReceivedHash="7e7893c79607355203195e78a162d252"
\[2019-10-08 02:14:56\] NOTICE\[1887\] chan_sip.c: Registration from '"705" \' failed for '51.79.81.223:5995' - Wrong password
\[2019-10-08 02:14:56\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-08T02:14:56.992-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="705",SessionID="0x7fc3ac00c388",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.79.8

2019-10-08T07:32:43.936233tmaserv sshd\[11972\]: Invalid user Tour@123 from 132.232.58.52 port 29179
2019-10-08T07:32:43.940570tmaserv sshd\[11972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.58.52
2019-10-08T07:32:45.977992tmaserv sshd\[11972\]: Failed password for invalid user Tour@123 from 132.232.58.52 port 29179 ssh2
2019-10-08T07:38:13.554035tmaserv sshd\[12211\]: Invalid user Angela2017 from 132.232.58.52 port 11786
2019-10-08T07:38:13.558106tmaserv sshd\[12211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.58.52
2019-10-08T07:38:15.900970tmaserv sshd\[12211\]: Failed password for invalid user Angela2017 from 132.232.58.52 port 11786 ssh2
...

Unauthorised access (Oct  8) SRC=180.120.36.130 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=34433 TCP DPT=8080 WINDOW=41767 SYN 
Unauthorised access (Oct  7) SRC=180.120.36.130 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=41547 TCP DPT=8080 WINDOW=39586 SYN 
Unauthorised access (Oct  6) SRC=180.120.36.130 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=49113 TCP DPT=8080 WINDOW=48452 SYN 
Unauthorised access (Oct  6) SRC=180.120.36.130 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=36684 TCP DPT=8080 WINDOW=48452 SYN

Jun  1 06:16:15 ubuntu sshd[27479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.205.93.188
Jun  1 06:16:17 ubuntu sshd[27479]: Failed password for invalid user kay from 111.205.93.188 port 38362 ssh2
Jun  1 06:19:11 ubuntu sshd[27552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.205.93.188
Jun  1 06:19:14 ubuntu sshd[27552]: Failed password for invalid user sm from 111.205.93.188 port 60946 ssh2

Automatic report - Banned IP Access

RDP Bruteforce

Jul  1 13:29:08 dallas01 sshd[10763]: Failed password for invalid user info from 111.230.135.96 port 43592 ssh2
Jul  1 13:30:25 dallas01 sshd[10979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.135.96
Jul  1 13:30:27 dallas01 sshd[10979]: Failed password for invalid user jie from 111.230.135.96 port 57750 ssh2
Jul  1 13:31:42 dallas01 sshd[11118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.230.135.96

Oct  8 12:28:15 legacy sshd[6534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.89.123
Oct  8 12:28:17 legacy sshd[6534]: Failed password for invalid user 123 from 149.56.89.123 port 46801 ssh2
Oct  8 12:37:14 legacy sshd[6811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.56.89.123
...

Fail2Ban Ban Triggered

Oct  8 07:21:12 MK-Soft-VM5 sshd[30465]: Failed password for root from 201.66.230.67 port 51189 ssh2
...

WordPress wp-login brute force :: 167.114.210.127 0.136 BYPASS [08/Oct/2019:14:51:32  1100] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools