Dec  3 11:19:36 pornomens sshd\[9419\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.129.236.66  user=root
Dec  3 11:19:38 pornomens sshd\[9419\]: Failed password for root from 149.129.236.66 port 37692 ssh2
Dec  3 11:55:42 pornomens sshd\[9811\]: Invalid user web from 149.129.236.66 port 59340
Dec  3 11:55:42 pornomens sshd\[9811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.129.236.66
...

Dec  3 12:50:40 liveconfig01 sshd[16919]: Invalid user mauseth from 110.56.18.91
Dec  3 12:50:40 liveconfig01 sshd[16919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.56.18.91
Dec  3 12:50:42 liveconfig01 sshd[16919]: Failed password for invalid user mauseth from 110.56.18.91 port 33836 ssh2
Dec  3 12:50:42 liveconfig01 sshd[16919]: Received disconnect from 110.56.18.91 port 33836:11: Bye Bye [preauth]
Dec  3 12:50:42 liveconfig01 sshd[16919]: Disconnected from 110.56.18.91 port 33836 [preauth]
Dec  3 13:13:57 liveconfig01 sshd[18032]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.56.18.91  user=mysql
Dec  3 13:13:59 liveconfig01 sshd[18032]: Failed password for mysql from 110.56.18.91 port 53316 ssh2
Dec  3 13:14:00 liveconfig01 sshd[18032]: Received disconnect from 110.56.18.91 port 53316:11: Bye Bye [preauth]
Dec  3 13:14:00 liveconfig01 sshd[18032]: Disconnected from 110.56........
-------------------------------

Nov 13 04:09:21 vtv3 sshd[8491]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.89.55
Nov 13 04:20:17 vtv3 sshd[14666]: Invalid user yaeger from 144.217.89.55 port 46704
Nov 13 04:20:17 vtv3 sshd[14666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.89.55
Nov 13 04:20:20 vtv3 sshd[14666]: Failed password for invalid user yaeger from 144.217.89.55 port 46704 ssh2
Nov 13 04:23:58 vtv3 sshd[16227]: Invalid user nobody444 from 144.217.89.55 port 56286
Nov 13 04:23:58 vtv3 sshd[16227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.89.55
Nov 13 04:34:57 vtv3 sshd[21946]: Invalid user parson from 144.217.89.55 port 56808
Nov 13 04:34:57 vtv3 sshd[21946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.89.55
Nov 13 04:35:00 vtv3 sshd[21946]: Failed password for invalid user parson from 144.217.89.55 port 56808 ssh2
Nov 13 0

2019-12-03T10:15:44.844099shield sshd\[764\]: Invalid user thepasswordofmps060315 from 173.161.242.220 port 8784
2019-12-03T10:15:44.848765shield sshd\[764\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173-161-242-220-philadelphia.hfc.comcastbusiness.net
2019-12-03T10:15:46.690981shield sshd\[764\]: Failed password for invalid user thepasswordofmps060315 from 173.161.242.220 port 8784 ssh2
2019-12-03T10:23:01.510499shield sshd\[1549\]: Invalid user 123qaz from 173.161.242.220 port 8932
2019-12-03T10:23:01.525685shield sshd\[1549\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=173-161-242-220-philadelphia.hfc.comcastbusiness.net

Invalid user fwqidc from 188.226.171.36 port 41694
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.171.36
Failed password for invalid user fwqidc from 188.226.171.36 port 41694 ssh2
Invalid user 123 from 188.226.171.36 port 53532
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.226.171.36

2019-12-03T11:19:44.655662abusebot-8.cloudsearch.cf sshd\[17144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.204.249  user=root

\[2019-12-03 07:58:02\] NOTICE\[2754\] chan_sip.c: Registration from '"1000" \' failed for '75.102.27.106:5065' - Wrong password
\[2019-12-03 07:58:02\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-03T07:58:02.668-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1000",SessionID="0x7f26c4a08808",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/75.102.27.106/5065",Challenge="35083298",ReceivedChallenge="35083298",ReceivedHash="fdca3bebcd7e4dfd937b5be606766c9b"
\[2019-12-03 08:07:49\] NOTICE\[2754\] chan_sip.c: Registration from '"1000" \' failed for '75.102.27.106:5102' - Wrong password
\[2019-12-03 08:07:49\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-03T08:07:49.789-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1000",SessionID="0x7f26c4840358",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD

fail2ban

Dec  3 14:10:31 tux-35-217 sshd\[18560\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.174.34  user=root
Dec  3 14:10:33 tux-35-217 sshd\[18560\]: Failed password for root from 122.155.174.34 port 42728 ssh2
Dec  3 14:18:28 tux-35-217 sshd\[18678\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.174.34  user=root
Dec  3 14:18:30 tux-35-217 sshd\[18678\]: Failed password for root from 122.155.174.34 port 56527 ssh2
...

2019-12-03T12:45:50.221193shield sshd\[32105\]: Invalid user carter from 51.38.232.93 port 49216
2019-12-03T12:45:50.225781shield sshd\[32105\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.ip-51-38-232.eu
2019-12-03T12:45:52.438002shield sshd\[32105\]: Failed password for invalid user carter from 51.38.232.93 port 49216 ssh2
2019-12-03T12:51:14.628808shield sshd\[32677\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.ip-51-38-232.eu  user=root
2019-12-03T12:51:16.985708shield sshd\[32677\]: Failed password for root from 51.38.232.93 port 59830 ssh2

Dec  3 18:14:15 gw1 sshd[23673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.78.129.147
Dec  3 18:14:17 gw1 sshd[23673]: Failed password for invalid user gmodserver from 121.78.129.147 port 37772 ssh2
...

Dec  3 13:01:21 game-panel sshd[9661]: Failed password for root from 106.12.105.193 port 47148 ssh2
Dec  3 13:09:50 game-panel sshd[10135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.105.193
Dec  3 13:09:52 game-panel sshd[10135]: Failed password for invalid user susha from 106.12.105.193 port 46506 ssh2

Unauthorised access (Dec  3) SRC=94.191.151.234 LEN=48 TTL=112 ID=10697 DF TCP DPT=1433 WINDOW=8192 SYN

Dec  3 05:47:42 clarabelen sshd[26777]: Invalid user luscombe from 106.13.214.108
Dec  3 05:47:42 clarabelen sshd[26777]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.214.108 
Dec  3 05:47:44 clarabelen sshd[26777]: Failed password for invalid user luscombe from 106.13.214.108 port 45072 ssh2
Dec  3 05:47:44 clarabelen sshd[26777]: Received disconnect from 106.13.214.108: 11: Bye Bye [preauth]
Dec  3 06:01:28 clarabelen sshd[27635]: Invalid user zohyah from 106.13.214.108
Dec  3 06:01:28 clarabelen sshd[27635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.214.108 
Dec  3 06:01:30 clarabelen sshd[27635]: Failed password for invalid user zohyah from 106.13.214.108 port 50884 ssh2
Dec  3 06:01:30 clarabelen sshd[27635]: Received disconnect from 106.13.214.108: 11: Bye Bye [preauth]
Dec  3 06:08:27 clarabelen sshd[29170]: Invalid user detienne from 106.13.214.108
Dec  3 06:08........
-------------------------------

Portscan or hack attempt detected by psad/fwsnort