[2020-03-01 14:41:38] NOTICE[1148] chan_sip.c: Registration from '"8171" ' failed for '45.143.220.164:5407' - Wrong password
[2020-03-01 14:41:38] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-01T14:41:38.521-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="8171",SessionID="0x7fd82c538db8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.164/5407",Challenge="1cf7f3b6",ReceivedChallenge="1cf7f3b6",ReceivedHash="740bcf3433f3c03011462b29ea999763"
[2020-03-01 14:41:38] NOTICE[1148] chan_sip.c: Registration from '"8171" ' failed for '45.143.220.164:5407' - Wrong password
[2020-03-01 14:41:38] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-03-01T14:41:38.626-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="8171",SessionID="0x7fd82c39c1e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP
...

157.52.255.157 has been banned for [spam]
...

Mar  1 15:16:19 hcbbdb sshd\[3928\]: Invalid user sarvub from 51.38.186.207
Mar  1 15:16:19 hcbbdb sshd\[3928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.ip-51-38-186.eu
Mar  1 15:16:21 hcbbdb sshd\[3928\]: Failed password for invalid user sarvub from 51.38.186.207 port 56222 ssh2
Mar  1 15:25:01 hcbbdb sshd\[4914\]: Invalid user xiaoyun from 51.38.186.207
Mar  1 15:25:01 hcbbdb sshd\[4914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.ip-51-38-186.eu

Mar  1 21:28:19 debian-2gb-nbg1-2 kernel: \[5353684.821411\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.209.0.90 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=12964 PROTO=TCP SPT=42619 DPT=6050 WINDOW=1024 RES=0x00 SYN URGP=0

'IP reached maximum auth failures for a one day block'

Mar  1 14:16:06 grey postfix/smtpd\[23581\]: NOQUEUE: reject: RCPT from host92-141-dynamic.182-80-r.retail.telecomitalia.it\[80.182.141.92\]: 554 5.7.1 Service unavailable\; Client host \[80.182.141.92\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?80.182.141.92\; from=\ to=\ proto=ESMTP helo=\
...

Automatic report - XMLRPC Attack

Mar  1 18:18:58 server sshd[4099407]: Failed password for invalid user cpaneleximscanner from 47.91.105.50 port 45802 ssh2
Mar  1 18:29:45 server sshd[4116551]: Failed password for invalid user openvpn from 47.91.105.50 port 33498 ssh2
Mar  1 18:40:28 server sshd[4134168]: Failed password for root from 47.91.105.50 port 49436 ssh2

Icarus honeypot on github

2020-03-01T08:19:41.262833linuxbox-skyline sshd[76912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.165.99  user=nobody
2020-03-01T08:19:42.875387linuxbox-skyline sshd[76912]: Failed password for nobody from 159.89.165.99 port 61879 ssh2
...

Mar  1 22:34:27 localhost sshd\[1096\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.209  user=root
Mar  1 22:34:29 localhost sshd\[1096\]: Failed password for root from 222.186.30.209 port 46944 ssh2
Mar  1 22:34:32 localhost sshd\[1096\]: Failed password for root from 222.186.30.209 port 46944 ssh2

Mar  1 20:43:47 v22018076622670303 sshd\[20416\]: Invalid user tomcat from 116.228.37.90 port 34998
Mar  1 20:43:47 v22018076622670303 sshd\[20416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.228.37.90
Mar  1 20:43:50 v22018076622670303 sshd\[20416\]: Failed password for invalid user tomcat from 116.228.37.90 port 34998 ssh2
...

Mar  1 20:39:33 game-panel sshd[27116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.70.142.220
Mar  1 20:39:35 game-panel sshd[27116]: Failed password for invalid user ertu from 66.70.142.220 port 35466 ssh2
Mar  1 20:48:37 game-panel sshd[27396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=66.70.142.220

SSH Brute-Force Attack

trying to access non-authorized port