[2020-06-04 10:15:58] NOTICE[1288] chan_sip.c: Registration from '' failed for '185.130.184.207:63832' - Wrong password
[2020-06-04 10:15:58] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-04T10:15:58.809-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3419",SessionID="0x7f4d7403c148",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.130.184.207/63832",Challenge="37bd5592",ReceivedChallenge="37bd5592",ReceivedHash="6b2c9c3da3cdf71b2f3c9565b0c282cc"
[2020-06-04 10:16:27] NOTICE[1288] chan_sip.c: Registration from '' failed for '185.130.184.207:61092' - Wrong password
[2020-06-04 10:16:27] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-04T10:16:27.377-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2345",SessionID="0x7f4d74371bc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.130
...

ET DROP Dshield Block Listed Source group 1 - port: 33398 proto: TCP cat: Misc Attack

Repeated brute force against a port

SpamScore above: 10.0

2020-06-04T14:06:55.841706shield sshd\[2390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.10.199  user=root
2020-06-04T14:06:57.853511shield sshd\[2390\]: Failed password for root from 123.207.10.199 port 46192 ssh2
2020-06-04T14:11:29.425272shield sshd\[4486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.10.199  user=root
2020-06-04T14:11:32.054040shield sshd\[4486\]: Failed password for root from 123.207.10.199 port 39834 ssh2
2020-06-04T14:16:11.275388shield sshd\[6300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.10.199  user=root

Jun  2 18:17:53 HOST sshd[31965]: Address 184.22.139.26 maps to 184-22-139-0.24.myaisfibre.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jun  2 18:17:53 HOST sshd[31965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.22.139.26  user=r.r
Jun  2 18:17:54 HOST sshd[31965]: Failed password for r.r from 184.22.139.26 port 46388 ssh2
Jun  2 18:17:55 HOST sshd[31965]: Received disconnect from 184.22.139.26: 11: Bye Bye [preauth]
Jun  2 18:20:52 HOST sshd[32065]: Address 184.22.139.26 maps to 184-22-139-0.24.myaisfibre.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jun  2 18:20:52 HOST sshd[32065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.22.139.26  user=r.r
Jun  2 18:20:55 HOST sshd[32065]: Failed password for r.r from 184.22.139.26 port 27594 ssh2
Jun  2 18:20:55 HOST sshd[32065]: Received disconnect from 184.22.139.26: 11........
-------------------------------

Icarus honeypot on github

Icarus honeypot on github

Automatic report - Port Scan Attack

Jun  4 15:38:01 abendstille sshd\[21896\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.207.13.22  user=root
Jun  4 15:38:03 abendstille sshd\[21896\]: Failed password for root from 175.207.13.22 port 37440 ssh2
Jun  4 15:41:58 abendstille sshd\[25592\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.207.13.22  user=root
Jun  4 15:42:00 abendstille sshd\[25592\]: Failed password for root from 175.207.13.22 port 56438 ssh2
Jun  4 15:45:57 abendstille sshd\[29362\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.207.13.22  user=root
...

146.164.51.50 (BR/Brazil/-), 12 distributed sshd attacks on account [root] in the last 3600 secs

Jun  4 12:54:24 game-panel sshd[16671]: Failed password for root from 51.38.48.127 port 53438 ssh2
Jun  4 12:58:11 game-panel sshd[16916]: Failed password for root from 51.38.48.127 port 58006 ssh2

$f2bV_matches

Jun  4 15:08:04 vpn01 sshd[30505]: Failed password for root from 111.230.226.124 port 54754 ssh2
...

Jun  4 14:04:27 vmi345603 sshd[550]: Failed password for root from 116.85.34.225 port 40118 ssh2
...