[2020-04-10 11:40:56] NOTICE[12114] chan_sip.c: Registration from '' failed for '185.147.215.8:50305' - Wrong password
[2020-04-10 11:40:56] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-10T11:40:56.251-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4073",SessionID="0x7f020c08adb8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/50305",Challenge="5c4d7bc8",ReceivedChallenge="5c4d7bc8",ReceivedHash="c33568d98d46d641920b1b382fac6321"
[2020-04-10 11:41:20] NOTICE[12114] chan_sip.c: Registration from '' failed for '185.147.215.8:58498' - Wrong password
[2020-04-10 11:41:20] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-10T11:41:20.006-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2799",SessionID="0x7f020c088288",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.2
...

Apr 10 17:30:38 silence02 sshd[7623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.216.203.59
Apr 10 17:30:40 silence02 sshd[7623]: Failed password for invalid user jasper from 95.216.203.59 port 50966 ssh2
Apr 10 17:38:55 silence02 sshd[8191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.216.203.59

" "

Apr 10 11:51:00 vps46666688 sshd[10385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.25.177
Apr 10 11:51:02 vps46666688 sshd[10385]: Failed password for invalid user postgres from 134.122.25.177 port 43338 ssh2
...

Automatic report - Port Scan Attack

(sshd) Failed SSH login from 103.27.238.202 (VN/Vietnam/-): 5 in the last 3600 secs

Apr 10 17:32:24 srv01 postfix/smtpd\[8550\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr 10 17:32:54 srv01 postfix/smtpd\[8380\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr 10 17:33:24 srv01 postfix/smtpd\[8585\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr 10 17:33:53 srv01 postfix/smtpd\[8380\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Apr 10 17:34:23 srv01 postfix/smtpd\[15943\]: warning: unknown\[46.38.145.4\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...

2020-04-10T14:05:19.957293vps751288.ovh.net sshd\[25915\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.196  user=root
2020-04-10T14:05:21.854740vps751288.ovh.net sshd\[25915\]: Failed password for root from 106.13.34.196 port 39338 ssh2
2020-04-10T14:09:01.327960vps751288.ovh.net sshd\[25941\]: Invalid user carraslo from 106.13.34.196 port 34282
2020-04-10T14:09:01.337508vps751288.ovh.net sshd\[25941\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.34.196
2020-04-10T14:09:03.711615vps751288.ovh.net sshd\[25941\]: Failed password for invalid user carraslo from 106.13.34.196 port 34282 ssh2

Apr 10 18:06:08 prod4 sshd\[25223\]: Failed password for root from 222.186.180.17 port 43402 ssh2
Apr 10 18:06:12 prod4 sshd\[25223\]: Failed password for root from 222.186.180.17 port 43402 ssh2
Apr 10 18:06:15 prod4 sshd\[25223\]: Failed password for root from 222.186.180.17 port 43402 ssh2
...

Apr 10 14:45:16 ip-172-31-61-156 sshd[22138]: Invalid user customer from 94.191.15.40
Apr 10 14:45:16 ip-172-31-61-156 sshd[22138]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.15.40
Apr 10 14:45:16 ip-172-31-61-156 sshd[22138]: Invalid user customer from 94.191.15.40
Apr 10 14:45:19 ip-172-31-61-156 sshd[22138]: Failed password for invalid user customer from 94.191.15.40 port 51684 ssh2
Apr 10 14:52:27 ip-172-31-61-156 sshd[22362]: Invalid user gituser from 94.191.15.40
...

(mod_security) mod_security (id:232920) triggered by 40.118.85.148 (NL/Netherlands/-): 5 in the last 3600 secs

Unauthorized connection attempt detected from IP address 210.14.147.67 to port 2005 [T]

04/10/2020-11:00:38.371780 185.175.93.3 Protocol: 6 ET DROP Dshield Block Listed Source group 1

2020-04-10T12:05:15.829741shield sshd\[27432\]: Invalid user nexus from 148.70.36.76 port 41280
2020-04-10T12:05:15.832719shield sshd\[27432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.36.76
2020-04-10T12:05:18.181468shield sshd\[27432\]: Failed password for invalid user nexus from 148.70.36.76 port 41280 ssh2
2020-04-10T12:08:18.475896shield sshd\[28180\]: Invalid user mythtv from 148.70.36.76 port 47472
2020-04-10T12:08:18.479844shield sshd\[28180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.36.76

Apr 10 17:08:48 s1 sshd\[18066\]: Invalid user admin from 96.77.182.189 port 39926
Apr 10 17:08:48 s1 sshd\[18066\]: Failed password for invalid user admin from 96.77.182.189 port 39926 ssh2
Apr 10 17:11:40 s1 sshd\[19526\]: Invalid user zeus from 96.77.182.189 port 49290
Apr 10 17:11:40 s1 sshd\[19526\]: Failed password for invalid user zeus from 96.77.182.189 port 49290 ssh2
Apr 10 17:12:46 s1 sshd\[19567\]: Invalid user user from 96.77.182.189 port 37308
Apr 10 17:12:46 s1 sshd\[19567\]: Failed password for invalid user user from 96.77.182.189 port 37308 ssh2
...