Oct  7 16:00:29 debian sshd\[16606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.110  user=root
Oct  7 16:00:31 debian sshd\[16606\]: Failed password for root from 222.186.15.110 port 59092 ssh2
Oct  7 16:00:33 debian sshd\[16606\]: Failed password for root from 222.186.15.110 port 59092 ssh2
...

Oct  7 09:28:35 friendsofhawaii sshd\[18619\]: Invalid user Talent@2017 from 172.81.237.242
Oct  7 09:28:35 friendsofhawaii sshd\[18619\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.237.242
Oct  7 09:28:37 friendsofhawaii sshd\[18619\]: Failed password for invalid user Talent@2017 from 172.81.237.242 port 57382 ssh2
Oct  7 09:32:38 friendsofhawaii sshd\[18915\]: Invalid user Admin12345\^ from 172.81.237.242
Oct  7 09:32:38 friendsofhawaii sshd\[18915\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.81.237.242

Oct  7 21:54:02 MK-Soft-VM4 sshd[5995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.73.12.219 
Oct  7 21:54:04 MK-Soft-VM4 sshd[5995]: Failed password for invalid user Alain_123 from 45.73.12.219 port 38674 ssh2
...

\[2019-10-07 15:29:02\] NOTICE\[1887\] chan_sip.c: Registration from '\' failed for '81.171.107.175:51231' - Wrong password
\[2019-10-07 15:29:02\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-07T15:29:02.257-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5824",SessionID="0x7fc3ac76b1b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.107.175/51231",Challenge="03e842d7",ReceivedChallenge="03e842d7",ReceivedHash="f9a0658a2730d57a3f9704b8cfe483ec"
\[2019-10-07 15:34:03\] NOTICE\[1887\] chan_sip.c: Registration from '\' failed for '81.171.107.175:55637' - Wrong password
\[2019-10-07 15:34:03\] SECURITY\[1898\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-07T15:34:03.295-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6712",SessionID="0x7fc3ac5226d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171

Automatic report - Port Scan Attack

Oct  7 06:16:50 DNS-2 sshd[12209]: User r.r from 118.24.121.72 not allowed because not listed in AllowUsers
Oct  7 06:16:50 DNS-2 sshd[12209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.121.72  user=r.r
Oct  7 06:16:52 DNS-2 sshd[12209]: Failed password for invalid user r.r from 118.24.121.72 port 35548 ssh2
Oct  7 06:16:52 DNS-2 sshd[12209]: Received disconnect from 118.24.121.72 port 35548:11: Bye Bye [preauth]
Oct  7 06:16:52 DNS-2 sshd[12209]: Disconnected from 118.24.121.72 port 35548 [preauth]
Oct  7 06:37:58 DNS-2 sshd[13717]: User r.r from 118.24.121.72 not allowed because not listed in AllowUsers
Oct  7 06:37:58 DNS-2 sshd[13717]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.121.72  user=r.r
Oct  7 06:38:00 DNS-2 sshd[13717]: Failed password for invalid user r.r from 118.24.121.72 port 46276 ssh2
Oct  7 06:38:01 DNS-2 sshd[13717]: Received disconnect from 118.2........
-------------------------------

Scanning and trying login many times

Chat Spam

Oct  7 14:10:52 mail sshd[25056]: Failed password for root from 112.216.39.29 port 49668 ssh2
Oct  7 14:15:23 mail sshd[25744]: Failed password for root from 112.216.39.29 port 60396 ssh2

Oct  7 15:46:03 ns3110291 sshd\[31014\]: Invalid user P@ssw0rd12345 from 168.61.176.121
Oct  7 15:46:03 ns3110291 sshd\[31014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.61.176.121 
Oct  7 15:46:05 ns3110291 sshd\[31014\]: Failed password for invalid user P@ssw0rd12345 from 168.61.176.121 port 58304 ssh2
Oct  7 15:54:22 ns3110291 sshd\[31325\]: Invalid user P@ssw0rd12345 from 168.61.176.121
Oct  7 15:54:22 ns3110291 sshd\[31325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.61.176.121 
...

Port scan attempt detected by AWS-CCS, CTS, India

Oct  7 09:45:29 wbs sshd\[9779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.74.170.93  user=root
Oct  7 09:45:31 wbs sshd\[9779\]: Failed password for root from 76.74.170.93 port 42410 ssh2
Oct  7 09:49:45 wbs sshd\[10124\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.74.170.93  user=root
Oct  7 09:49:47 wbs sshd\[10124\]: Failed password for root from 76.74.170.93 port 34584 ssh2
Oct  7 09:54:05 wbs sshd\[10480\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.74.170.93  user=root

B: zzZZzz blocked content access

SSH Brute-Force reported by Fail2Ban

Oct  6 03:19:28 mailserver sshd[6229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.143.152.98  user=r.r
Oct  6 03:19:30 mailserver sshd[6229]: Failed password for r.r from 103.143.152.98 port 37134 ssh2
Oct  6 03:19:30 mailserver sshd[6229]: Received disconnect from 103.143.152.98 port 37134:11: Bye Bye [preauth]
Oct  6 03:19:30 mailserver sshd[6229]: Disconnected from 103.143.152.98 port 37134 [preauth]
Oct  6 03:37:21 mailserver sshd[7479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.143.152.98  user=r.r
Oct  6 03:37:23 mailserver sshd[7479]: Failed password for r.r from 103.143.152.98 port 60252 ssh2
Oct  6 03:37:23 mailserver sshd[7479]: Received disconnect from 103.143.152.98 port 60252:11: Bye Bye [preauth]
Oct  6 03:37:23 mailserver sshd[7479]: Disconnected from 103.143.152.98 port 60252 [preauth]
Oct  6 03:42:05 mailserver sshd[7946]: pam_unix(sshd:auth): authenticati........
-------------------------------