Dec  3 06:13:06 plusreed sshd[14175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.104.152  user=root
Dec  3 06:13:08 plusreed sshd[14175]: Failed password for root from 118.24.104.152 port 36854 ssh2
...

2019-12-03T11:38:25.506356abusebot-2.cloudsearch.cf sshd\[4413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.54.224  user=root

Dec  3 12:53:55 MK-Soft-VM7 sshd[309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.122.23.70 
Dec  3 12:53:57 MK-Soft-VM7 sshd[309]: Failed password for invalid user tina from 202.122.23.70 port 12179 ssh2
...

Dec  3 10:32:18 v22018076622670303 sshd\[25261\]: Invalid user guest from 189.103.85.27 port 45092
Dec  3 10:32:18 v22018076622670303 sshd\[25261\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.103.85.27
Dec  3 10:32:21 v22018076622670303 sshd\[25261\]: Failed password for invalid user guest from 189.103.85.27 port 45092 ssh2
...

Unauthorised access (Dec  3) SRC=124.123.163.63 LEN=52 TTL=109 ID=6640 DF TCP DPT=445 WINDOW=8192 SYN

Dec  3 00:43:25 sachi sshd\[20026\]: Invalid user bernardina from 89.46.196.34
Dec  3 00:43:25 sachi sshd\[20026\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.46.196.34
Dec  3 00:43:27 sachi sshd\[20026\]: Failed password for invalid user bernardina from 89.46.196.34 port 55278 ssh2
Dec  3 00:49:25 sachi sshd\[20567\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.46.196.34  user=backup
Dec  3 00:49:27 sachi sshd\[20567\]: Failed password for backup from 89.46.196.34 port 37818 ssh2

SS5,WP GET /CLAIMNEWGROUNDS/wp-login.php

Dec  3 07:06:00 venus sshd\[7815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.18.231  user=bin
Dec  3 07:06:02 venus sshd\[7815\]: Failed password for bin from 178.128.18.231 port 46822 ssh2
Dec  3 07:12:50 venus sshd\[8246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.18.231  user=root
...

$f2bV_matches

\[2019-12-03 05:49:10\] NOTICE\[2754\] chan_sip.c: Registration from '"608" \' failed for '37.49.230.81:5724' - Wrong password
\[2019-12-03 05:49:10\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-03T05:49:10.808-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="608",SessionID="0x7f26c4276ea8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.81/5724",Challenge="43d3540e",ReceivedChallenge="43d3540e",ReceivedHash="f6d940cdeeb5c9cb0fe60f731b89189f"
\[2019-12-03 05:49:10\] NOTICE\[2754\] chan_sip.c: Registration from '"608" \' failed for '37.49.230.81:5724' - Wrong password
\[2019-12-03 05:49:10\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-03T05:49:10.940-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="608",SessionID="0x7f26c4022278",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.2

Dec  3 01:45:49 php1 sshd\[7054\]: Invalid user abe from 188.213.165.47
Dec  3 01:45:49 php1 sshd\[7054\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.213.165.47
Dec  3 01:45:51 php1 sshd\[7054\]: Failed password for invalid user abe from 188.213.165.47 port 42194 ssh2
Dec  3 01:51:24 php1 sshd\[7527\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.213.165.47  user=root
Dec  3 01:51:27 php1 sshd\[7527\]: Failed password for root from 188.213.165.47 port 52702 ssh2

Attempt To login To email server On IMAP service On 03-12-2019 06:25:13.

"Fail2Ban detected SSH brute force attempt"

Dec  3 12:36:25 MK-Soft-Root2 sshd[27792]: Failed password for root from 51.77.201.36 port 45164 ssh2
Dec  3 12:43:54 MK-Soft-Root2 sshd[29193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.201.36 
...

2019-12-02 UTC: 1x - root