Dec  3 12:05:38 vps691689 sshd[2817]: Failed password for root from 111.230.73.133 port 58362 ssh2
Dec  3 12:14:20 vps691689 sshd[3128]: Failed password for root from 111.230.73.133 port 36194 ssh2
...

Dec  3 11:16:02 icinga sshd[45548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.177.132.117 
Dec  3 11:16:04 icinga sshd[45548]: Failed password for invalid user cecilie from 18.177.132.117 port 49152 ssh2
Dec  3 11:30:49 icinga sshd[59589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.177.132.117 
...

" "

Dec  3 07:34:48 ns41 sshd[2307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.154.64
Dec  3 07:34:50 ns41 sshd[2307]: Failed password for invalid user ching from 118.24.154.64 port 37820 ssh2
Dec  3 07:43:17 ns41 sshd[2774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.154.64

\[2019-12-03 05:49:10\] NOTICE\[2754\] chan_sip.c: Registration from '"608" \' failed for '37.49.230.81:5724' - Wrong password
\[2019-12-03 05:49:10\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-03T05:49:10.808-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="608",SessionID="0x7f26c4276ea8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.81/5724",Challenge="43d3540e",ReceivedChallenge="43d3540e",ReceivedHash="f6d940cdeeb5c9cb0fe60f731b89189f"
\[2019-12-03 05:49:10\] NOTICE\[2754\] chan_sip.c: Registration from '"608" \' failed for '37.49.230.81:5724' - Wrong password
\[2019-12-03 05:49:10\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-03T05:49:10.940-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="608",SessionID="0x7f26c4022278",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.2

Unauthorised access (Dec  3) SRC=14.241.121.34 LEN=52 TTL=117 ID=18517 DF TCP DPT=445 WINDOW=8192 SYN 
Unauthorised access (Dec  3) SRC=14.241.121.34 LEN=52 TTL=117 ID=9957 DF TCP DPT=445 WINDOW=8192 SYN 
Unauthorised access (Dec  3) SRC=14.241.121.34 LEN=52 TTL=117 ID=20209 DF TCP DPT=445 WINDOW=8192 SYN

ICMP MH Probe, Scan /Distributed -

Dec  3 08:28:38 h2177944 sshd\[28705\]: Invalid user mission from 51.38.237.214 port 44508
Dec  3 08:28:39 h2177944 sshd\[28705\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.237.214
Dec  3 08:28:41 h2177944 sshd\[28705\]: Failed password for invalid user mission from 51.38.237.214 port 44508 ssh2
Dec  3 08:33:54 h2177944 sshd\[28963\]: Invalid user admin from 51.38.237.214 port 55646
Dec  3 08:33:54 h2177944 sshd\[28963\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.237.214
...

Unauthorised access (Dec  3) SRC=124.123.163.63 LEN=52 TTL=109 ID=6640 DF TCP DPT=445 WINDOW=8192 SYN

Dec  3 08:33:29 wh01 sshd[30602]: Invalid user horst from 200.149.231.50 port 42022
Dec  3 08:33:29 wh01 sshd[30602]: Failed password for invalid user horst from 200.149.231.50 port 42022 ssh2
Dec  3 08:33:29 wh01 sshd[30602]: Received disconnect from 200.149.231.50 port 42022:11: Bye Bye [preauth]
Dec  3 08:33:29 wh01 sshd[30602]: Disconnected from 200.149.231.50 port 42022 [preauth]
Dec  3 08:41:33 wh01 sshd[31311]: Failed password for root from 200.149.231.50 port 38694 ssh2
Dec  3 09:02:01 wh01 sshd[441]: Invalid user brueck from 200.149.231.50 port 43838
Dec  3 09:02:01 wh01 sshd[441]: Failed password for invalid user brueck from 200.149.231.50 port 43838 ssh2
Dec  3 09:02:01 wh01 sshd[441]: Received disconnect from 200.149.231.50 port 43838:11: Bye Bye [preauth]
Dec  3 09:02:01 wh01 sshd[441]: Disconnected from 200.149.231.50 port 43838 [preauth]
Dec  3 09:08:52 wh01 sshd[1032]: Failed password for root from 200.149.231.50 port 54964 ssh2
Dec  3 09:08:52 wh01 sshd[1032]: Received

Automatic report - Port Scan Attack

Dec  2 07:21:03 m1 sshd[2271]: Invalid user wollen from 89.163.214.8
Dec  2 07:21:05 m1 sshd[2271]: Failed password for invalid user wollen from 89.163.214.8 port 47212 ssh2
Dec  2 07:30:29 m1 sshd[6490]: Invalid user server from 89.163.214.8


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=89.163.214.8

Dec  3 00:12:08 wbs sshd\[32650\]: Invalid user klauza from 176.31.191.61
Dec  3 00:12:08 wbs sshd\[32650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.ip-176-31-191.eu
Dec  3 00:12:11 wbs sshd\[32650\]: Failed password for invalid user klauza from 176.31.191.61 port 50678 ssh2
Dec  3 00:17:40 wbs sshd\[752\]: Invalid user cnovelo from 176.31.191.61
Dec  3 00:17:40 wbs sshd\[752\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.ip-176-31-191.eu

Dec  3 10:11:04 fr01 sshd[8935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.20.174  user=backup
Dec  3 10:11:05 fr01 sshd[8935]: Failed password for backup from 51.91.20.174 port 38092 ssh2
Dec  3 10:16:31 fr01 sshd[9875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.20.174  user=root
Dec  3 10:16:33 fr01 sshd[9875]: Failed password for root from 51.91.20.174 port 49582 ssh2
...

port scan and connect, tcp 23 (telnet)