Lines containing failures of 123.157.78.171
Jun 15 21:26:53 meet sshd[14578]: Invalid user mininet from 123.157.78.171 port 50094
Jun 15 21:26:53 meet sshd[14578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.157.78.171 
Jun 15 21:26:53 meet sshd[14578]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.157.78.171 user=mininet
Jun 15 21:26:55 meet sshd[14578]: Failed password for invalid user mininet from 123.157.78.171 port 50094 ssh2
Jun 15 21:26:55 meet sshd[14578]: Received disconnect from 123.157.78.171 port 50094:11: Bye Bye [preauth]
Jun 15 21:26:55 meet sshd[14578]: Disconnected from invalid user mininet 123.157.78.171 port 50094 [preauth]
Jun 15 21:30:32 lms sshd[8484]: Invalid user mininet from 123.157.78.171 port 39212
Jun 15 21:30:32 lms sshd[8484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.157.78.171 
Jun 15 21:30:32 lms s........
------------------------------

(smtpauth) Failed SMTP AUTH login from 78.128.113.107 (BG/Bulgaria/ip-113-107.4vendeta.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-16 03:47:49 plain authenticator failed for ([78.128.113.107]) [78.128.113.107]: 535 Incorrect authentication data (set_id=info@keyhantechnic.ir)

2020-06-15T18:18:24.2443791495-001 sshd[22107]: Invalid user wj from 134.209.101.140 port 56463
2020-06-15T18:18:25.9535071495-001 sshd[22107]: Failed password for invalid user wj from 134.209.101.140 port 56463 ssh2
2020-06-15T18:22:26.6417441495-001 sshd[22369]: Invalid user lux from 134.209.101.140 port 50174
2020-06-15T18:22:26.6464981495-001 sshd[22369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.101.140
2020-06-15T18:22:26.6417441495-001 sshd[22369]: Invalid user lux from 134.209.101.140 port 50174
2020-06-15T18:22:28.2417411495-001 sshd[22369]: Failed password for invalid user lux from 134.209.101.140 port 50174 ssh2

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=134.209.101.140

Jun 16 00:47:26 * sshd[15599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.53.228
Jun 16 00:47:29 * sshd[15599]: Failed password for invalid user test from 106.75.53.228 port 55392 ssh2

Invalid user wem from 46.105.148.212 port 49012

Jun 15 14:15:12 mockhub sshd[18553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.156.216.99
Jun 15 14:15:14 mockhub sshd[18553]: Failed password for invalid user postgres from 203.156.216.99 port 38245 ssh2
...

Jun 15 22:37:16 abendstille sshd\[30005\]: Invalid user ubuntu from 129.211.42.153
Jun 15 22:37:16 abendstille sshd\[30005\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.42.153
Jun 15 22:37:18 abendstille sshd\[30005\]: Failed password for invalid user ubuntu from 129.211.42.153 port 53606 ssh2
Jun 15 22:42:17 abendstille sshd\[2757\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.42.153  user=root
Jun 15 22:42:18 abendstille sshd\[2757\]: Failed password for root from 129.211.42.153 port 54128 ssh2
...

spam (f2b h2)

Automatic report - XMLRPC Attack

Jun 15 22:42:31 host sshd[26492]: Invalid user jimmy from 164.52.11.94 port 59766
...

2020-06-15T17:27:27.7383271495-001 sshd[19919]: Failed password for root from 111.229.137.13 port 33028 ssh2
2020-06-15T17:30:34.5555731495-001 sshd[20012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.137.13  user=root
2020-06-15T17:30:36.9291171495-001 sshd[20012]: Failed password for root from 111.229.137.13 port 54954 ssh2
2020-06-15T17:33:40.4654251495-001 sshd[20175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.137.13  user=root
2020-06-15T17:33:42.3724211495-001 sshd[20175]: Failed password for root from 111.229.137.13 port 48652 ssh2
2020-06-15T17:36:57.9781371495-001 sshd[20293]: Invalid user riley from 111.229.137.13 port 42344
...

Jun 16 02:53:03 dhoomketu sshd[776508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.199.182 
Jun 16 02:53:03 dhoomketu sshd[776508]: Invalid user samir from 159.89.199.182 port 46000
Jun 16 02:53:05 dhoomketu sshd[776508]: Failed password for invalid user samir from 159.89.199.182 port 46000 ssh2
Jun 16 02:55:31 dhoomketu sshd[776536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.199.182  user=root
Jun 16 02:55:33 dhoomketu sshd[776536]: Failed password for root from 159.89.199.182 port 57516 ssh2
...

DATE:2020-06-16 00:28:26, IP:106.52.248.175, PORT:ssh SSH brute force auth (docker-dc)

[2020-06-15 19:08:51] NOTICE[1273] chan_sip.c: Registration from '376 ' failed for '103.145.12.176:54384' - Wrong password
[2020-06-15 19:08:51] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-15T19:08:51.984-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="376",SessionID="0x7f31c018ea98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.176/54384",Challenge="1e5a7863",ReceivedChallenge="1e5a7863",ReceivedHash="f928398a5bf84bb312b5d93191be1f2d"
[2020-06-15 19:09:09] NOTICE[1273] chan_sip.c: Registration from '177 ' failed for '103.145.12.176:58060' - Wrong password
[2020-06-15 19:09:09] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-15T19:09:09.589-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="177",SessionID="0x7f31c02f7128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.14
...

Invalid user jumper from 180.76.108.73 port 38936