Dec 25 01:14:27 silence02 sshd[4449]: Failed password for mysql from 217.128.22.13 port 33798 ssh2
Dec 25 01:23:58 silence02 sshd[4685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.128.22.13
Dec 25 01:23:59 silence02 sshd[4685]: Failed password for invalid user molinos from 217.128.22.13 port 48498 ssh2

Dec 25 00:16:34 dev0-dcde-rnet sshd[16957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.232.151
Dec 25 00:16:36 dev0-dcde-rnet sshd[16957]: Failed password for invalid user mysql from 162.241.232.151 port 55178 ssh2
Dec 25 00:26:16 dev0-dcde-rnet sshd[17055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.241.232.151

Automatic report - SSH Brute-Force Attack

Dec 25 01:27:37 MK-Soft-Root1 sshd[1074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.202.89 
Dec 25 01:27:39 MK-Soft-Root1 sshd[1074]: Failed password for invalid user scattergood from 129.204.202.89 port 56411 ssh2
...

Dec 25 01:46:59 MK-Soft-VM4 sshd[27936]: Failed password for root from 222.186.180.223 port 1902 ssh2
Dec 25 01:47:03 MK-Soft-VM4 sshd[27936]: Failed password for root from 222.186.180.223 port 1902 ssh2
...

Dec 25 00:26:47 [munged] sshd[11811]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.4.12.232

Dec 25 00:11:56 pegasus sshguard[1297]: Blocking 86.252.108.168:4 for >630secs: 10 danger in 1 attacks over 0 seconds (all: 10d in 1 abuses over 0s).
Dec 25 00:11:57 pegasus sshd[14740]: Failed password for invalid user scanner from 86.252.108.168 port 57114 ssh2
Dec 25 00:11:57 pegasus sshd[14740]: Received disconnect from 86.252.108.168 port 57114:11: Bye Bye [preauth]
Dec 25 00:11:57 pegasus sshd[14740]: Disconnected from 86.252.108.168 port 57114 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=86.252.108.168

Wordpress Admin Login attack

Dec 24 20:26:27 ws24vmsma01 sshd[168037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.198.113
Dec 24 20:26:29 ws24vmsma01 sshd[168037]: Failed password for invalid user becan from 51.68.198.113 port 44388 ssh2
...

SSH authentication failure x 6 reported by Fail2Ban
...

MultiHost/MultiPort Probe, Scan, Hack -

"SSH brute force auth login attempt."

Dec 25 01:19:31 legacy sshd[32144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.206.206
Dec 25 01:19:34 legacy sshd[32144]: Failed password for invalid user ubnt from 149.202.206.206 port 52821 ssh2
Dec 25 01:22:12 legacy sshd[32259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.206.206
...

\[2019-12-24 19:42:20\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '195.154.28.205:51160' - Wrong password
\[2019-12-24 19:42:20\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-24T19:42:20.666-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="404",SessionID="0x7f0fb4a9c488",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.28.205/51160",Challenge="26b71dc9",ReceivedChallenge="26b71dc9",ReceivedHash="f208eb0e60efa5f5a5fa76643da34883"
\[2019-12-24 19:49:03\] NOTICE\[2839\] chan_sip.c: Registration from '\' failed for '195.154.28.205:65267' - Wrong password
\[2019-12-24 19:49:03\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-24T19:49:03.517-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="504",SessionID="0x7f0fb462f398",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/195.154.28

IP was detected trying to Brute-Force SSH, FTP, Web Apps, Port-Scan or Hacking.