WordPress brute force

Mar 18 14:18:47 host01 sshd[24456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.153.255 
Mar 18 14:18:49 host01 sshd[24456]: Failed password for invalid user speech-dispatcher from 51.75.153.255 port 35426 ssh2
Mar 18 14:26:43 host01 sshd[25690]: Failed password for root from 51.75.153.255 port 54956 ssh2
...

2020-03-04T06:57:51.760557vps773228.ovh.net sshd[19837]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip255.ip-51-75-153.eu
2020-03-04T06:57:51.749295vps773228.ovh.net sshd[19837]: Invalid user oracle from 51.75.153.255 port 45600
2020-03-04T06:57:53.564423vps773228.ovh.net sshd[19837]: Failed password for invalid user oracle from 51.75.153.255 port 45600 ssh2
2020-03-04T08:03:14.008025vps773228.ovh.net sshd[21417]: Invalid user jira from 51.75.153.255 port 43760
2020-03-04T08:03:14.022748vps773228.ovh.net sshd[21417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip255.ip-51-75-153.eu
2020-03-04T08:03:14.008025vps773228.ovh.net sshd[21417]: Invalid user jira from 51.75.153.255 port 43760
2020-03-04T08:03:15.386261vps773228.ovh.net sshd[21417]: Failed password for invalid user jira from 51.75.153.255 port 43760 ssh2
2020-03-04T08:19:45.829085vps773228.ovh.net sshd[21843]: Invalid user news from 51.75.1
...

2020-03-04T00:13:08.698766vps773228.ovh.net sshd[7997]: Invalid user mark from 51.75.153.255 port 56996
2020-03-04T00:13:08.713464vps773228.ovh.net sshd[7997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip255.ip-51-75-153.eu
2020-03-04T00:13:08.698766vps773228.ovh.net sshd[7997]: Invalid user mark from 51.75.153.255 port 56996
2020-03-04T00:13:10.551525vps773228.ovh.net sshd[7997]: Failed password for invalid user mark from 51.75.153.255 port 56996 ssh2
2020-03-04T00:29:34.746352vps773228.ovh.net sshd[8420]: Invalid user robert from 51.75.153.255 port 56544
2020-03-04T00:29:34.754726vps773228.ovh.net sshd[8420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip255.ip-51-75-153.eu
2020-03-04T00:29:34.746352vps773228.ovh.net sshd[8420]: Invalid user robert from 51.75.153.255 port 56544
2020-03-04T00:29:37.285248vps773228.ovh.net sshd[8420]: Failed password for invalid user robert from 51.75.153.255 port
...

Invalid user vivek from 51.75.153.230 port 56093

(sshd) Failed SSH login from 51.75.153.255 (FR/France/ip255.ip-51-75-153.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Feb 14 07:39:44 elude sshd[30200]: Invalid user postgres from 51.75.153.255 port 56026
Feb 14 07:39:46 elude sshd[30200]: Failed password for invalid user postgres from 51.75.153.255 port 56026 ssh2
Feb 14 07:52:36 elude sshd[30997]: Invalid user caimile from 51.75.153.255 port 36724
Feb 14 07:52:37 elude sshd[30997]: Failed password for invalid user caimile from 51.75.153.255 port 36724 ssh2
Feb 14 07:57:13 elude sshd[31268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.153.255  user=root

Feb 10 10:05:25 server sshd\[26643\]: Invalid user iyu from 51.75.153.255
Feb 10 10:05:25 server sshd\[26643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip255.ip-51-75-153.eu 
Feb 10 10:05:27 server sshd\[26643\]: Failed password for invalid user iyu from 51.75.153.255 port 40632 ssh2
Feb 10 10:15:53 server sshd\[28176\]: Invalid user vun from 51.75.153.255
Feb 10 10:15:53 server sshd\[28176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip255.ip-51-75-153.eu 
...

Jan 25 06:11:18 hcbbdb sshd\[9740\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip255.ip-51-75-153.eu  user=root
Jan 25 06:11:21 hcbbdb sshd\[9740\]: Failed password for root from 51.75.153.255 port 34276 ssh2
Jan 25 06:14:26 hcbbdb sshd\[10118\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip255.ip-51-75-153.eu  user=root
Jan 25 06:14:28 hcbbdb sshd\[10118\]: Failed password for root from 51.75.153.255 port 57614 ssh2
Jan 25 06:17:30 hcbbdb sshd\[10508\]: Invalid user tcpdump from 51.75.153.255

Unauthorized connection attempt detected from IP address 51.75.153.230 to port 2220 [J]

Jan  4 08:36:12 legacy sshd[12094]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.153.255
Jan  4 08:36:14 legacy sshd[12094]: Failed password for invalid user kld from 51.75.153.255 port 47002 ssh2
Jan  4 08:40:20 legacy sshd[12268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.153.255
...

Dec 24 07:18:09 *** sshd[3683]: User root from 51.75.153.255 not allowed because not listed in AllowUsers

Dec 18 17:49:00 * sshd[18309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.153.255
Dec 18 17:49:02 * sshd[18309]: Failed password for invalid user adriana from 51.75.153.255 port 53574 ssh2

Dec 13 17:01:16 firewall sshd[728]: Failed password for invalid user emilie from 51.75.153.255 port 45568 ssh2
Dec 13 17:09:49 firewall sshd[878]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.153.255  user=root
Dec 13 17:09:50 firewall sshd[878]: Failed password for root from 51.75.153.255 port 53548 ssh2
...

Dec  7 22:23:50 kapalua sshd\[1319\]: Invalid user coder from 51.75.153.255
Dec  7 22:23:50 kapalua sshd\[1319\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip255.ip-51-75-153.eu
Dec  7 22:23:52 kapalua sshd\[1319\]: Failed password for invalid user coder from 51.75.153.255 port 54088 ssh2
Dec  7 22:32:22 kapalua sshd\[2167\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip255.ip-51-75-153.eu  user=root
Dec  7 22:32:24 kapalua sshd\[2167\]: Failed password for root from 51.75.153.255 port 33574 ssh2

Dec  3 09:37:11 lnxweb62 sshd[32090]: Failed password for root from 51.75.153.255 port 44916 ssh2
Dec  3 09:37:11 lnxweb62 sshd[32090]: Failed password for root from 51.75.153.255 port 44916 ssh2
Dec  3 09:44:54 lnxweb62 sshd[4758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.153.255

Jun 20 00:35:55 ny01 sshd[27007]: Failed password for root from 84.217.0.86 port 39342 ssh2
Jun 20 00:39:30 ny01 sshd[27442]: Failed password for root from 84.217.0.86 port 38674 ssh2
Jun 20 00:43:04 ny01 sshd[27857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.217.0.86

Failed password for invalid user tht from 218.232.135.95 port 48952 ssh2

Jun 20 13:52:05 web1 sshd[22276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.54.160.183  user=root
Jun 20 13:52:07 web1 sshd[22276]: Failed password for root from 195.54.160.183 port 47387 ssh2
Jun 20 13:52:14 web1 sshd[22318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.54.160.183  user=root
Jun 20 13:52:17 web1 sshd[22318]: Failed password for root from 195.54.160.183 port 50862 ssh2
Jun 20 13:52:25 web1 sshd[22368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.54.160.183  user=root
Jun 20 13:52:27 web1 sshd[22368]: Failed password for root from 195.54.160.183 port 53957 ssh2
Jun 20 13:52:39 web1 sshd[22415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.54.160.183  user=root
Jun 20 13:52:41 web1 sshd[22415]: Failed password for root from 195.54.160.183 port 57734 ssh2
Jun 20 13:52:54 web1 sshd[22
...

Jun 20 08:06:43 lukav-desktop sshd\[30057\]: Invalid user ubuntu from 43.225.151.252
Jun 20 08:06:43 lukav-desktop sshd\[30057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.225.151.252
Jun 20 08:06:45 lukav-desktop sshd\[30057\]: Failed password for invalid user ubuntu from 43.225.151.252 port 42296 ssh2
Jun 20 08:10:13 lukav-desktop sshd\[11589\]: Invalid user harry from 43.225.151.252
Jun 20 08:10:13 lukav-desktop sshd\[11589\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.225.151.252

Unauthorized connection attempt detected from IP address 183.136.225.44 to port 9700

Invalid user ada from 188.213.173.52 port 50222

Jun 20 08:55:46 abendstille sshd\[8283\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17  user=root
Jun 20 08:55:48 abendstille sshd\[8283\]: Failed password for root from 222.186.180.17 port 1248 ssh2
Jun 20 08:55:51 abendstille sshd\[8283\]: Failed password for root from 222.186.180.17 port 1248 ssh2
Jun 20 08:55:54 abendstille sshd\[8283\]: Failed password for root from 222.186.180.17 port 1248 ssh2
Jun 20 08:55:59 abendstille sshd\[8283\]: Failed password for root from 222.186.180.17 port 1248 ssh2
...

[2020-06-20 02:20:55] NOTICE[1273] chan_sip.c: Registration from '' failed for '176.67.81.9:60082' - Wrong password
[2020-06-20 02:20:55] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-20T02:20:55.986-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1113",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/176.67.81.9/60082",Challenge="102873aa",ReceivedChallenge="102873aa",ReceivedHash="a3938a328eca27b319a627316f573373"
[2020-06-20 02:22:27] NOTICE[1273] chan_sip.c: Registration from '' failed for '176.67.81.9:55619' - Wrong password
[2020-06-20 02:22:27] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-20T02:22:27.744-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8893",SessionID="0x7f31c018ea98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/176.67.81.9/55619",
...

AR - - [19/Jun/2020:16:50:06 +0300] GET /test/wp-login.php HTTP/1.1 403 292 - Mozilla/5.0 X11; Ubuntu; Linux x86_64; rv:62.0 Gecko/20100101 Firefox/62.0

2020-06-20T08:38:50.0794961240 sshd\[22180\]: Invalid user hi from 192.241.210.224 port 48736
2020-06-20T08:38:50.0844981240 sshd\[22180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.210.224
2020-06-20T08:38:51.6991401240 sshd\[22180\]: Failed password for invalid user hi from 192.241.210.224 port 48736 ssh2
...

Invalid user michael from 218.241.202.58 port 50764

Jun 20 05:36:39 sip sshd[3660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.34.121
Jun 20 05:36:41 sip sshd[3660]: Failed password for invalid user seafile from 111.229.34.121 port 55920 ssh2
Jun 20 05:52:26 sip sshd[9534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.34.121

Brute-Force

2020-06-20T06:29:59.128636shield sshd\[3489\]: Invalid user user from 209.141.40.12 port 33094
2020-06-20T06:29:59.199830shield sshd\[3490\]: Invalid user ec2-user from 209.141.40.12 port 33082
2020-06-20T06:29:59.200418shield sshd\[3488\]: Invalid user ubuntu from 209.141.40.12 port 33084
2020-06-20T06:29:59.200984shield sshd\[3491\]: Invalid user test from 209.141.40.12 port 33092
2020-06-20T06:29:59.203158shield sshd\[3493\]: Invalid user guest from 209.141.40.12 port 33090
2020-06-20T06:29:59.209345shield sshd\[3492\]: Invalid user oracle from 209.141.40.12 port 33088
2020-06-20T06:29:59.209910shield sshd\[3486\]: Invalid user jenkins from 209.141.40.12 port 33102
2020-06-20T06:29:59.210450shield sshd\[3487\]: Invalid user vagrant from 209.141.40.12 port 33096

198.23.145.214 - - [19/Jun/2020:20:59:27 -0700] "GET /xmlrpc.php HTTP/1.1" 404 11793 "https://stitch-maps.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.158 Safari/537.36"
...