2020-09-13T15:11:41.146755abusebot-7.cloudsearch.cf sshd[23470]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.121.252  user=root
2020-09-13T15:11:43.373379abusebot-7.cloudsearch.cf sshd[23470]: Failed password for root from 68.183.121.252 port 60252 ssh2
2020-09-13T15:15:38.070298abusebot-7.cloudsearch.cf sshd[23489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.121.252  user=root
2020-09-13T15:15:40.170745abusebot-7.cloudsearch.cf sshd[23489]: Failed password for root from 68.183.121.252 port 45488 ssh2
2020-09-13T15:19:48.169278abusebot-7.cloudsearch.cf sshd[23550]: Invalid user ruben888 from 68.183.121.252 port 59272
2020-09-13T15:19:48.175118abusebot-7.cloudsearch.cf sshd[23550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.121.252
2020-09-13T15:19:48.169278abusebot-7.cloudsearch.cf sshd[23550]: Invalid user ruben888 from 68.183.121.2
...

Sep 13 07:00:15 marvibiene sshd[5242]: Failed password for root from 68.183.121.252 port 54034 ssh2
Sep 13 07:04:16 marvibiene sshd[5462]: Failed password for root from 68.183.121.252 port 36584 ssh2

TCP ports : 8595 / 15886

2020-08-28T15:05:28.920053snf-827550 sshd[19679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.121.252
2020-08-28T15:05:28.905906snf-827550 sshd[19679]: Invalid user trs from 68.183.121.252 port 54030
2020-08-28T15:05:30.846447snf-827550 sshd[19679]: Failed password for invalid user trs from 68.183.121.252 port 54030 ssh2
...

2020-08-25T11:56:39.218198shield sshd\[8135\]: Invalid user ftpuser1 from 68.183.121.252 port 33366
2020-08-25T11:56:39.241946shield sshd\[8135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.121.252
2020-08-25T11:56:41.234552shield sshd\[8135\]: Failed password for invalid user ftpuser1 from 68.183.121.252 port 33366 ssh2
2020-08-25T12:00:22.495507shield sshd\[8533\]: Invalid user mrb from 68.183.121.252 port 41574
2020-08-25T12:00:22.633777shield sshd\[8533\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.121.252

[ssh] SSH attack

Aug 11 16:03:35 piServer sshd[28364]: Failed password for root from 68.183.121.252 port 43248 ssh2
Aug 11 16:06:33 piServer sshd[28703]: Failed password for root from 68.183.121.252 port 34784 ssh2
...

Aug  4 12:17:36 vps647732 sshd[12327]: Failed password for root from 68.183.121.252 port 55552 ssh2
...

Aug  2 10:30:10 rocket sshd[3347]: Failed password for root from 68.183.121.252 port 56812 ssh2
Aug  2 10:33:54 rocket sshd[3833]: Failed password for root from 68.183.121.252 port 39168 ssh2
...

2020-07-30T12:18:54.050544shield sshd\[1312\]: Invalid user thy from 68.183.121.252 port 44522
2020-07-30T12:18:54.056473shield sshd\[1312\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.121.252
2020-07-30T12:18:56.394781shield sshd\[1312\]: Failed password for invalid user thy from 68.183.121.252 port 44522 ssh2
2020-07-30T12:22:47.696748shield sshd\[3546\]: Invalid user xor from 68.183.121.252 port 56624
2020-07-30T12:22:47.703312shield sshd\[3546\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.121.252

2020-07-29T18:22:13.348929abusebot-8.cloudsearch.cf sshd[7387]: Invalid user songzhe from 68.183.121.252 port 44342
2020-07-29T18:22:13.359639abusebot-8.cloudsearch.cf sshd[7387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.121.252
2020-07-29T18:22:13.348929abusebot-8.cloudsearch.cf sshd[7387]: Invalid user songzhe from 68.183.121.252 port 44342
2020-07-29T18:22:15.103414abusebot-8.cloudsearch.cf sshd[7387]: Failed password for invalid user songzhe from 68.183.121.252 port 44342 ssh2
2020-07-29T18:25:02.235016abusebot-8.cloudsearch.cf sshd[7390]: Invalid user jingyu from 68.183.121.252 port 40512
2020-07-29T18:25:02.242644abusebot-8.cloudsearch.cf sshd[7390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.121.252
2020-07-29T18:25:02.235016abusebot-8.cloudsearch.cf sshd[7390]: Invalid user jingyu from 68.183.121.252 port 40512
2020-07-29T18:25:04.853229abusebot-8.cloudsearch.cf sshd[7390]:
...

Jul 25 06:24:00 v22019038103785759 sshd\[29587\]: Invalid user steven from 68.183.121.252 port 45898
Jul 25 06:24:00 v22019038103785759 sshd\[29587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.121.252
Jul 25 06:24:02 v22019038103785759 sshd\[29587\]: Failed password for invalid user steven from 68.183.121.252 port 45898 ssh2
Jul 25 06:27:36 v22019038103785759 sshd\[29995\]: Invalid user kmueller from 68.183.121.252 port 58534
Jul 25 06:27:36 v22019038103785759 sshd\[29995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.121.252
...

Invalid user tom from 68.183.121.252 port 47644

Jun 29 17:50:43 localhost sshd[281570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.121.252  user=r.r
Jun 29 17:50:46 localhost sshd[281570]: Failed password for r.r from 68.183.121.252 port 33484 ssh2
Jun 29 17:55:54 localhost sshd[283143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.121.252  user=r.r
Jun 29 17:55:56 localhost sshd[283143]: Failed password for r.r from 68.183.121.252 port 56344 ssh2
Jun 29 17:58:48 localhost sshd[283426]: Invalid user Minecraft from 68.183.121.252 port 56584
Jun 29 17:58:48 localhost sshd[283426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.121.252 
Jun 29 17:58:48 localhost sshd[283426]: Invalid user Minecraft from 68.183.121.252 port 56584
Jun 29 17:58:50 localhost sshd[283426]: Failed password for invalid user Minecraft from 68.183.121.252 port 56584 ssh2
Jun 29 18:01:48 localhost ss........
------------------------------

1588546028 - 05/04/2020 00:47:08 Host: 172.104.212.253/172.104.212.253 Port: 161 UDP Blocked
...

Lines containing failures of 98.113.98.54 (max 1000)
May  3 10:51:24 mm sshd[14316]: Invalid user admin from 98.113.98.54 po=
rt 35938
May  3 10:51:24 mm sshd[14316]: pam_unix(sshd:auth): authentication fai=
lure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D98.113.98.=
54
May  3 10:51:26 mm sshd[14316]: Failed password for invalid user admin =
from 98.113.98.54 port 35938 ssh2
May  3 10:51:26 mm sshd[14316]: Received disconnect from 98.113.98.54 p=
ort 35938:11: Bye Bye [preauth]
May  3 10:51:26 mm sshd[14316]: Disconnected from invalid user admin 98=
.113.98.54 port 35938 [preauth]
May  3 10:59:27 mm sshd[14470]: Invalid user brisa from 98.113.98.54 po=
rt 39980
May  3 10:59:27 mm sshd[14470]: pam_unix(sshd:auth): authentication fai=
lure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D98.113.98.=
54
May  3 10:59:29 mm sshd[14470]: Failed password for invalid user brisa =
from 98.113.98.54 port 39980 ssh2
May  3 10:59:30 mm sshd[14470]: Received disco........
------------------------------

SSH brute-force attempt

May  4 00:42:52 debian-2gb-nbg1-2 kernel: \[10804674.226420\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=104.194.11.42 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=58036 PROTO=TCP SPT=57041 DPT=46709 WINDOW=1024 RES=0x00 SYN URGP=0

SASL PLAIN auth failed: ruser=...

Automatic report - SSH Brute-Force Attack

May  4 00:53:30 plex sshd[7999]: Invalid user luciana from 106.13.32.165 port 48394

Bruteforce detected by fail2ban

[2020-05-03 18:27:04] NOTICE[1170] chan_sip.c: Registration from '' failed for '212.129.41.188:59408' - Wrong password
[2020-05-03 18:27:04] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-03T18:27:04.578-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="695",SessionID="0x7f6c090de118",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.129.41.188/59408",Challenge="73fffe49",ReceivedChallenge="73fffe49",ReceivedHash="b12fd7969f90d9c4572f557b46d692f0"
[2020-05-03 18:27:39] NOTICE[1170] chan_sip.c: Registration from '' failed for '212.129.41.188:53936' - Wrong password
[2020-05-03 18:27:39] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-03T18:27:39.715-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="719",SessionID="0x7f6c090de118",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.129.41.188
...

2020-05-04T00:47:34.672819ns386461 sshd\[32544\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.180  user=root
2020-05-04T00:47:36.702498ns386461 sshd\[32544\]: Failed password for root from 222.186.173.180 port 12966 ssh2
2020-05-04T00:47:40.030479ns386461 sshd\[32544\]: Failed password for root from 222.186.173.180 port 12966 ssh2
2020-05-04T00:47:43.574483ns386461 sshd\[32544\]: Failed password for root from 222.186.173.180 port 12966 ssh2
2020-05-04T00:47:46.862469ns386461 sshd\[32544\]: Failed password for root from 222.186.173.180 port 12966 ssh2
...

WordPress (CMS) attack attempts.
Date: 2020 May 03. 21:01:44
Source IP: 149.255.58.23

Portion of the log(s):
149.255.58.23 - [03/May/2020:21:01:44 +0200] "GET /wp-login.php HTTP/1.1" 200 1962 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.255.58.23 - [03/May/2020:21:01:44 +0200] "POST /wp-login.php HTTP/1.1" 200 2417 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
149.255.58.23 - [03/May/2020:21:01:44 +0200] "POST /xmlrpc.php HTTP/1.1" 404 118 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

May  3 23:42:34 server sshd[24573]: Failed password for invalid user bot from 59.172.6.244 port 36463 ssh2
May  3 23:46:06 server sshd[24994]: Failed password for root from 59.172.6.244 port 60154 ssh2
May  3 23:53:11 server sshd[25340]: Failed password for root from 59.172.6.244 port 51072 ssh2

May  4 00:07:51 piServer sshd[29733]: Failed password for root from 121.201.74.154 port 42562 ssh2
May  4 00:10:54 piServer sshd[30095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.201.74.154 
May  4 00:10:57 piServer sshd[30095]: Failed password for invalid user hostmaster from 121.201.74.154 port 59332 ssh2
...

Dovecot Invalid User Login Attempt.

May  4 00:36:32 sip sshd[28621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.214.239
May  4 00:36:35 sip sshd[28621]: Failed password for invalid user server from 106.75.214.239 port 56922 ssh2
May  4 00:49:31 sip sshd[1128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.214.239