Automated report - ssh fail2ban:
Aug 29 22:24:19 authentication failure 
Aug 29 22:24:21 wrong password, user=wxl, port=39176, ssh2
Aug 29 22:28:49 wrong password, user=root, port=52060, ssh2

\[2019-08-29 17:14:58\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '212.83.170.21:2902' - Wrong password
\[2019-08-29 17:14:58\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-29T17:14:58.042-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5313",SessionID="0x7f7b30db7498",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.170.21/59171",Challenge="3c3bb786",ReceivedChallenge="3c3bb786",ReceivedHash="2a9429986f27f4cfda37f0a70735aaa0"
\[2019-08-29 17:16:39\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '212.83.170.21:2968' - Wrong password
\[2019-08-29 17:16:39\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-29T17:16:39.949-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6483",SessionID="0x7f7b30462f68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.170.

2019-08-30T04:28:37.621920enmeeting.mahidol.ac.th sshd\[2379\]: User root from 49.88.112.80 not allowed because not listed in AllowUsers
2019-08-30T04:28:37.971307enmeeting.mahidol.ac.th sshd\[2379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.80  user=root
2019-08-30T04:28:39.994158enmeeting.mahidol.ac.th sshd\[2379\]: Failed password for invalid user root from 49.88.112.80 port 24456 ssh2
...

Aug 29 21:39:08 hcbbdb sshd\[10654\]: Invalid user radio from 45.55.15.134
Aug 29 21:39:08 hcbbdb sshd\[10654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.15.134
Aug 29 21:39:10 hcbbdb sshd\[10654\]: Failed password for invalid user radio from 45.55.15.134 port 57503 ssh2
Aug 29 21:45:33 hcbbdb sshd\[11309\]: Invalid user support from 45.55.15.134
Aug 29 21:45:33 hcbbdb sshd\[11309\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.15.134

Aug 29 11:45:52 sachi sshd\[3375\]: Invalid user cveks from 79.8.245.19
Aug 29 11:45:52 sachi sshd\[3375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.8.245.19
Aug 29 11:45:55 sachi sshd\[3375\]: Failed password for invalid user cveks from 79.8.245.19 port 64311 ssh2
Aug 29 11:50:12 sachi sshd\[3751\]: Invalid user adolph from 79.8.245.19
Aug 29 11:50:12 sachi sshd\[3751\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=host19-245-static.8-79-b.business.telecomitalia.it

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-29 19:23:35,136 INFO [amun_request_handler] unknown vuln (Attacker: 82.149.182.238 Port: 25, Mess: ['QUIT
'] (6) Stages: ['IMAIL_STAGE2'])

2019-08-29T21:01:38.480362abusebot.cloudsearch.cf sshd\[8440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.102.7  user=root

2019-08-29T20:48:43.564717abusebot.cloudsearch.cf sshd\[8065\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.9.58  user=root

Aug 29 11:00:58 web1 sshd\[20560\]: Invalid user hr from 178.128.55.49
Aug 29 11:00:58 web1 sshd\[20560\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.55.49
Aug 29 11:00:59 web1 sshd\[20560\]: Failed password for invalid user hr from 178.128.55.49 port 38268 ssh2
Aug 29 11:05:40 web1 sshd\[21021\]: Invalid user ye from 178.128.55.49
Aug 29 11:05:40 web1 sshd\[21021\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.55.49

firewall-block, port(s): 23/tcp

Aug 29 20:27:55 localhost sshd\[23744\]: Invalid user betyortodontia from 129.211.76.101 port 47358
Aug 29 20:27:55 localhost sshd\[23744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.76.101
Aug 29 20:27:57 localhost sshd\[23744\]: Failed password for invalid user betyortodontia from 129.211.76.101 port 47358 ssh2
...

Aug 29 23:17:27 rotator sshd\[28960\]: Failed password for root from 23.129.64.190 port 37416 ssh2Aug 29 23:17:31 rotator sshd\[28960\]: Failed password for root from 23.129.64.190 port 37416 ssh2Aug 29 23:17:33 rotator sshd\[28960\]: Failed password for root from 23.129.64.190 port 37416 ssh2Aug 29 23:17:36 rotator sshd\[28960\]: Failed password for root from 23.129.64.190 port 37416 ssh2Aug 29 23:17:40 rotator sshd\[28960\]: Failed password for root from 23.129.64.190 port 37416 ssh2Aug 29 23:17:43 rotator sshd\[28960\]: Failed password for root from 23.129.64.190 port 37416 ssh2
...

2019-08-29T23:01:17.186562lon01.zurich-datacenter.net sshd\[2610\]: Invalid user ubuntu from 195.9.32.22 port 57878
2019-08-29T23:01:17.194876lon01.zurich-datacenter.net sshd\[2610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.9.32.22
2019-08-29T23:01:19.071495lon01.zurich-datacenter.net sshd\[2610\]: Failed password for invalid user ubuntu from 195.9.32.22 port 57878 ssh2
2019-08-29T23:06:49.455463lon01.zurich-datacenter.net sshd\[2707\]: Invalid user gay from 195.9.32.22 port 51444
2019-08-29T23:06:49.464038lon01.zurich-datacenter.net sshd\[2707\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.9.32.22
...

Aug 29 10:59:19 lcprod sshd\[32489\]: Invalid user bkksextoy from 46.148.199.34
Aug 29 10:59:19 lcprod sshd\[32489\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.148.199.34
Aug 29 10:59:20 lcprod sshd\[32489\]: Failed password for invalid user bkksextoy from 46.148.199.34 port 5969 ssh2
Aug 29 11:03:46 lcprod sshd\[416\]: Invalid user pass123 from 46.148.199.34
Aug 29 11:03:46 lcprod sshd\[416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.148.199.34

Automatic report - Port Scan Attack