Oct  5 06:21:24 core sshd[25684]: Invalid user P@ssw0rd@2016 from 188.226.226.82 port 52897
Oct  5 06:21:26 core sshd[25684]: Failed password for invalid user P@ssw0rd@2016 from 188.226.226.82 port 52897 ssh2
...

Oct  4 20:20:37 plusreed sshd[9664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.15.230  user=root
Oct  4 20:20:40 plusreed sshd[9664]: Failed password for root from 106.12.15.230 port 60768 ssh2
...

\[2019-10-04 23:57:00\] NOTICE\[1948\] chan_sip.c: Registration from '"350" \' failed for '77.247.110.17:5114' - Wrong password
\[2019-10-04 23:57:00\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-04T23:57:00.384-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="350",SessionID="0x7f1e1cbe03b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.17/5114",Challenge="2dbb3155",ReceivedChallenge="2dbb3155",ReceivedHash="139cc10be3bc73b453cab5d490fabc28"
\[2019-10-04 23:57:00\] NOTICE\[1948\] chan_sip.c: Registration from '"350" \' failed for '77.247.110.17:5114' - Wrong password
\[2019-10-04 23:57:00\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-04T23:57:00.495-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="350",SessionID="0x7f1e1c3aac08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.2

Oct  4 17:47:21 auw2 sshd\[6509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.220.159.78  user=root
Oct  4 17:47:24 auw2 sshd\[6509\]: Failed password for root from 223.220.159.78 port 33203 ssh2
Oct  4 17:52:27 auw2 sshd\[6928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.220.159.78  user=root
Oct  4 17:52:30 auw2 sshd\[6928\]: Failed password for root from 223.220.159.78 port 11282 ssh2
Oct  4 17:57:11 auw2 sshd\[7400\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.220.159.78  user=root

Oct  5 05:55:59 andromeda postfix/smtpd\[1349\]: warning: unknown\[117.32.249.22\]: SASL LOGIN authentication failed: authentication failure
Oct  5 05:56:03 andromeda postfix/smtpd\[44292\]: warning: unknown\[117.32.249.22\]: SASL LOGIN authentication failed: authentication failure
Oct  5 05:56:12 andromeda postfix/smtpd\[1349\]: warning: unknown\[117.32.249.22\]: SASL LOGIN authentication failed: authentication failure
Oct  5 05:56:17 andromeda postfix/smtpd\[1349\]: warning: unknown\[117.32.249.22\]: SASL LOGIN authentication failed: authentication failure
Oct  5 05:56:35 andromeda postfix/smtpd\[50302\]: warning: unknown\[117.32.249.22\]: SASL LOGIN authentication failed: authentication failure

Oct  5 02:29:10 h2177944 sshd\[11891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.195.200.148  user=root
Oct  5 02:29:11 h2177944 sshd\[11891\]: Failed password for root from 122.195.200.148 port 33961 ssh2
Oct  5 02:29:14 h2177944 sshd\[11891\]: Failed password for root from 122.195.200.148 port 33961 ssh2
Oct  5 02:29:16 h2177944 sshd\[11891\]: Failed password for root from 122.195.200.148 port 33961 ssh2
...

Oct  4 17:53:26 auw2 sshd\[7038\]: Invalid user !@qwaszx from 95.110.173.147
Oct  4 17:53:26 auw2 sshd\[7038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.110.173.147
Oct  4 17:53:29 auw2 sshd\[7038\]: Failed password for invalid user !@qwaszx from 95.110.173.147 port 51600 ssh2
Oct  4 17:57:12 auw2 sshd\[7402\]: Invalid user D3bi4n2017 from 95.110.173.147
Oct  4 17:57:12 auw2 sshd\[7402\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.110.173.147

10/05/2019-05:57:13.062422 54.200.167.186 Protocol: 6 SURICATA TLS invalid record/traffic

Oct  5 02:30:13 localhost sshd\[29553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.144  user=root
Oct  5 02:30:16 localhost sshd\[29553\]: Failed password for root from 222.186.31.144 port 59226 ssh2
Oct  5 02:30:18 localhost sshd\[29553\]: Failed password for root from 222.186.31.144 port 59226 ssh2

Telnet Server BruteForce Attack

Oct  5 05:53:44 SilenceServices sshd[8207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.192.217
Oct  5 05:53:47 SilenceServices sshd[8207]: Failed password for invalid user SaoPaolo-123 from 51.255.192.217 port 46586 ssh2
Oct  5 05:57:10 SilenceServices sshd[9182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.192.217

Oct  4 18:09:31 hpm sshd\[404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.123.111  user=root
Oct  4 18:09:33 hpm sshd\[404\]: Failed password for root from 178.128.123.111 port 54074 ssh2
Oct  4 18:13:57 hpm sshd\[833\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.123.111  user=root
Oct  4 18:13:59 hpm sshd\[833\]: Failed password for root from 178.128.123.111 port 37358 ssh2
Oct  4 18:18:19 hpm sshd\[1208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.123.111  user=root

Oct  5 05:56:44 MK-Soft-VM3 sshd[22456]: Failed password for root from 49.88.112.70 port 34506 ssh2
Oct  5 05:56:47 MK-Soft-VM3 sshd[22456]: Failed password for root from 49.88.112.70 port 34506 ssh2
...

Port scan

$f2bV_matches