Triggered by Fail2Ban at Vostok web server

SSH Brute Force, server-1 sshd[3274]: Failed password for root from 120.205.45.252 port 64900 ssh2

Oct  5 02:58:59 sachi sshd\[29831\]: Invalid user Admin@600 from 119.146.145.104
Oct  5 02:58:59 sachi sshd\[29831\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.146.145.104
Oct  5 02:59:01 sachi sshd\[29831\]: Failed password for invalid user Admin@600 from 119.146.145.104 port 2566 ssh2
Oct  5 03:04:51 sachi sshd\[30328\]: Invalid user Root from 119.146.145.104
Oct  5 03:04:51 sachi sshd\[30328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.146.145.104

2019-10-05T13:54:22.392768shield sshd\[4421\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.18.169  user=root
2019-10-05T13:54:24.739465shield sshd\[4421\]: Failed password for root from 165.227.18.169 port 53196 ssh2
2019-10-05T13:58:36.981181shield sshd\[5333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.18.169  user=root
2019-10-05T13:58:39.197408shield sshd\[5333\]: Failed password for root from 165.227.18.169 port 36780 ssh2
2019-10-05T14:02:50.712638shield sshd\[5983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.227.18.169  user=root

Oct  5 16:29:30 core sshd[4362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.1.134.41  user=root
Oct  5 16:29:32 core sshd[4362]: Failed password for root from 58.1.134.41 port 46788 ssh2
...

\[2019-10-05 10:15:27\] NOTICE\[1948\] chan_sip.c: Registration from '"2000" \' failed for '217.61.98.24:5068' - Wrong password
\[2019-10-05 10:15:27\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-05T10:15:27.002-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2000",SessionID="0x7f1e1ca30578",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/217.61.98.24/5068",Challenge="3853a6ca",ReceivedChallenge="3853a6ca",ReceivedHash="6e6b72d27f5a86a70b8c6938b54e494a"
\[2019-10-05 10:19:23\] NOTICE\[1948\] chan_sip.c: Registration from '"1010" \' failed for '217.61.98.24:5132' - Wrong password
\[2019-10-05 10:19:23\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-05T10:19:23.202-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1010",SessionID="0x7f1e1c25e8a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/2

137.226.113.28 - - [05/Oct/2019:14:49:05 +0000] "GET / HTTP/1.1" 403 153 "-" "Mozilla/5.0 zgrab/0.x (compatible; Researchscan/t12sns; +http://researchscan.comsys.rwth-aachen.de)"

Unauthorized access detected from banned ip

2019-10-05T14:34:03.297583abusebot-2.cloudsearch.cf sshd\[16890\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.ip-51-77-137.eu  user=root

2019-10-05T10:20:21.8739941495-001 sshd\[23539\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.67.106.109  user=root
2019-10-05T10:20:23.5785381495-001 sshd\[23539\]: Failed password for root from 36.67.106.109 port 48036 ssh2
2019-10-05T10:26:20.2741611495-001 sshd\[23886\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.67.106.109  user=root
2019-10-05T10:26:21.9283621495-001 sshd\[23886\]: Failed password for root from 36.67.106.109 port 39041 ssh2
2019-10-05T10:32:21.0705461495-001 sshd\[24320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.67.106.109  user=root
2019-10-05T10:32:22.9505191495-001 sshd\[24320\]: Failed password for root from 36.67.106.109 port 58281 ssh2
...

Oct  5 1168 admin sshd[22516]: Accepted password for root from 103.8.78.94 port 57336 ssh2

Oct  5 16:39:24 legacy sshd[11787]: Failed password for root from 61.19.22.217 port 52556 ssh2
Oct  5 16:44:05 legacy sshd[11913]: Failed password for root from 61.19.22.217 port 36252 ssh2
...

Oct  5 02:04:43 kapalua sshd\[31640\]: Invalid user 123Violet from 5.101.140.227
Oct  5 02:04:43 kapalua sshd\[31640\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.101.140.227
Oct  5 02:04:45 kapalua sshd\[31640\]: Failed password for invalid user 123Violet from 5.101.140.227 port 45266 ssh2
Oct  5 02:08:46 kapalua sshd\[32031\]: Invalid user Pa\$\$word@2018 from 5.101.140.227
Oct  5 02:08:46 kapalua sshd\[32031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.101.140.227

Oct  5 16:11:48 mc1 kernel: \[1571116.091976\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.178 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=56158 PROTO=TCP SPT=47805 DPT=12859 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct  5 16:14:56 mc1 kernel: \[1571304.599037\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.178 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=27239 PROTO=TCP SPT=47805 DPT=55758 WINDOW=1024 RES=0x00 SYN URGP=0 
Oct  5 16:18:54 mc1 kernel: \[1571542.033470\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.178 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=52467 PROTO=TCP SPT=47805 DPT=45315 WINDOW=1024 RES=0x00 SYN URGP=0 
...

Oct  5 04:02:42 wbs sshd\[29442\]: Invalid user 6yhn5tgb4rfv from 140.238.240.110
Oct  5 04:02:42 wbs sshd\[29442\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.238.240.110
Oct  5 04:02:44 wbs sshd\[29442\]: Failed password for invalid user 6yhn5tgb4rfv from 140.238.240.110 port 10870 ssh2
Oct  5 04:07:39 wbs sshd\[29891\]: Invalid user 6yhn5tgb4rfv from 140.238.240.110
Oct  5 04:07:39 wbs sshd\[29891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.238.240.110