\[2019-12-25 17:54:39\] NOTICE\[2839\] chan_sip.c: Registration from '"8800" \' failed for '37.49.230.74:5371' - Wrong password
\[2019-12-25 17:54:39\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-25T17:54:39.924-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="8800",SessionID="0x7f0fb40f7cf8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.74/5371",Challenge="7b97ddee",ReceivedChallenge="7b97ddee",ReceivedHash="d874cc547cb92276bcc3c1514ae741a0"
\[2019-12-25 17:54:40\] NOTICE\[2839\] chan_sip.c: Registration from '"8800" \' failed for '37.49.230.74:5371' - Wrong password
\[2019-12-25 17:54:40\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-25T17:54:40.021-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="8800",SessionID="0x7f0fb4ca4128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/3

Dec 25 23:56:45 srv01 sshd[12705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.156  user=root
Dec 25 23:56:47 srv01 sshd[12705]: Failed password for root from 218.92.0.156 port 35828 ssh2
Dec 25 23:56:50 srv01 sshd[12705]: Failed password for root from 218.92.0.156 port 35828 ssh2
Dec 25 23:56:45 srv01 sshd[12705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.156  user=root
Dec 25 23:56:47 srv01 sshd[12705]: Failed password for root from 218.92.0.156 port 35828 ssh2
Dec 25 23:56:50 srv01 sshd[12705]: Failed password for root from 218.92.0.156 port 35828 ssh2
Dec 25 23:56:45 srv01 sshd[12705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.156  user=root
Dec 25 23:56:47 srv01 sshd[12705]: Failed password for root from 218.92.0.156 port 35828 ssh2
Dec 25 23:56:50 srv01 sshd[12705]: Failed password for root from 218.92.0.156 port 35828 
...

Dec 26 05:54:57 webhost01 sshd[31618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.65.106.134
...

Brute force attempt

Dec 26 00:54:36 taivassalofi sshd[167802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.173.108.215
Dec 26 00:54:38 taivassalofi sshd[167802]: Failed password for invalid user brunol from 84.173.108.215 port 39810 ssh2
...

Dec 26 00:07:25 markkoudstaal sshd[16620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.253.177.150
Dec 26 00:07:27 markkoudstaal sshd[16620]: Failed password for invalid user asterisk from 106.253.177.150 port 57098 ssh2
Dec 26 00:10:44 markkoudstaal sshd[16875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.253.177.150

Invalid user guest from 123.206.81.59 port 37792

Dec 25 23:45:50 lnxweb61 sshd[3492]: Failed password for root from 37.195.50.41 port 47920 ssh2
Dec 25 23:50:22 lnxweb61 sshd[7237]: Failed password for root from 37.195.50.41 port 49334 ssh2

Dec 25 20:17:26 firewall sshd[19271]: Failed password for root from 222.186.175.140 port 9492 ssh2
Dec 25 20:17:40 firewall sshd[19271]: error: maximum authentication attempts exceeded for root from 222.186.175.140 port 9492 ssh2 [preauth]
Dec 25 20:17:40 firewall sshd[19271]: Disconnecting: Too many authentication failures [preauth]
...

Dec 26 00:14:54 localhost sshd\[11813\]: Invalid user sherif from 118.24.201.168 port 57450
Dec 26 00:14:54 localhost sshd\[11813\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.201.168
Dec 26 00:14:56 localhost sshd\[11813\]: Failed password for invalid user sherif from 118.24.201.168 port 57450 ssh2

Automatic report - Banned IP Access

Unauthorized connection attempt from IP address 61.5.80.80 on Port 445(SMB)

Honeypot attack, port: 23, PTR: 42-200-198-101.static.imsbiz.com.

HTTP/80/443 Probe, BF, WP, Hack -

HTTP/80/443 Probe, BF, WP, Hack -