Dec 21 20:41:23 Ubuntu-1404-trusty-64-minimal sshd\[26181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17  user=root
Dec 21 20:41:25 Ubuntu-1404-trusty-64-minimal sshd\[26181\]: Failed password for root from 222.186.180.17 port 30728 ssh2
Dec 21 20:41:41 Ubuntu-1404-trusty-64-minimal sshd\[26267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17  user=root
Dec 21 20:41:43 Ubuntu-1404-trusty-64-minimal sshd\[26267\]: Failed password for root from 222.186.180.17 port 52566 ssh2
Dec 21 20:42:03 Ubuntu-1404-trusty-64-minimal sshd\[26366\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17  user=root

2019-12-21T14:51:08.944020homeassistant sshd[24845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.132.237.187  user=root
2019-12-21T14:51:11.119274homeassistant sshd[24845]: Failed password for root from 88.132.237.187 port 33272 ssh2
...

103.81.85.21 - - \[21/Dec/2019:16:18:11 +0100\] "POST /wp-login.php HTTP/1.0" 200 7556 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
103.81.85.21 - - \[21/Dec/2019:16:18:15 +0100\] "POST /wp-login.php HTTP/1.0" 200 7381 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
103.81.85.21 - - \[21/Dec/2019:16:18:19 +0100\] "POST /wp-login.php HTTP/1.0" 200 7376 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"

Automatic report - Port Scan Attack

Dec 21 20:07:03 server sshd\[6087\]: Invalid user user from 117.50.13.29
Dec 21 20:07:03 server sshd\[6087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.13.29 
Dec 21 20:07:05 server sshd\[6087\]: Failed password for invalid user user from 117.50.13.29 port 59346 ssh2
Dec 21 20:33:29 server sshd\[13063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.13.29  user=root
Dec 21 20:33:31 server sshd\[13063\]: Failed password for root from 117.50.13.29 port 55616 ssh2
...

"Fail2Ban detected SSH brute force attempt"

REQUESTED PAGE: /wp-admin/js/password-strength-meter.min.js?ver=5.3.2

1576939893 - 12/21/2019 15:51:33 Host: 159.224.86.105/159.224.86.105 Port: 445 TCP Blocked

$f2bV_matches

Dec 21 20:19:48 webserver postfix/smtpd\[31711\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 21 20:21:21 webserver postfix/smtpd\[31709\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 21 20:22:49 webserver postfix/smtpd\[31711\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 21 20:24:15 webserver postfix/smtpd\[31709\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 21 20:25:45 webserver postfix/smtpd\[31711\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...

2019-12-21T17:35:30.697394centos sshd\[30834\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.248.5  user=mysql
2019-12-21T17:35:32.529253centos sshd\[30834\]: Failed password for mysql from 139.59.248.5 port 56420 ssh2
2019-12-21T17:44:22.987359centos sshd\[31287\]: Invalid user harborg from 139.59.248.5 port 60532
2019-12-21T17:44:22.993495centos sshd\[31287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.248.5

Dec 21 16:34:59 OPSO sshd\[29675\]: Invalid user pascal from 46.101.72.145 port 51108
Dec 21 16:34:59 OPSO sshd\[29675\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.72.145
Dec 21 16:35:01 OPSO sshd\[29675\]: Failed password for invalid user pascal from 46.101.72.145 port 51108 ssh2
Dec 21 16:40:23 OPSO sshd\[30892\]: Invalid user nfs from 46.101.72.145 port 55648
Dec 21 16:40:23 OPSO sshd\[30892\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.72.145

Dec 21 08:05:20 eddieflores sshd\[25394\]: Invalid user brouthillier from 51.77.230.23
Dec 21 08:05:20 eddieflores sshd\[25394\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.ip-51-77-230.eu
Dec 21 08:05:22 eddieflores sshd\[25394\]: Failed password for invalid user brouthillier from 51.77.230.23 port 58290 ssh2
Dec 21 08:10:31 eddieflores sshd\[25933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.ip-51-77-230.eu  user=root
Dec 21 08:10:33 eddieflores sshd\[25933\]: Failed password for root from 51.77.230.23 port 35326 ssh2

\[2019-12-21 13:46:14\] NOTICE\[2839\] chan_sip.c: Registration from '"2005" \' failed for '37.49.230.63:5452' - Wrong password
\[2019-12-21 13:46:14\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-21T13:46:14.564-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="2005",SessionID="0x7f0fb4a2f618",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.63/5452",Challenge="32f79671",ReceivedChallenge="32f79671",ReceivedHash="9cd2c7cbd614f9060ea70e85d1d9d9f5"
\[2019-12-21 13:46:14\] NOTICE\[2839\] chan_sip.c: Registration from '"2005" \' failed for '37.49.230.63:5452' - Wrong password
\[2019-12-21 13:46:14\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-21T13:46:14.671-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="2005",SessionID="0x7f0fb4960348",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/3

"Fail2Ban detected SSH brute force attempt"