Jul  5 05:49:06 server sshd[964]: Failed password for invalid user zzzz from 198.199.115.94 port 44938 ssh2
Jul  5 05:52:51 server sshd[4504]: Failed password for invalid user teste from 198.199.115.94 port 41650 ssh2
Jul  5 05:56:40 server sshd[10509]: Failed password for invalid user zabbix from 198.199.115.94 port 38362 ssh2

Jun 25 04:38:28 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=200.175.104.103, lip=10.64.89.208, TLS, session=\
Jun 26 19:16:30 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=200.175.104.103, lip=10.64.89.208, TLS, session=\
Jun 27 22:43:41 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=200.175.104.103, lip=10.64.89.208, TLS: Disconnected, session=\<0RA64RapU5/Ir2hn\>
Jun 28 22:21:48 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=200.175.104.103, lip=10.64.89.208, session=\
Jun 29 06:45:33 WHD8 dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 4 secs\): user=\

Jul  5 05:47:40 ns382633 sshd\[29642\]: Invalid user rita from 216.104.200.22 port 42232
Jul  5 05:47:40 ns382633 sshd\[29642\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.104.200.22
Jul  5 05:47:42 ns382633 sshd\[29642\]: Failed password for invalid user rita from 216.104.200.22 port 42232 ssh2
Jul  5 05:56:03 ns382633 sshd\[31226\]: Invalid user memory from 216.104.200.22 port 45772
Jul  5 05:56:03 ns382633 sshd\[31226\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.104.200.22

Jul  4 18:20:28 hanapaa sshd\[30790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.246  user=root
Jul  4 18:20:30 hanapaa sshd\[30790\]: Failed password for root from 222.186.15.246 port 19214 ssh2
Jul  4 18:20:33 hanapaa sshd\[30790\]: Failed password for root from 222.186.15.246 port 19214 ssh2
Jul  4 18:20:35 hanapaa sshd\[30790\]: Failed password for root from 222.186.15.246 port 19214 ssh2
Jul  4 18:21:28 hanapaa sshd\[30876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.246  user=root

[2020-07-05 00:19:26] NOTICE[1197][C-000019d8] chan_sip.c: Call from '' (144.217.76.62:34091) to extension '000447441399590' rejected because extension not found in context 'public'.
[2020-07-05 00:19:26] SECURITY[1214] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-05T00:19:26.500-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="000447441399590",SessionID="0x7f6d2806bc78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/144.217.76.62/5060",ACLName="no_extension_match"
[2020-07-05 00:20:55] NOTICE[1197][C-000019d9] chan_sip.c: Call from '' (144.217.76.62:12720) to extension '011447441399590' rejected because extension not found in context 'public'.
[2020-07-05 00:20:55] SECURITY[1214] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-05T00:20:55.204-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011447441399590",SessionID="0x7f6d2806bc78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/1
...

Jul  5 05:52:50 pve1 sshd[30537]: Failed password for root from 5.101.107.183 port 47776 ssh2
...

Jul  5 06:12:10 buvik sshd[24193]: Failed password for root from 218.92.0.216 port 64034 ssh2
Jul  5 06:12:13 buvik sshd[24193]: Failed password for root from 218.92.0.216 port 64034 ssh2
Jul  5 06:12:15 buvik sshd[24193]: Failed password for root from 218.92.0.216 port 64034 ssh2
...

2020-07-05T03:53:14.289724shield sshd\[28704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip85.ip-139-99-84.net  user=root
2020-07-05T03:53:15.764418shield sshd\[28704\]: Failed password for root from 139.99.84.85 port 44004 ssh2
2020-07-05T03:56:24.816917shield sshd\[29538\]: Invalid user rahul from 139.99.84.85 port 36754
2020-07-05T03:56:24.820657shield sshd\[29538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip85.ip-139-99-84.net
2020-07-05T03:56:27.048840shield sshd\[29538\]: Failed password for invalid user rahul from 139.99.84.85 port 36754 ssh2

(smtpauth) Failed SMTP AUTH login from 191.53.236.203 (BR/Brazil/191-53-236-203.ptu-wr.mastercabo.com.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-05 08:26:06 plain authenticator failed for ([191.53.236.203]) [191.53.236.203]: 535 Incorrect authentication data (set_id=h.sabet)

SSH Brute Force

Jul  4 18:27:41 php1 sshd\[11869\]: Invalid user git from 183.82.121.34
Jul  4 18:27:41 php1 sshd\[11869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.82.121.34
Jul  4 18:27:44 php1 sshd\[11869\]: Failed password for invalid user git from 183.82.121.34 port 57952 ssh2
Jul  4 18:31:11 php1 sshd\[12134\]: Invalid user newtest from 183.82.121.34
Jul  4 18:31:11 php1 sshd\[12134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.82.121.34

Icarus honeypot on github

[H1] Blocked by UFW

"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:

Jul  5 05:53:01 OPSO sshd\[28232\]: Invalid user carlos from 101.78.209.39 port 33990
Jul  5 05:53:01 OPSO sshd\[28232\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.78.209.39
Jul  5 05:53:03 OPSO sshd\[28232\]: Failed password for invalid user carlos from 101.78.209.39 port 33990 ssh2
Jul  5 05:56:31 OPSO sshd\[28862\]: Invalid user gt from 101.78.209.39 port 54982
Jul  5 05:56:31 OPSO sshd\[28862\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.78.209.39