Automatic report - Port Scan Attack

WordPress wp-login brute force :: 181.122.242.87 0.504 BYPASS [23/Feb/2020:04:57:32  0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2287 "https://[censored_2]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"

Feb 22 19:34:51 wbs sshd\[22760\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.59.171  user=root
Feb 22 19:34:53 wbs sshd\[22760\]: Failed password for root from 140.143.59.171 port 36859 ssh2
Feb 22 19:37:37 wbs sshd\[22979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.59.171  user=mysql
Feb 22 19:37:39 wbs sshd\[22979\]: Failed password for mysql from 140.143.59.171 port 53611 ssh2
Feb 22 19:40:09 wbs sshd\[23208\]: Invalid user sanchi from 140.143.59.171

Feb 23 05:58:06 ks10 sshd[245025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.129.17.5 
Feb 23 05:58:08 ks10 sshd[245025]: Failed password for invalid user polkitd from 89.129.17.5 port 44338 ssh2
...

Multiple GET/s from  Banned ISP/IP - Ignores 403 returns

Feb 22 19:21:07 auw2 sshd\[30911\]: Invalid user 1234 from 146.168.2.84
Feb 22 19:21:07 auw2 sshd\[30911\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-146-168-2-84.nh.cpe.atlanticbb.net
Feb 22 19:21:09 auw2 sshd\[30911\]: Failed password for invalid user 1234 from 146.168.2.84 port 49248 ssh2
Feb 22 19:23:50 auw2 sshd\[31113\]: Invalid user mirc from 146.168.2.84
Feb 22 19:23:50 auw2 sshd\[31113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-146-168-2-84.nh.cpe.atlanticbb.net

80.82.77.245 was recorded 6 times by 6 hosts attempting to connect to the following ports: 1026. Incident counter (4h, 24h, all-time): 6, 24, 21128

Feb 22 18:57:24 hanapaa sshd\[5520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.55  user=root
Feb 22 18:57:27 hanapaa sshd\[5520\]: Failed password for root from 49.88.112.55 port 41143 ssh2
Feb 22 18:57:43 hanapaa sshd\[5547\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.55  user=root
Feb 22 18:57:45 hanapaa sshd\[5547\]: Failed password for root from 49.88.112.55 port 45830 ssh2
Feb 22 18:58:07 hanapaa sshd\[5587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.55  user=root

[2020-02-22 23:58:23] NOTICE[1148] chan_sip.c: Registration from '' failed for '37.49.230.105:52297' - Wrong password
[2020-02-22 23:58:23] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-22T23:58:23.329-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="777143",SessionID="0x7fd82c80d368",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.105/52297",Challenge="7f0f3a23",ReceivedChallenge="7f0f3a23",ReceivedHash="6db4331eab2dfbeb7142a47fd8fa004b"
[2020-02-22 23:58:23] NOTICE[1148] chan_sip.c: Registration from '' failed for '37.49.230.105:52299' - Wrong password
[2020-02-22 23:58:23] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-22T23:58:23.329-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="777143",SessionID="0x7fd82cb725a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.105/52299",Chal
...

Unauthorized connection attempt detected from IP address 51.89.173.198 to port 8443 [J]

Feb 22 18:50:14 wbs sshd\[19004\]: Invalid user rsync from 125.138.155.83
Feb 22 18:50:14 wbs sshd\[19004\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.138.155.83
Feb 22 18:50:16 wbs sshd\[19004\]: Failed password for invalid user rsync from 125.138.155.83 port 36998 ssh2
Feb 22 18:57:18 wbs sshd\[19603\]: Invalid user usertest from 125.138.155.83
Feb 22 18:57:18 wbs sshd\[19603\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.138.155.83

1582433882 - 02/23/2020 05:58:02 Host: 115.124.151.246/115.124.151.246 Port: 445 TCP Blocked

Feb 23 06:39:56 sd-53420 sshd\[12167\]: Invalid user louis from 213.91.179.246
Feb 23 06:39:56 sd-53420 sshd\[12167\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.91.179.246
Feb 23 06:39:59 sd-53420 sshd\[12167\]: Failed password for invalid user louis from 213.91.179.246 port 54487 ssh2
Feb 23 06:43:04 sd-53420 sshd\[12458\]: Invalid user paul from 213.91.179.246
Feb 23 06:43:04 sd-53420 sshd\[12458\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.91.179.246
...

Feb 22 19:10:18 web1 sshd\[5665\]: Invalid user user15 from 180.179.48.101
Feb 22 19:10:18 web1 sshd\[5665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.179.48.101
Feb 22 19:10:20 web1 sshd\[5665\]: Failed password for invalid user user15 from 180.179.48.101 port 45395 ssh2
Feb 22 19:14:47 web1 sshd\[6411\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.179.48.101  user=mysql
Feb 22 19:14:49 web1 sshd\[6411\]: Failed password for mysql from 180.179.48.101 port 58569 ssh2

02/23/2020-06:29:06.974297 52.34.83.11 Protocol: 6 SURICATA TLS invalid record/traffic