Sep 17 00:59:00 vps647732 sshd[3477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.158.63
Sep 17 00:59:02 vps647732 sshd[3477]: Failed password for invalid user server from 159.65.158.63 port 55030 ssh2
...

diesunddas.net 207.148.68.110 \[16/Sep/2019:20:53:42 +0200\] "POST /wp-login.php HTTP/1.1" 200 8413 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
diesunddas.net 207.148.68.110 \[16/Sep/2019:20:53:47 +0200\] "POST /wp-login.php HTTP/1.1" 200 8413 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"

Sep 17 00:59:57 saschabauer sshd[8964]: Failed password for root from 106.12.17.43 port 49844 ssh2

Sep 17 01:09:24 mail sshd\[18702\]: Failed password for invalid user student from 181.198.35.108 port 57974 ssh2
Sep 17 01:14:24 mail sshd\[19326\]: Invalid user worker from 181.198.35.108 port 58108
Sep 17 01:14:24 mail sshd\[19326\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.198.35.108
Sep 17 01:14:26 mail sshd\[19326\]: Failed password for invalid user worker from 181.198.35.108 port 58108 ssh2
Sep 17 01:19:20 mail sshd\[19949\]: Invalid user qn from 181.198.35.108 port 58128

Sep 16 10:05:03 lcdev sshd\[13067\]: Invalid user q from 121.69.130.2
Sep 16 10:05:03 lcdev sshd\[13067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.69.130.2
Sep 16 10:05:06 lcdev sshd\[13067\]: Failed password for invalid user q from 121.69.130.2 port 2170 ssh2
Sep 16 10:07:07 lcdev sshd\[13213\]: Invalid user jy from 121.69.130.2
Sep 16 10:07:07 lcdev sshd\[13213\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.69.130.2

Sep 16 19:07:44 localhost sshd\[111876\]: Invalid user content from 164.132.205.21 port 44444
Sep 16 19:07:44 localhost sshd\[111876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.205.21
Sep 16 19:07:46 localhost sshd\[111876\]: Failed password for invalid user content from 164.132.205.21 port 44444 ssh2
Sep 16 19:11:45 localhost sshd\[112101\]: Invalid user rong from 164.132.205.21 port 34288
Sep 16 19:11:45 localhost sshd\[112101\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.205.21
...

SSH-BruteForce

Attempt To attack host OS, exploiting network vulnerabilities, on 16-09-2019 22:51:30.

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-16 17:32:53,239 INFO [amun_request_handler] PortScan Detected on Port: 445 (36.70.16.193)

Sep 17 01:23:17 cvbnet sshd[3227]: Failed password for root from 49.88.112.80 port 36362 ssh2
Sep 17 01:23:20 cvbnet sshd[3227]: Failed password for root from 49.88.112.80 port 36362 ssh2

2019-09-16T23:30:31.331016abusebot-2.cloudsearch.cf sshd\[27443\]: Invalid user outln from 106.13.34.190 port 48808

\[2019-09-16 19:03:27\] NOTICE\[20685\] chan_sip.c: Registration from '"8888" \' failed for '77.247.108.220:5132' - Wrong password
\[2019-09-16 19:03:27\] SECURITY\[20693\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-16T19:03:27.015-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8888",SessionID="0x7f8a6c3a3df8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.108.220/5132",Challenge="0e8200cc",ReceivedChallenge="0e8200cc",ReceivedHash="f77465a3550eae0fd1e7973d8083ab64"
\[2019-09-16 19:03:27\] NOTICE\[20685\] chan_sip.c: Registration from '"8888" \' failed for '77.247.108.220:5132' - Wrong password
\[2019-09-16 19:03:27\] SECURITY\[20693\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-16T19:03:27.215-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8888",SessionID="0x7f8a6c3857d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="

Sep 16 13:23:16 friendsofhawaii sshd\[5507\]: Invalid user redhat from 85.192.35.167
Sep 16 13:23:16 friendsofhawaii sshd\[5507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.192.35.167
Sep 16 13:23:17 friendsofhawaii sshd\[5507\]: Failed password for invalid user redhat from 85.192.35.167 port 35202 ssh2
Sep 16 13:26:56 friendsofhawaii sshd\[5865\]: Invalid user zu from 85.192.35.167
Sep 16 13:26:56 friendsofhawaii sshd\[5865\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.192.35.167

Sep 16 13:26:33 friendsofhawaii sshd\[5827\]: Invalid user admin from 212.92.98.237
Sep 16 13:26:33 friendsofhawaii sshd\[5827\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.92.98.237
Sep 16 13:26:35 friendsofhawaii sshd\[5827\]: Failed password for invalid user admin from 212.92.98.237 port 39572 ssh2
Sep 16 13:31:00 friendsofhawaii sshd\[6223\]: Invalid user zhangl from 212.92.98.237
Sep 16 13:31:00 friendsofhawaii sshd\[6223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.92.98.237

Sep 16 21:14:02 web2 sshd[25737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=77.35.191.75
Sep 16 21:14:04 web2 sshd[25737]: Failed password for invalid user user from 77.35.191.75 port 4789 ssh2