Dec 14 08:28:25 vps691689 sshd[19219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.236.85.130
Dec 14 08:28:26 vps691689 sshd[19219]: Failed password for invalid user wwwrun from 116.236.85.130 port 45282 ssh2
Dec 14 08:33:40 vps691689 sshd[19425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.236.85.130
...

Dec 14 07:32:47 xeon postfix/smtpd[51330]: NOQUEUE: reject: RCPT from unknown[181.41.216.143]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=<[181.41.216.130]>

fail2ban

\[2019-12-14 02:49:31\] NOTICE\[2839\] chan_sip.c: Registration from '"123" \' failed for '45.143.220.112:5441' - Wrong password
\[2019-12-14 02:49:31\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-14T02:49:31.425-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="123",SessionID="0x7f0fb40977c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.112/5441",Challenge="575d3786",ReceivedChallenge="575d3786",ReceivedHash="76380279189869f559d7ef293b261875"
\[2019-12-14 02:49:31\] NOTICE\[2839\] chan_sip.c: Registration from '"123" \' failed for '45.143.220.112:5441' - Wrong password
\[2019-12-14 02:49:31\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-14T02:49:31.530-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="123",SessionID="0x7f0fb40b5e88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/4

Dec 14 12:50:34 gw1 sshd[16316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.29.173.134
Dec 14 12:50:36 gw1 sshd[16316]: Failed password for invalid user zeiner from 112.29.173.134 port 40646 ssh2
...

Dec 14 08:21:19 ns3042688 sshd\[18692\]: Invalid user cheungwl from 139.199.13.142
Dec 14 08:21:19 ns3042688 sshd\[18692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142 
Dec 14 08:21:22 ns3042688 sshd\[18692\]: Failed password for invalid user cheungwl from 139.199.13.142 port 45934 ssh2
Dec 14 08:26:13 ns3042688 sshd\[20412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.13.142  user=root
Dec 14 08:26:15 ns3042688 sshd\[20412\]: Failed password for root from 139.199.13.142 port 34194 ssh2
...

2019-12-14T07:30:59.040320shield sshd\[32229\]: Invalid user host from 51.75.229.178 port 33480
2019-12-14T07:30:59.044897shield sshd\[32229\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip178.ip-51-75-229.eu
2019-12-14T07:31:01.213626shield sshd\[32229\]: Failed password for invalid user host from 51.75.229.178 port 33480 ssh2
2019-12-14T07:36:20.615622shield sshd\[1064\]: Invalid user adminit from 51.75.229.178 port 41698
2019-12-14T07:36:20.619761shield sshd\[1064\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip178.ip-51-75-229.eu

Dec 13 21:32:16 php1 sshd\[30623\]: Invalid user mo from 167.99.155.36
Dec 13 21:32:16 php1 sshd\[30623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.155.36
Dec 13 21:32:18 php1 sshd\[30623\]: Failed password for invalid user mo from 167.99.155.36 port 34110 ssh2
Dec 13 21:37:33 php1 sshd\[31081\]: Invalid user sutardja from 167.99.155.36
Dec 13 21:37:33 php1 sshd\[31081\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.155.36

Dec 13 21:00:12 web9 sshd\[24225\]: Invalid user aunon from 142.93.1.100
Dec 13 21:00:12 web9 sshd\[24225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.1.100
Dec 13 21:00:13 web9 sshd\[24225\]: Failed password for invalid user aunon from 142.93.1.100 port 55642 ssh2
Dec 13 21:07:30 web9 sshd\[25260\]: Invalid user cae from 142.93.1.100
Dec 13 21:07:30 web9 sshd\[25260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.1.100

Dec 14 08:14:39 minden010 sshd[6946]: Failed password for root from 222.186.175.220 port 26422 ssh2
Dec 14 08:14:43 minden010 sshd[6946]: Failed password for root from 222.186.175.220 port 26422 ssh2
Dec 14 08:14:46 minden010 sshd[6946]: Failed password for root from 222.186.175.220 port 26422 ssh2
Dec 14 08:14:50 minden010 sshd[6946]: Failed password for root from 222.186.175.220 port 26422 ssh2
...

WordPress login Brute force / Web App Attack on client site.

Invalid user adriana from 201.20.36.4 port 38830
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.20.36.4
Failed password for invalid user adriana from 201.20.36.4 port 38830 ssh2
Invalid user hume from 201.20.36.4 port 63096
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.20.36.4

Dec 14 08:11:29 vps647732 sshd[28357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.156.116.72
Dec 14 08:11:31 vps647732 sshd[28357]: Failed password for invalid user chaik from 124.156.116.72 port 42608 ssh2
...

Dec 14 07:44:55 sso sshd[32205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.138.238.14
Dec 14 07:44:57 sso sshd[32205]: Failed password for invalid user smagacz from 103.138.238.14 port 38964 ssh2
...

Dec 14 07:20:49 localhost sshd[42507]: Failed password for invalid user do from 71.67.51.154 port 52806 ssh2
Dec 14 08:18:31 localhost sshd[44118]: User nobody from 71.67.51.154 not allowed because not listed in AllowUsers
Dec 14 08:18:33 localhost sshd[44118]: Failed password for invalid user nobody from 71.67.51.154 port 32939 ssh2