Jan 11 09:23:00 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:5a:1a:41:08:00 SRC=107.151.148.2 DST=109.74.200.221 LEN=220 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=UDP SPT=55956 DPT=123 LEN=200 
...

suspicious action Tue, 03 Mar 2020 10:24:26 -0300

Mar  3 22:42:49 bacztwo sshd[20406]: error: PAM: Authentication failure for root from 222.186.180.17
Mar  3 22:42:52 bacztwo sshd[20406]: error: PAM: Authentication failure for root from 222.186.180.17
Mar  3 22:42:55 bacztwo sshd[20406]: error: PAM: Authentication failure for root from 222.186.180.17
Mar  3 22:42:55 bacztwo sshd[20406]: Failed keyboard-interactive/pam for root from 222.186.180.17 port 47220 ssh2
Mar  3 22:42:40 bacztwo sshd[20406]: error: PAM: Authentication failure for root from 222.186.180.17
Mar  3 22:42:49 bacztwo sshd[20406]: error: PAM: Authentication failure for root from 222.186.180.17
Mar  3 22:42:52 bacztwo sshd[20406]: error: PAM: Authentication failure for root from 222.186.180.17
Mar  3 22:42:55 bacztwo sshd[20406]: error: PAM: Authentication failure for root from 222.186.180.17
Mar  3 22:42:55 bacztwo sshd[20406]: Failed keyboard-interactive/pam for root from 222.186.180.17 port 47220 ssh2
Mar  3 22:42:59 bacztwo sshd[20406]: error: PAM: Authentication f
...

Jan 21 00:18:28 mercury smtpd[1181]: 7f951bc1d93098b7 smtp event=failed-command address=178.159.98.59 host=178.159.98.59 command="RCPT to:" result="550 Invalid recipient"
...

Dec  3 13:55:42 mercury smtpd[1197]: 239b439b90690e73 smtp event=failed-command address=180.183.99.137 host=mx-ll-180.183.99-137.dynamic.3bb.co.th command="AUTH PLAIN (...)" result="535 Authentication failed"
...

Mar  3 05:08:37 hanapaa sshd\[26131\]: Invalid user zhusengbin from 106.52.102.190
Mar  3 05:08:37 hanapaa sshd\[26131\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.102.190
Mar  3 05:08:39 hanapaa sshd\[26131\]: Failed password for invalid user zhusengbin from 106.52.102.190 port 44925 ssh2
Mar  3 05:18:06 hanapaa sshd\[26919\]: Invalid user couchdb from 106.52.102.190
Mar  3 05:18:06 hanapaa sshd\[26919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.102.190

2020-01-04T05:22:07.421Z CLOSE host=103.49.208.163 port=55284 fd=4 time=10.010 bytes=0
...

Automatic report - SSH Brute-Force Attack

Dec 11 14:59:23 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:0d:8f:41:08:00 SRC=106.107.209.64 DST=109.74.200.221 LEN=32 TOS=0x00 PREC=0x00 TTL=46 ID=0 DF PROTO=UDP SPT=123 DPT=123 LEN=12 
...

Mar  3 12:00:48 vps46666688 sshd[14645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.244.109.199
Mar  3 12:00:50 vps46666688 sshd[14645]: Failed password for invalid user jocelyn from 1.244.109.199 port 36630 ssh2
...

Jan  4 10:14:45 mercury wordpress(www.learnargentinianspanish.com)[15827]: XML-RPC authentication attempt for unknown user chris from 105.112.91.234
...

Oct 17 17:37:15 mercury smtpd[25937]: 1cf1c037d86581bf smtp event=failed-command address=181.65.180.251 host=181.65.180.251 command="RCPT to:" result="550 Invalid recipient"
...

Unauthorised access (Mar  3) SRC=59.125.155.119 LEN=40 TTL=45 ID=53297 TCP DPT=8080 WINDOW=41856 SYN

Mar  3 15:26:55 MK-Soft-Root1 sshd[18542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.22.145.234 
Mar  3 15:26:57 MK-Soft-Root1 sshd[18542]: Failed password for invalid user mailman from 178.22.145.234 port 47202 ssh2
...

Mar  3 16:14:08 vps647732 sshd[24748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.155.224
Mar  3 16:14:10 vps647732 sshd[24748]: Failed password for invalid user daniel from 45.55.155.224 port 35613 ssh2
...