Apr 26 16:39:27 l03 sshd[29137]: Invalid user prashant from 51.91.140.241 port 53260
...

Lines containing failures of 51.91.140.241
Apr 25 07:50:40 kmh-wmh-002-nbg03 sshd[5414]: Invalid user samp from 51.91.140.241 port 41992
Apr 25 07:50:40 kmh-wmh-002-nbg03 sshd[5414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.140.241 
Apr 25 07:50:42 kmh-wmh-002-nbg03 sshd[5414]: Failed password for invalid user samp from 51.91.140.241 port 41992 ssh2
Apr 25 07:50:43 kmh-wmh-002-nbg03 sshd[5414]: Received disconnect from 51.91.140.241 port 41992:11: Bye Bye [preauth]
Apr 25 07:50:43 kmh-wmh-002-nbg03 sshd[5414]: Disconnected from invalid user samp 51.91.140.241 port 41992 [preauth]
Apr 25 07:53:39 kmh-wmh-002-nbg03 sshd[5658]: Invalid user transfer from 51.91.140.241 port 58662
Apr 25 07:53:39 kmh-wmh-002-nbg03 sshd[5658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.140.241 
Apr 25 07:53:41 kmh-wmh-002-nbg03 sshd[5658]: Failed password for invalid user transfer from 51.91........
------------------------------

Lines containing failures of 51.91.140.241
Apr 25 07:50:40 kmh-wmh-002-nbg03 sshd[5414]: Invalid user samp from 51.91.140.241 port 41992
Apr 25 07:50:40 kmh-wmh-002-nbg03 sshd[5414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.140.241 
Apr 25 07:50:42 kmh-wmh-002-nbg03 sshd[5414]: Failed password for invalid user samp from 51.91.140.241 port 41992 ssh2
Apr 25 07:50:43 kmh-wmh-002-nbg03 sshd[5414]: Received disconnect from 51.91.140.241 port 41992:11: Bye Bye [preauth]
Apr 25 07:50:43 kmh-wmh-002-nbg03 sshd[5414]: Disconnected from invalid user samp 51.91.140.241 port 41992 [preauth]
Apr 25 07:53:39 kmh-wmh-002-nbg03 sshd[5658]: Invalid user transfer from 51.91.140.241 port 58662
Apr 25 07:53:39 kmh-wmh-002-nbg03 sshd[5658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.140.241 
Apr 25 07:53:41 kmh-wmh-002-nbg03 sshd[5658]: Failed password for invalid user transfer from 51.91........
------------------------------

SSH brutforce

2020-04-22T22:18:34.626044abusebot-3.cloudsearch.cf sshd[9770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.140.218  user=root
2020-04-22T22:18:37.084500abusebot-3.cloudsearch.cf sshd[9770]: Failed password for root from 51.91.140.218 port 33032 ssh2
2020-04-22T22:19:13.505968abusebot-3.cloudsearch.cf sshd[9803]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.140.218  user=root
2020-04-22T22:19:14.985769abusebot-3.cloudsearch.cf sshd[9803]: Failed password for root from 51.91.140.218 port 38488 ssh2
2020-04-22T22:19:51.491466abusebot-3.cloudsearch.cf sshd[9838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.140.218  user=root
2020-04-22T22:19:53.187145abusebot-3.cloudsearch.cf sshd[9838]: Failed password for root from 51.91.140.218 port 43954 ssh2
2020-04-22T22:20:28.144288abusebot-3.cloudsearch.cf sshd[9873]: Invalid user test from 51.91.140.
...

Wordpress malicious attack:[sshd]

Apr 20 06:48:36  sshd\[10125\]: Invalid user ubuntu from 51.91.140.60Apr 20 06:48:38  sshd\[10125\]: Failed password for invalid user ubuntu from 51.91.140.60 port 54970 ssh2
...

Apr 19 08:13:50 server sshd[23973]: Failed password for invalid user af from 51.91.140.60 port 56716 ssh2
Apr 19 08:17:58 server sshd[26970]: Failed password for root from 51.91.140.60 port 47220 ssh2
Apr 19 08:22:20 server sshd[30711]: Failed password for root from 51.91.140.60 port 37726 ssh2

Apr 17 23:18:55 ucs sshd\[28504\]: Invalid user butter from 51.91.140.218 port 35330
Apr 17 23:19:31 ucs sshd\[28688\]: Invalid user ansible from 51.91.140.218 port 40524
Apr 17 23:20:41 ucs sshd\[29109\]: Invalid user git from 51.91.140.218 port 50706
...

Apr 16 15:12:05 www sshd\[39687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.140.60  user=root
Apr 16 15:12:07 www sshd\[39687\]: Failed password for root from 51.91.140.60 port 59074 ssh2
Apr 16 15:15:58 www sshd\[39733\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.140.60  user=root
...

Apr 16 00:58:20 ift sshd\[58597\]: Failed password for root from 51.91.140.218 port 35760 ssh2Apr 16 00:58:58 ift sshd\[58625\]: Failed password for root from 51.91.140.218 port 40560 ssh2Apr 16 00:59:36 ift sshd\[58632\]: Failed password for root from 51.91.140.218 port 45424 ssh2Apr 16 01:00:13 ift sshd\[58951\]: Failed password for root from 51.91.140.218 port 50334 ssh2Apr 16 01:00:48 ift sshd\[59067\]: Failed password for root from 51.91.140.218 port 55030 ssh2
...

5x Failed Password

2020-04-11T14:34:17.481762abusebot-2.cloudsearch.cf sshd[7057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.140.218  user=root
2020-04-11T14:34:19.292232abusebot-2.cloudsearch.cf sshd[7057]: Failed password for root from 51.91.140.218 port 46262 ssh2
2020-04-11T14:34:53.828221abusebot-2.cloudsearch.cf sshd[7088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.140.218  user=root
2020-04-11T14:34:55.578788abusebot-2.cloudsearch.cf sshd[7088]: Failed password for root from 51.91.140.218 port 49890 ssh2
2020-04-11T14:35:30.465799abusebot-2.cloudsearch.cf sshd[7122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.140.218  user=root
2020-04-11T14:35:32.632382abusebot-2.cloudsearch.cf sshd[7122]: Failed password for root from 51.91.140.218 port 53482 ssh2
2020-04-11T14:36:06.971364abusebot-2.cloudsearch.cf sshd[7153]: pam_unix(sshd:auth): authenticati
...

Apr 11 00:18:38 localhost sshd\[27238\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.140.218  user=root
Apr 11 00:18:41 localhost sshd\[27238\]: Failed password for root from 51.91.140.218 port 56188 ssh2
Apr 11 00:19:16 localhost sshd\[27245\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.140.218  user=root
Apr 11 00:19:18 localhost sshd\[27245\]: Failed password for root from 51.91.140.218 port 60868 ssh2
Apr 11 00:19:54 localhost sshd\[27277\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.140.218  user=root
...

Apr 10 13:22:10 ks10 sshd[3611848]: Failed password for root from 51.91.140.218 port 33322 ssh2
...

xmlrpc attack

Nov  6 16:58:26 XXX sshd[34716]: Invalid user ofsaa from 112.186.77.78 port 59828

2019-11-06T14:34:59.894959hub.schaetter.us sshd\[9960\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.182.47.132  user=root
2019-11-06T14:35:02.018249hub.schaetter.us sshd\[9960\]: Failed password for root from 180.182.47.132 port 47565 ssh2
2019-11-06T14:39:15.428137hub.schaetter.us sshd\[9997\]: Invalid user postgres from 180.182.47.132 port 38260
2019-11-06T14:39:15.438612hub.schaetter.us sshd\[9997\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.182.47.132
2019-11-06T14:39:17.039900hub.schaetter.us sshd\[9997\]: Failed password for invalid user postgres from 180.182.47.132 port 38260 ssh2
...

Lines containing failures of 118.24.208.67 (max 1000)
Nov  4 07:06:23 localhost sshd[28040]: User r.r from 118.24.208.67 not allowed because listed in DenyUsers
Nov  4 07:06:23 localhost sshd[28040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.208.67  user=r.r
Nov  4 07:06:25 localhost sshd[28040]: Failed password for invalid user r.r from 118.24.208.67 port 45600 ssh2
Nov  4 07:06:27 localhost sshd[28040]: Received disconnect from 118.24.208.67 port 45600:11: Bye Bye [preauth]
Nov  4 07:06:27 localhost sshd[28040]: Disconnected from invalid user r.r 118.24.208.67 port 45600 [preauth]
Nov  4 07:32:08 localhost sshd[29370]: Invalid user mike from 118.24.208.67 port 58892
Nov  4 07:32:08 localhost sshd[29370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.208.67 
Nov  4 07:32:10 localhost sshd[29370]: Failed password for invalid user mike from 118.24.208.67 port 58892 ssh2
N........
------------------------------

Automatic report - XMLRPC Attack

pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.23.1.163  user=root
Failed password for root from 182.23.1.163 port 34054 ssh2
Invalid user lemesany from 182.23.1.163 port 50726
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.23.1.163
Failed password for invalid user lemesany from 182.23.1.163 port 50726 ssh2

2019-11-06T17:41:46.967159hub.schaetter.us sshd\[11384\]: Invalid user ubadmin from 140.238.40.219 port 43064
2019-11-06T17:41:46.982069hub.schaetter.us sshd\[11384\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.238.40.219
2019-11-06T17:41:48.632156hub.schaetter.us sshd\[11384\]: Failed password for invalid user ubadmin from 140.238.40.219 port 43064 ssh2
2019-11-06T17:46:36.618852hub.schaetter.us sshd\[11413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.238.40.219  user=root
2019-11-06T17:46:39.081868hub.schaetter.us sshd\[11413\]: Failed password for root from 140.238.40.219 port 24835 ssh2
...

\[2019-11-06 12:11:36\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.75.48:53255' - Wrong password
\[2019-11-06 12:11:36\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-06T12:11:36.237-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="4810",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.75.48/53255",Challenge="037e75bd",ReceivedChallenge="037e75bd",ReceivedHash="1a6bfa23c4bb89e1ced6e8028725d3a2"
\[2019-11-06 12:12:15\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.75.48:52696' - Wrong password
\[2019-11-06 12:12:15\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-06T12:12:15.329-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="5990",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.75.48

5060/udp 5060/udp 5060/udp...
[2019-09-10/11-05]52pkt,1pt.(udp)

Nov  6 15:34:15 MainVPS sshd[2530]: Invalid user os from 45.124.86.65 port 38698
Nov  6 15:34:15 MainVPS sshd[2530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.124.86.65
Nov  6 15:34:15 MainVPS sshd[2530]: Invalid user os from 45.124.86.65 port 38698
Nov  6 15:34:16 MainVPS sshd[2530]: Failed password for invalid user os from 45.124.86.65 port 38698 ssh2
Nov  6 15:38:56 MainVPS sshd[2927]: Invalid user dtsp from 45.124.86.65 port 48474
...

Telnet Server BruteForce Attack

Nov  6 17:06:26 marvibiene sshd[52382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.192  user=root
Nov  6 17:06:28 marvibiene sshd[52382]: Failed password for root from 222.186.169.192 port 21176 ssh2
Nov  6 17:06:31 marvibiene sshd[52382]: Failed password for root from 222.186.169.192 port 21176 ssh2
Nov  6 17:06:26 marvibiene sshd[52382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.192  user=root
Nov  6 17:06:28 marvibiene sshd[52382]: Failed password for root from 222.186.169.192 port 21176 ssh2
Nov  6 17:06:31 marvibiene sshd[52382]: Failed password for root from 222.186.169.192 port 21176 ssh2
...

Telnet Server BruteForce Attack

MultiHost/MultiPort Probe, Scan, Hack -

Nov  6 15:56:41 vtv3 sshd\[10657\]: Invalid user voxility from 106.255.84.110 port 60512
Nov  6 15:56:41 vtv3 sshd\[10657\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.255.84.110
Nov  6 15:56:43 vtv3 sshd\[10657\]: Failed password for invalid user voxility from 106.255.84.110 port 60512 ssh2
Nov  6 16:01:28 vtv3 sshd\[13669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.255.84.110  user=root
Nov  6 16:01:30 vtv3 sshd\[13669\]: Failed password for root from 106.255.84.110 port 44998 ssh2
Nov  6 16:16:47 vtv3 sshd\[23189\]: Invalid user minecraft3 from 106.255.84.110 port 54870
Nov  6 16:16:47 vtv3 sshd\[23189\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.255.84.110
Nov  6 16:16:50 vtv3 sshd\[23189\]: Failed password for invalid user minecraft3 from 106.255.84.110 port 54870 ssh2
Nov  6 16:21:39 vtv3 sshd\[26514\]: pam_unix\(sshd:auth\): authentication failur