Scan detected and blocked 2020.03.06 14:31:15

Brute force attempt

Mar  6 17:45:16 debian-2gb-nbg1-2 kernel: \[5772280.989758\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.134.179.57 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=45519 PROTO=TCP SPT=54663 DPT=33287 WINDOW=1024 RES=0x00 SYN URGP=0

Mar  6 14:31:47 grey postfix/smtpd\[23651\]: NOQUEUE: reject: RCPT from unknown\[195.98.69.244\]: 554 5.7.1 Service unavailable\; Client host \[195.98.69.244\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?195.98.69.244\; from=\ to=\ proto=SMTP helo=\
...

Mar  6 17:09:08 v22018076622670303 sshd\[6552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.142  user=root
Mar  6 17:09:11 v22018076622670303 sshd\[6552\]: Failed password for root from 222.186.173.142 port 61480 ssh2
Mar  6 17:09:14 v22018076622670303 sshd\[6552\]: Failed password for root from 222.186.173.142 port 61480 ssh2
...

Unauthorized connection attempt from IP address 112.133.236.76 on Port 445(SMB)

Mar  6 17:33:37 MK-Soft-VM3 sshd[26507]: Failed password for root from 49.88.112.74 port 48169 ssh2
Mar  6 17:33:40 MK-Soft-VM3 sshd[26507]: Failed password for root from 49.88.112.74 port 48169 ssh2
...

(sshd) Failed SSH login from 192.241.225.90 (US/United States/zg-0229i-3.stretchoid.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Mar  6 08:31:08 host sshd[88914]: Did not receive identification string from 192.241.225.90 port 37408

2020-03-06T16:46:17.080135shield sshd\[11720\]: Invalid user influxdb from 128.199.90.245 port 35072
2020-03-06T16:46:17.085684shield sshd\[11720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=scrapy.clooud.us
2020-03-06T16:46:18.764179shield sshd\[11720\]: Failed password for invalid user influxdb from 128.199.90.245 port 35072 ssh2
2020-03-06T16:49:04.034682shield sshd\[12207\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=scrapy.clooud.us  user=root
2020-03-06T16:49:06.308999shield sshd\[12207\]: Failed password for root from 128.199.90.245 port 55604 ssh2

2020-03-06 14:09:12 auth_login authenticator failed for (localhost.localdomain) [77.40.61.133]: 535 Incorrect authentication data (set_id=allstudents@marionet.ru)
2020-03-06 14:31:50 auth_login authenticator failed for (localhost.localdomain) [77.40.61.133]: 535 Incorrect authentication data (set_id=all-staff@marionet.ru)
...

SSH/22 MH Probe, BF, Hack -

Mar  6 16:35:19 MK-Soft-VM3 sshd[22756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.96.236 
Mar  6 16:35:21 MK-Soft-VM3 sshd[22756]: Failed password for invalid user hadoopuser from 122.51.96.236 port 54118 ssh2
...

Mar  6 14:56:43 v22018076622670303 sshd\[5147\]: Invalid user mc2 from 49.234.10.207 port 59052
Mar  6 14:56:43 v22018076622670303 sshd\[5147\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.10.207
Mar  6 14:56:45 v22018076622670303 sshd\[5147\]: Failed password for invalid user mc2 from 49.234.10.207 port 59052 ssh2
...

Mar  6 18:21:25 server2 sshd\[27759\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers
Mar  6 18:21:27 server2 sshd\[27757\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers
Mar  6 18:21:29 server2 sshd\[27763\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers
Mar  6 18:21:32 server2 sshd\[27761\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers
Mar  6 18:25:03 server2 sshd\[27891\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers
Mar  6 18:26:09 server2 sshd\[28138\]: User root from 222.186.15.10 not allowed because not listed in AllowUsers

Unauthorized connection attempt from IP address 223.30.225.162 on Port 445(SMB)