Attempt to attack host OS, exploiting network vulnerabilities, on 02-02-2020 04:50:09.

Unauthorized connection attempt detected from IP address 217.199.100.170 to port 2220 [J]

Unauthorized connection attempt detected from IP address 89.233.219.57 to port 23 [J]

Unauthorized connection attempt detected from IP address 54.36.163.188 to port 2220 [J]

Feb  2 13:31:20 ns381471 sshd[4345]: Failed none for invalid user 0 from 92.63.194.104 port 42197 ssh2
Feb  2 13:31:31 ns381471 sshd[4375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.104

Unauthorized connection attempt detected from IP address 200.86.33.140 to port 2220 [J]

Feb  2 12:36:00 MK-Soft-Root2 sshd[15150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.4.117 
Feb  2 12:36:02 MK-Soft-Root2 sshd[15150]: Failed password for invalid user user5 from 111.229.4.117 port 40418 ssh2
...

Jan 29 04:56:28 django sshd[32251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.240.211.162  user=r.r
Jan 29 04:56:30 django sshd[32251]: Failed password for r.r from 185.240.211.162 port 42856 ssh2
Jan 29 04:56:32 django sshd[32251]: Failed password for r.r from 185.240.211.162 port 42856 ssh2
Jan 29 04:56:34 django sshd[32251]: Failed password for r.r from 185.240.211.162 port 42856 ssh2
Jan 29 04:56:36 django sshd[32251]: Failed password for r.r from 185.240.211.162 port 42856 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=185.240.211.162

Unauthorized connection attempt detected from IP address 176.31.252.148 to port 2220 [J]

Feb  2 02:04:06 auw2 sshd\[14547\]: Invalid user david from 103.9.159.66
Feb  2 02:04:06 auw2 sshd\[14547\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.phudonglotus.edu.vn
Feb  2 02:04:08 auw2 sshd\[14547\]: Failed password for invalid user david from 103.9.159.66 port 57202 ssh2
Feb  2 02:07:47 auw2 sshd\[14627\]: Invalid user user1 from 103.9.159.66
Feb  2 02:07:47 auw2 sshd\[14627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.phudonglotus.edu.vn

[2020-02-02 07:41:38] NOTICE[1148] chan_sip.c: Registration from '' failed for '104.238.38.209:64233' - Wrong password
[2020-02-02 07:41:38] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-02T07:41:38.596-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="5002",SessionID="0x7fd82c5547b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.238.38.209/64233",Challenge="61a786c4",ReceivedChallenge="61a786c4",ReceivedHash="80f9c59b7f585b650fa7f40a979b8405"
[2020-02-02 07:44:23] NOTICE[1148] chan_sip.c: Registration from '' failed for '104.238.38.209:54593' - Wrong password
[2020-02-02 07:44:23] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-02T07:44:23.772-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="602",SessionID="0x7fd82c314398",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/104.238.38.2
...

Feb  2 12:30:52 grey postfix/smtpd\[19680\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.168\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.168\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.168\]\; from=\<7gthv2ef60i4k7@centralhotel32.ru\> to=\ proto=ESMTP helo=\<\[185.143.223.160\]\>Feb  2 12:30:52 grey postfix/smtpd\[19680\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.168\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.168\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.168\]\; from=\<7gthv2ef60i4k7@centralhotel32.ru\> to=\ proto=ESMTP helo=\<\[185.143.223.160\]\>Feb  2 12:30:52 grey postfix/smtpd\[19680\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.168\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.168\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.168\]\; from=\<7gthv2ef60
...

1580619002 - 02/02/2020 05:50:02 Host: 36.68.52.196/36.68.52.196 Port: 445 TCP Blocked

Feb  2 11:06:05 dcd-gentoo sshd[16876]: User root from 218.92.0.199 not allowed because none of user's groups are listed in AllowGroups
Feb  2 11:06:08 dcd-gentoo sshd[16876]: error: PAM: Authentication failure for illegal user root from 218.92.0.199
Feb  2 11:06:05 dcd-gentoo sshd[16876]: User root from 218.92.0.199 not allowed because none of user's groups are listed in AllowGroups
Feb  2 11:06:08 dcd-gentoo sshd[16876]: error: PAM: Authentication failure for illegal user root from 218.92.0.199
Feb  2 11:06:05 dcd-gentoo sshd[16876]: User root from 218.92.0.199 not allowed because none of user's groups are listed in AllowGroups
Feb  2 11:06:08 dcd-gentoo sshd[16876]: error: PAM: Authentication failure for illegal user root from 218.92.0.199
Feb  2 11:06:08 dcd-gentoo sshd[16876]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.199 port 58042 ssh2
...

Apr  2 08:44:55 ms-srv sshd[12948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.147.78
Apr  2 08:44:57 ms-srv sshd[12948]: Failed password for invalid user pi from 104.248.147.78 port 46986 ssh2