[portscan] Port scan

Dec  3 21:13:37 microserver sshd[48685]: Invalid user mignosa from 51.77.200.101 port 48502
Dec  3 21:13:37 microserver sshd[48685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.200.101
Dec  3 21:13:38 microserver sshd[48685]: Failed password for invalid user mignosa from 51.77.200.101 port 48502 ssh2
Dec  3 21:19:03 microserver sshd[49472]: Invalid user wave from 51.77.200.101 port 59576
Dec  3 21:19:03 microserver sshd[49472]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.200.101
Dec  3 21:29:46 microserver sshd[51053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.200.101  user=www-data
Dec  3 21:29:49 microserver sshd[51053]: Failed password for www-data from 51.77.200.101 port 53486 ssh2
Dec  3 21:35:11 microserver sshd[52125]: Invalid user cecilia from 51.77.200.101 port 36328
Dec  3 21:35:11 microserver sshd[52125]: pam_unix(sshd:auth): authentication failure;

$f2bV_matches

Dec  3 20:46:48 vpn01 sshd[11109]: Failed password for root from 218.92.0.179 port 41423 ssh2
Dec  3 20:46:59 vpn01 sshd[11109]: error: maximum authentication attempts exceeded for root from 218.92.0.179 port 41423 ssh2 [preauth]
...

MultiHost/MultiPort Probe, Scan, Hack -

Dec  3 20:41:06 xeon sshd[51730]: Failed password for invalid user benterud from 128.199.150.228 port 57120 ssh2

2019-12-03T20:49:03.695869stark.klein-stark.info sshd\[6688\]: Invalid user prueba from 91.23.33.175 port 3260
2019-12-03T20:49:03.703046stark.klein-stark.info sshd\[6688\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=p5b1721af.dip0.t-ipconnect.de
2019-12-03T20:49:05.931806stark.klein-stark.info sshd\[6688\]: Failed password for invalid user prueba from 91.23.33.175 port 3260 ssh2
...

Port 1433 Scan

Dec  3 19:55:55 nextcloud sshd\[4978\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.26.91  user=root
Dec  3 19:55:57 nextcloud sshd\[4978\]: Failed password for root from 139.155.26.91 port 39080 ssh2
Dec  3 20:01:32 nextcloud sshd\[14234\]: Invalid user webadmin from 139.155.26.91
...

Automatic report - Port Scan Attack

Dec  3 15:25:22 icecube postfix/smtpd[38325]: NOQUEUE: reject: RCPT from decision.redconnekt.top[37.59.183.34]: 554 5.7.1 Service unavailable; Client host [37.59.183.34] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/37.59.183.34 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=

Dec  3 19:01:58 master sshd[12929]: Failed password for invalid user janis from 188.132.168.2 port 40910 ssh2
Dec  3 19:09:27 master sshd[12935]: Failed password for invalid user named from 188.132.168.2 port 34494 ssh2
Dec  3 19:15:50 master sshd[12948]: Failed password for root from 188.132.168.2 port 45624 ssh2
Dec  3 19:22:47 master sshd[12960]: Failed password for invalid user bserver from 188.132.168.2 port 56758 ssh2
Dec  3 19:29:31 master sshd[12969]: Failed password for root from 188.132.168.2 port 39662 ssh2
Dec  3 19:37:01 master sshd[13299]: Failed password for invalid user stinehelfer from 188.132.168.2 port 50794 ssh2
Dec  3 19:45:00 master sshd[13305]: Failed password for invalid user tck from 188.132.168.2 port 33702 ssh2
Dec  3 19:53:43 master sshd[13322]: Failed password for root from 188.132.168.2 port 44842 ssh2
Dec  3 20:02:09 master sshd[13656]: Failed password for invalid user admin from 188.132.168.2 port 55984 ssh2
Dec  3 20:08:59 master sshd[13665]: Failed password for invalid user l

ssh intrusion attempt

Fail2Ban Ban Triggered

port scan and connect, tcp 23 (telnet)