2019-12-02T12:25:03.868257hub.schaetter.us sshd\[403\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17  user=root
2019-12-02T12:25:05.998221hub.schaetter.us sshd\[403\]: Failed password for root from 222.186.180.17 port 45200 ssh2
2019-12-02T12:25:08.912393hub.schaetter.us sshd\[403\]: Failed password for root from 222.186.180.17 port 45200 ssh2
2019-12-02T12:25:13.062067hub.schaetter.us sshd\[403\]: Failed password for root from 222.186.180.17 port 45200 ssh2
2019-12-02T12:25:17.004028hub.schaetter.us sshd\[403\]: Failed password for root from 222.186.180.17 port 45200 ssh2
...

Dec  2 12:42:05 cp sshd[19147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.178.134.11

Unauthorised access (Dec  2) SRC=200.205.60.171 LEN=52 TOS=0x10 PREC=0x40 TTL=112 ID=2167 DF TCP DPT=445 WINDOW=8192 SYN

Dec  2 14:02:10 sauna sshd[188580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.44.50.155
Dec  2 14:02:12 sauna sshd[188580]: Failed password for invalid user default from 200.44.50.155 port 34056 ssh2
...

Dec  2 13:11:25 vpn01 sshd[31641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.122.20
Dec  2 13:11:26 vpn01 sshd[31641]: Failed password for invalid user password from 118.25.122.20 port 56306 ssh2
...

Dec  2 11:37:26 thevastnessof sshd[1772]: Failed password for invalid user lenir from 211.174.227.230 port 54394 ssh2
...

Dec  2 11:40:20 srv206 sshd[18152]: Invalid user web from 66.108.165.215
...

Dec  2 13:12:27 dcd-gentoo sshd[21750]: User root from 112.85.42.180 not allowed because none of user's groups are listed in AllowGroups
Dec  2 13:12:30 dcd-gentoo sshd[21750]: error: PAM: Authentication failure for illegal user root from 112.85.42.180
Dec  2 13:12:27 dcd-gentoo sshd[21750]: User root from 112.85.42.180 not allowed because none of user's groups are listed in AllowGroups
Dec  2 13:12:30 dcd-gentoo sshd[21750]: error: PAM: Authentication failure for illegal user root from 112.85.42.180
Dec  2 13:12:27 dcd-gentoo sshd[21750]: User root from 112.85.42.180 not allowed because none of user's groups are listed in AllowGroups
Dec  2 13:12:30 dcd-gentoo sshd[21750]: error: PAM: Authentication failure for illegal user root from 112.85.42.180
Dec  2 13:12:30 dcd-gentoo sshd[21750]: Failed keyboard-interactive/pam for invalid user root from 112.85.42.180 port 12842 ssh2
...

Dec  2 11:02:24 fr01 sshd[2469]: Invalid user nikolakakis from 45.55.88.94
Dec  2 11:02:24 fr01 sshd[2469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.88.94
Dec  2 11:02:24 fr01 sshd[2469]: Invalid user nikolakakis from 45.55.88.94
Dec  2 11:02:25 fr01 sshd[2469]: Failed password for invalid user nikolakakis from 45.55.88.94 port 47198 ssh2
...

Dec  2 13:09:59 server sshd\[21404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.215.217.181  user=root
Dec  2 13:10:01 server sshd\[21404\]: Failed password for root from 139.215.217.181 port 37388 ssh2
Dec  2 13:26:29 server sshd\[25969\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.215.217.181  user=root
Dec  2 13:26:31 server sshd\[25969\]: Failed password for root from 139.215.217.181 port 43583 ssh2
Dec  2 13:34:45 server sshd\[27861\]: Invalid user admin from 139.215.217.181
Dec  2 13:34:45 server sshd\[27861\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.215.217.181 
...

5555/tcp
[2019-12-02]1pkt

Dec  2 12:55:03 localhost sshd\[26716\]: Invalid user kuseski from 104.236.252.162
Dec  2 12:55:03 localhost sshd\[26716\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.252.162
Dec  2 12:55:06 localhost sshd\[26716\]: Failed password for invalid user kuseski from 104.236.252.162 port 60394 ssh2
Dec  2 13:00:22 localhost sshd\[27073\]: Invalid user 12345677 from 104.236.252.162
Dec  2 13:00:22 localhost sshd\[27073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.252.162
...

\[2019-12-02 06:59:31\] NOTICE\[2754\] chan_sip.c: Registration from '\' failed for '81.30.152.54:57437' - Wrong password
\[2019-12-02 06:59:31\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-02T06:59:31.702-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="360",SessionID="0x7f26c4a90648",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.30.152.54/57437",Challenge="6055cdc2",ReceivedChallenge="6055cdc2",ReceivedHash="169f13da1a261073964f9acd90c2485c"
\[2019-12-02 07:00:06\] NOTICE\[2754\] chan_sip.c: Registration from '\' failed for '81.30.152.54:57196' - Wrong password
\[2019-12-02 07:00:06\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-02T07:00:06.926-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="6962",SessionID="0x7f26c445f668",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.30.152.54/5

TCP Port Scanning

Dec  2 02:06:16 web1 sshd\[22474\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.141  user=root
Dec  2 02:06:18 web1 sshd\[22474\]: Failed password for root from 218.92.0.141 port 35442 ssh2
Dec  2 02:06:22 web1 sshd\[22474\]: Failed password for root from 218.92.0.141 port 35442 ssh2
Dec  2 02:06:25 web1 sshd\[22474\]: Failed password for root from 218.92.0.141 port 35442 ssh2
Dec  2 02:06:28 web1 sshd\[22474\]: Failed password for root from 218.92.0.141 port 35442 ssh2