Port 80 (HTTP) access denied

Unauthorized connection attempt detected from IP address 63.143.35.226 to port 80

(PERMBLOCK) 63.143.35.82 (US/United States/Texas/Dallas/82-35-143-63.static.reverse.lstn.net) has had more than 4 temp blocks in the last 86400 secs

07/27/2020-18:07:17.777391 63.143.35.82 Protocol: 6 ET SCAN NMAP -sS window 1024

Jul 20 02:28:00 : SSH login attempts with invalid user

Unauthorized connection attempt detected from IP address 63.143.35.82 to port 80

Port 8081 scan denied

SIP/5060 Probe, BF, Hack -

Jan 26 07:28:38 debian-2gb-nbg1-2 kernel: \[2279390.832504\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=63.143.35.230 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=232 ID=52459 PROTO=TCP SPT=51707 DPT=8082 WINDOW=1024 RES=0x00 SYN URGP=0

5060/udp 5060/udp 5060/udp...
[2019-08-23/09-02]5pkt,1pt.(udp)

SIPVicious Scanner Detection, PTR: 50-35-143-63.static.reverse.lstn.net.

\[2019-08-27 05:09:12\] NOTICE\[1829\] chan_sip.c: Registration from '"100" \' failed for '63.143.35.50:7905' - Wrong password
\[2019-08-27 05:09:12\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-27T05:09:12.701-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7f7b30618378",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.35.50/7905",Challenge="32736f1a",ReceivedChallenge="32736f1a",ReceivedHash="d72088286ebaad149f5e190c5dda1cab"
\[2019-08-27 05:09:12\] NOTICE\[1829\] chan_sip.c: Registration from '"100" \' failed for '63.143.35.50:7905' - Wrong password
\[2019-08-27 05:09:12\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-27T05:09:12.783-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="100",SessionID="0x7f7b303b1038",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.

\[2019-07-28 17:33:04\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '63.143.35.146:54595' - Wrong password
\[2019-07-28 17:33:04\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-28T17:33:04.317-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1616",SessionID="0x7ff4d02ab878",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.35.146/54595",Challenge="59058867",ReceivedChallenge="59058867",ReceivedHash="0e5b3f1fe44b29b33864162b1d49b7d2"
\[2019-07-28 17:35:23\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '63.143.35.146:64669' - Wrong password
\[2019-07-28 17:35:23\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-28T17:35:23.616-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="390",SessionID="0x7ff4d02ab878",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.35.1

\[2019-07-28 10:15:08\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '63.143.35.146:53620' - Wrong password
\[2019-07-28 10:15:08\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-28T10:15:08.444-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="811",SessionID="0x7ff4d0376cc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.35.146/53620",Challenge="202d7bb7",ReceivedChallenge="202d7bb7",ReceivedHash="4e16d4be8f6a603a152483d522ca2911"
\[2019-07-28 10:15:33\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '63.143.35.146:57067' - Wrong password
\[2019-07-28 10:15:33\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-28T10:15:33.589-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1600",SessionID="0x7ff4d02ab878",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.35.1

\[2019-07-27 21:17:15\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '63.143.35.146:52927' - Wrong password
\[2019-07-27 21:17:15\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-27T21:17:15.259-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="810",SessionID="0x7ff4d02ab878",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.35.146/52927",Challenge="54c61e82",ReceivedChallenge="54c61e82",ReceivedHash="3880f01da2d00a29fab0fd4a759a2fb5"
\[2019-07-27 21:17:20\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '63.143.35.146:58342' - Wrong password
\[2019-07-27 21:17:20\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-27T21:17:20.427-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="622",SessionID="0x7ff4d051f0b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.35.146

\[2019-07-27 04:26:09\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '63.143.35.146:63853' - Wrong password
\[2019-07-27 04:26:09\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-27T04:26:09.735-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="90",SessionID="0x7ff4d004fe18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.35.146/63853",Challenge="56d7e889",ReceivedChallenge="56d7e889",ReceivedHash="375cd90b431bb738b375d2d17a82400b"
\[2019-07-27 04:26:20\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '63.143.35.146:49508' - Wrong password
\[2019-07-27 04:26:20\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-27T04:26:20.147-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="911",SessionID="0x7ff4d00a7228",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.35.146/4

\[2019-07-26 22:30:05\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '63.143.35.146:52020' - Wrong password
\[2019-07-26 22:30:05\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-26T22:30:05.306-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1010",SessionID="0x7ff4d004fe18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.35.146/52020",Challenge="3c05934d",ReceivedChallenge="3c05934d",ReceivedHash="bd6eb600d8b562dcbdc137c34897c5b5"
\[2019-07-26 22:30:59\] NOTICE\[2288\] chan_sip.c: Registration from '\' failed for '63.143.35.146:59487' - Wrong password
\[2019-07-26 22:30:59\] SECURITY\[2326\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-26T22:30:59.483-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9393",SessionID="0x7ff4d0424178",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/63.143.35

(From storybitestudio14@gmail.com) Hey! I came across your website and wanted to get in touch. 
 
I run an animation studio that makes animated explainer videos helping companies to better explain their offering and why potential customers should work with them over the competition. 
 
Watch some of our work here: http://www.story-bite.com/ - what do you think? 
 
Our team works out of Denmark to create high quality videos made from scratch, designed to make your business stand out and get results. No templates, no cookie cutter animation that tarnishes your brand. 
 
I would love to work on an awesome animated video for you guys. 
 
We have a smooth production process and handle everything needed for a high-quality video that typically takes us 6 weeks to produce from start to finish. 
 
First, we nail the script, design storyboards you can’t wait to see animated. Voice actors in your native language that capture your brand and animation that screams premium with sound design that brings it all t

Mar  8 08:04:42 hcbbdb sshd\[2605\]: Invalid user live from 219.91.153.134
Mar  8 08:04:42 hcbbdb sshd\[2605\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.91.153.134
Mar  8 08:04:43 hcbbdb sshd\[2605\]: Failed password for invalid user live from 219.91.153.134 port 57788 ssh2
Mar  8 08:09:03 hcbbdb sshd\[3066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.91.153.134  user=root
Mar  8 08:09:05 hcbbdb sshd\[3066\]: Failed password for root from 219.91.153.134 port 40624 ssh2

Honeypot attack, port: 5555, PTR: PTR record not found

Mar  8 08:11:54 internal-server-tf sshd\[22495\]: Invalid user test from 157.245.104.96Mar  8 08:11:57 internal-server-tf sshd\[22497\]: Invalid user ansible from 157.245.104.96
...

Honeypot attack, port: 81, PTR: 76-243-189-77.lightspeed.irvnca.sbcglobal.net.

Honeypot attack, port: 81, PTR: 59-126-178-70.HINET-IP.hinet.net.

Mar  8 09:27:08 sd-53420 sshd\[6597\]: User root from 222.186.169.194 not allowed because none of user's groups are listed in AllowGroups
Mar  8 09:27:09 sd-53420 sshd\[6597\]: Failed none for invalid user root from 222.186.169.194 port 17554 ssh2
Mar  8 09:27:09 sd-53420 sshd\[6597\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194  user=root
Mar  8 09:27:11 sd-53420 sshd\[6597\]: Failed password for invalid user root from 222.186.169.194 port 17554 ssh2
Mar  8 09:27:15 sd-53420 sshd\[6597\]: Failed password for invalid user root from 222.186.169.194 port 17554 ssh2
...

Mar  8 08:25:30 server sshd[1687603]: Failed password for invalid user diego from 61.38.37.74 port 44712 ssh2
Mar  8 08:34:54 server sshd[1700846]: Failed password for invalid user jowell from 61.38.37.74 port 49809 ssh2
Mar  8 08:44:41 server sshd[1715374]: Failed password for invalid user nagios from 61.38.37.74 port 54907 ssh2

Honeypot attack, port: 445, PTR: dsl-189-183-241-233-dyn.prod-infinitum.com.mx.

Attempt to attack host OS, exploiting network vulnerabilities, on 08-03-2020 04:55:08.

Mar 8 08:41:11 *host* sshd\[10181\]: Unable to negotiate with 45.148.10.92 port 58460: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 \[preauth\]

Mar  8 09:11:58 srv01 sshd[32203]: Invalid user 1234 from 92.63.194.90 port 57246
Mar  8 09:11:58 srv01 sshd[32203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.90
Mar  8 09:11:58 srv01 sshd[32203]: Invalid user 1234 from 92.63.194.90 port 57246
Mar  8 09:11:59 srv01 sshd[32203]: Failed password for invalid user 1234 from 92.63.194.90 port 57246 ssh2
Mar  8 09:11:58 srv01 sshd[32203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.90
Mar  8 09:11:58 srv01 sshd[32203]: Invalid user 1234 from 92.63.194.90 port 57246
Mar  8 09:11:59 srv01 sshd[32203]: Failed password for invalid user 1234 from 92.63.194.90 port 57246 ssh2
...

detected by Fail2Ban

Mar  7 21:21:45 web1 sshd\[27231\]: Invalid user dba from 134.209.194.217
Mar  7 21:21:45 web1 sshd\[27231\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217
Mar  7 21:21:47 web1 sshd\[27231\]: Failed password for invalid user dba from 134.209.194.217 port 45718 ssh2
Mar  7 21:25:21 web1 sshd\[27543\]: Invalid user rongzhengqin from 134.209.194.217
Mar  7 21:25:21 web1 sshd\[27543\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.194.217

Mar  8 07:14:32 *** sshd[32130]: Did not receive identification string from 193.56.28.254