2020-06-20T05:04:57+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)

2020-06-20T06:09:01.623245shield sshd\[32655\]: Invalid user wilson from 106.13.103.1 port 58262
2020-06-20T06:09:01.627159shield sshd\[32655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1
2020-06-20T06:09:03.643321shield sshd\[32655\]: Failed password for invalid user wilson from 106.13.103.1 port 58262 ssh2
2020-06-20T06:12:46.386327shield sshd\[815\]: Invalid user chef from 106.13.103.1 port 47236
2020-06-20T06:12:46.390043shield sshd\[815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.103.1

Unauthorized connection attempt from IP address 171.247.194.109 on Port 445(SMB)

 TCP (SYN) 156.96.46.226:58995 -> port 6291, len 44

Jun 20 05:36:39 sip sshd[3660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.34.121
Jun 20 05:36:41 sip sshd[3660]: Failed password for invalid user seafile from 111.229.34.121 port 55920 ssh2
Jun 20 05:52:26 sip sshd[9534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.34.121

20/6/19@23:52:55: FAIL: Alarm-Network address from=200.105.167.18
20/6/19@23:52:56: FAIL: Alarm-Network address from=200.105.167.18
...

Invalid user domingo from 185.132.1.52 port 45126

Jun 18 05:44:57 webmail sshd[13920]: Address 191.102.100.18 maps to azteca-comunicaciones.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jun 18 05:44:57 webmail sshd[13920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.102.100.18  user=r.r
Jun 18 05:44:59 webmail sshd[13920]: Failed password for r.r from 191.102.100.18 port 52736 ssh2
Jun 18 05:44:59 webmail sshd[13920]: Received disconnect from 191.102.100.18: 11: Bye Bye [preauth]
Jun 18 05:49:46 webmail sshd[13949]: Address 191.102.100.18 maps to azteca-comunicaciones.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jun 18 05:49:46 webmail sshd[13949]: Invalid user suraj from 191.102.100.18
Jun 18 05:49:46 webmail sshd[13949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.102.100.18 
Jun 18 05:49:49 webmail sshd[13949]: Failed password for invalid user suraj from 191.102........
-------------------------------

2020-06-20T08:38:50.0794961240 sshd\[22180\]: Invalid user hi from 192.241.210.224 port 48736
2020-06-20T08:38:50.0844981240 sshd\[22180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.210.224
2020-06-20T08:38:51.6991401240 sshd\[22180\]: Failed password for invalid user hi from 192.241.210.224 port 48736 ssh2
...

(mod_security) mod_security (id:218500) triggered by 185.72.242.114 (RO/Romania/ns1.starhosting.ro): 5 in the last 3600 secs

Invalid user nils from 34.210.46.212 port 55732

SSH Brute-Force attacks

[2020-06-20 02:20:55] NOTICE[1273] chan_sip.c: Registration from '' failed for '176.67.81.9:60082' - Wrong password
[2020-06-20 02:20:55] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-20T02:20:55.986-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1113",SessionID="0x7f31c02f97a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/176.67.81.9/60082",Challenge="102873aa",ReceivedChallenge="102873aa",ReceivedHash="a3938a328eca27b319a627316f573373"
[2020-06-20 02:22:27] NOTICE[1273] chan_sip.c: Registration from '' failed for '176.67.81.9:55619' - Wrong password
[2020-06-20 02:22:27] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-20T02:22:27.744-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8893",SessionID="0x7f31c018ea98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/176.67.81.9/55619",
...

Jun 20 08:42:06 vps639187 sshd\[7424\]: Invalid user nagios from 187.188.90.141 port 43602
Jun 20 08:42:06 vps639187 sshd\[7424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.188.90.141
Jun 20 08:42:08 vps639187 sshd\[7424\]: Failed password for invalid user nagios from 187.188.90.141 port 43602 ssh2
...

Jun 20 16:39:58 localhost sshd[887689]: Disconnected from 222.186.31.83 port 13470 [preauth]
...