Attempt to attack host OS, exploiting network vulnerabilities, on 03-04-2020 14:00:11.

1585918807 - 04/03/2020 20:00:07 Host: 2.186.13.123/2.186.13.123 Port: 23 TCP Blocked
...

Apr  3 12:56:10 vlre-nyc-1 sshd\[14236\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.153.27.98  user=root
Apr  3 12:56:11 vlre-nyc-1 sshd\[14236\]: Failed password for root from 190.153.27.98 port 49624 ssh2
Apr  3 13:00:30 vlre-nyc-1 sshd\[14375\]: Invalid user zi from 190.153.27.98
Apr  3 13:00:30 vlre-nyc-1 sshd\[14375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.153.27.98
Apr  3 13:00:32 vlre-nyc-1 sshd\[14375\]: Failed password for invalid user zi from 190.153.27.98 port 58284 ssh2
...

[2020-04-03 09:46:02] NOTICE[12114] chan_sip.c: Registration from '' failed for '64.227.68.68:40190' - Wrong password
[2020-04-03 09:46:02] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-03T09:46:02.678-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="201",SessionID="0x7f020c0b1098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/64.227.68.68/40190",Challenge="6437b6dd",ReceivedChallenge="6437b6dd",ReceivedHash="805bd4e8ca195c639988a63c861762ca"
[2020-04-03 09:47:20] NOTICE[12114] chan_sip.c: Registration from '' failed for '64.227.68.68:54874' - Wrong password
[2020-04-03 09:47:20] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-03T09:47:20.765-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1011",SessionID="0x7f020c088288",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/64.227.68.68/5
...

Unauthorized connection attempt from IP address 196.189.57.240 on Port 445(SMB)

Apr  3 15:24:26 silence02 sshd[29737]: Failed password for root from 218.92.0.199 port 10444 ssh2
Apr  3 15:24:28 silence02 sshd[29737]: Failed password for root from 218.92.0.199 port 10444 ssh2
Apr  3 15:24:30 silence02 sshd[29737]: Failed password for root from 218.92.0.199 port 10444 ssh2

Apr  3 20:00:25 itv-usvr-02 sshd[12148]: Invalid user sj from 120.133.1.16 port 42400
Apr  3 20:00:25 itv-usvr-02 sshd[12148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.133.1.16
Apr  3 20:00:25 itv-usvr-02 sshd[12148]: Invalid user sj from 120.133.1.16 port 42400
Apr  3 20:00:28 itv-usvr-02 sshd[12148]: Failed password for invalid user sj from 120.133.1.16 port 42400 ssh2

2020-04-03T14:08:54.527799abusebot.cloudsearch.cf sshd[30875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6  user=root
2020-04-03T14:08:56.869733abusebot.cloudsearch.cf sshd[30875]: Failed password for root from 222.186.180.6 port 1400 ssh2
2020-04-03T14:09:00.752427abusebot.cloudsearch.cf sshd[30875]: Failed password for root from 222.186.180.6 port 1400 ssh2
2020-04-03T14:08:54.527799abusebot.cloudsearch.cf sshd[30875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6  user=root
2020-04-03T14:08:56.869733abusebot.cloudsearch.cf sshd[30875]: Failed password for root from 222.186.180.6 port 1400 ssh2
2020-04-03T14:09:00.752427abusebot.cloudsearch.cf sshd[30875]: Failed password for root from 222.186.180.6 port 1400 ssh2
2020-04-03T14:08:54.527799abusebot.cloudsearch.cf sshd[30875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.1
...

SSH_attack

Apr  3 16:19:28 debian-2gb-nbg1-2 kernel: \[8182607.192383\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=89.130.31.80 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=54757 PROTO=TCP SPT=58969 DPT=23 WINDOW=56934 RES=0x00 SYN URGP=0

$f2bV_matches

Unauthorized connection attempt from IP address 14.237.1.155 on Port 445(SMB)

Apr  3 14:54:13 pornomens sshd\[26308\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.146.170  user=root
Apr  3 14:54:16 pornomens sshd\[26308\]: Failed password for root from 51.77.146.170 port 54650 ssh2
Apr  3 15:00:14 pornomens sshd\[26375\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.146.170  user=root
...

Apr  3 16:22:32 vps647732 sshd[18588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.27.107
Apr  3 16:22:35 vps647732 sshd[18588]: Failed password for invalid user test from 106.12.27.107 port 49571 ssh2
...

Unauthorized connection attempt from IP address 183.83.75.200 on Port 445(SMB)