[2020-02-06 06:02:50] NOTICE[1148] chan_sip.c: Registration from '' failed for '54.36.106.204:55560' - Wrong password
[2020-02-06 06:02:50] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-06T06:02:50.313-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="9101",SessionID="0x7fd82c2348d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/54.36.106.204/55560",Challenge="59606ae3",ReceivedChallenge="59606ae3",ReceivedHash="300f594cc8d0e4ae54cc450c06bae59c"
[2020-02-06 06:04:45] NOTICE[1148] chan_sip.c: Registration from '' failed for '54.36.106.204:53094' - Wrong password
[2020-02-06 06:04:45] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-06T06:04:45.303-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="9201",SessionID="0x7fd82c2348d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/54.36.106.204
...

Honeypot attack, port: 81, PTR: PTR record not found

Honeypot attack, port: 81, PTR: SLT-BB-CUST.slt.lk.

...

(From edmundse816@gmail.com) Hello!

After a quick check, I realized that your website is presently suffering from key design problems. These issues are preventing your website from being the truly profitable machine that it should be. If you need an expert with web design whose services are cheap, then I'd love to speak with you.

I'm a programmer, coder and Web design specialist, and it's part of my passion in life to help businesses upgrade and redesign their websites so they become more profitable in both the short and long term. I'm an expert with many different programming languages, website platforms, and shopping carts, and have a particular specialty in the WordPress website platform. Developing your site on such an incredible platform that has a wide variety of features that allow you to easily make changes to your site to suit your business needs will make your website more efficient.

Please write back to let me know if you're interested, and I'll send you my portfolio and information about

Feb  6 11:26:33 pornomens sshd\[15490\]: Invalid user hoz from 81.31.204.9 port 34094
Feb  6 11:26:33 pornomens sshd\[15490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.31.204.9
Feb  6 11:26:35 pornomens sshd\[15490\]: Failed password for invalid user hoz from 81.31.204.9 port 34094 ssh2
...

Feb  6 07:51:49 firewall sshd[11023]: Failed password for root from 222.186.31.166 port 37028 ssh2
Feb  6 07:51:51 firewall sshd[11023]: Failed password for root from 222.186.31.166 port 37028 ssh2
Feb  6 07:51:55 firewall sshd[11023]: Failed password for root from 222.186.31.166 port 37028 ssh2
...

Feb  6 09:39:31 debian-2gb-nbg1-2 kernel: \[3237616.079406\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=122.128.214.244 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=44 ID=60006 PROTO=TCP SPT=32501 DPT=4567 WINDOW=30717 RES=0x00 SYN URGP=0

detected by Fail2Ban

port

1580971435 - 02/06/2020 07:43:55 Host: 142.59.220.68/142.59.220.68 Port: 445 TCP Blocked

5x Failed Password

Honeypot attack, port: 445, PTR: PTR record not found

Honeypot attack, port: 445, PTR: PTR record not found

Feb  6 11:05:00 dedicated sshd[8486]: Invalid user admin from 185.232.67.5 port 56810