Oct  1 02:47:18 jane sshd[12505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.116.195.122 
Oct  1 02:47:20 jane sshd[12505]: Failed password for invalid user lab from 200.116.195.122 port 59988 ssh2
...

Oct  1 04:18:25 venus sshd\[14514\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.78  user=root
Oct  1 04:18:27 venus sshd\[14514\]: Failed password for root from 49.88.112.78 port 43480 ssh2
Oct  1 04:18:30 venus sshd\[14514\]: Failed password for root from 49.88.112.78 port 43480 ssh2
...

Web App Attack

Oct  1 00:21:41 carla sshd[20517]: Invalid user deploy from 140.210.9.80
Oct  1 00:21:41 carla sshd[20517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.210.9.80 
Oct  1 00:21:43 carla sshd[20517]: Failed password for invalid user deploy from 140.210.9.80 port 49872 ssh2
Oct  1 00:21:45 carla sshd[20518]: Received disconnect from 140.210.9.80: 11: Bye Bye
Oct  1 00:40:50 carla sshd[20765]: Invalid user raja from 140.210.9.80
Oct  1 00:40:50 carla sshd[20765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.210.9.80 
Oct  1 00:40:52 carla sshd[20765]: Failed password for invalid user raja from 140.210.9.80 port 35044 ssh2
Oct  1 00:40:52 carla sshd[20766]: Received disconnect from 140.210.9.80: 11: Bye Bye
Oct  1 00:43:33 carla sshd[20771]: Invalid user amk from 140.210.9.80
Oct  1 00:43:33 carla sshd[20771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ss........
-------------------------------

Oct  1 06:46:14 www sshd\[37007\]: Invalid user marla from 41.137.137.92Oct  1 06:46:16 www sshd\[37007\]: Failed password for invalid user marla from 41.137.137.92 port 32877 ssh2Oct  1 06:55:34 www sshd\[37136\]: Invalid user bitrix from 41.137.137.92
...

Attempt to attack host OS, exploiting network vulnerabilities, on 01-10-2019 04:55:17.

\[2019-09-30 23:55:27\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '149.202.223.136:56974' - Wrong password
\[2019-09-30 23:55:27\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-30T23:55:27.368-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="700022",SessionID="0x7f1e1c27a4c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/149.202.223.136/56974",Challenge="656da7aa",ReceivedChallenge="656da7aa",ReceivedHash="30350d92d5dbb5b9f4b8dcf655933f67"
\[2019-09-30 23:55:30\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '149.202.223.136:56288' - Wrong password
\[2019-09-30 23:55:30\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-30T23:55:30.759-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="83000092",SessionID="0x7f1e1c02d9c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/149.202.223

Attempt to attack host OS, exploiting network vulnerabilities, on 01-10-2019 04:55:15.

2019-09-30T23:50:39.510719tmaserv sshd\[21505\]: Invalid user iredadmin from 106.13.65.210 port 39728
2019-09-30T23:50:39.515396tmaserv sshd\[21505\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.65.210
2019-09-30T23:50:41.359810tmaserv sshd\[21505\]: Failed password for invalid user iredadmin from 106.13.65.210 port 39728 ssh2
2019-09-30T23:53:08.178742tmaserv sshd\[21755\]: Invalid user mine from 106.13.65.210 port 35586
2019-09-30T23:53:08.185004tmaserv sshd\[21755\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.65.210
2019-09-30T23:53:10.149730tmaserv sshd\[21755\]: Failed password for invalid user mine from 106.13.65.210 port 35586 ssh2
...

Oct  1 03:50:54 ip-172-31-1-72 sshd\[14518\]: Invalid user jenkins from 84.120.41.118
Oct  1 03:50:54 ip-172-31-1-72 sshd\[14518\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.120.41.118
Oct  1 03:50:55 ip-172-31-1-72 sshd\[14518\]: Failed password for invalid user jenkins from 84.120.41.118 port 48459 ssh2
Oct  1 03:55:32 ip-172-31-1-72 sshd\[14608\]: Invalid user scj from 84.120.41.118
Oct  1 03:55:32 ip-172-31-1-72 sshd\[14608\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.120.41.118

Oct  1 06:22:42 localhost sshd\[2863\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.110  user=root
Oct  1 06:22:43 localhost sshd\[2863\]: Failed password for root from 222.186.15.110 port 45675 ssh2
Oct  1 06:22:45 localhost sshd\[2863\]: Failed password for root from 222.186.15.110 port 45675 ssh2

Invalid user squid from 5.196.110.170 port 58138

2019-10-01T03:46:58.604998shield sshd\[13851\]: Invalid user pantaleao from 41.77.146.98 port 46712
2019-10-01T03:46:58.610829shield sshd\[13851\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.77.146.98
2019-10-01T03:47:00.969303shield sshd\[13851\]: Failed password for invalid user pantaleao from 41.77.146.98 port 46712 ssh2
2019-10-01T03:55:28.989968shield sshd\[14924\]: Invalid user ce from 41.77.146.98 port 39518
2019-10-01T03:55:28.995546shield sshd\[14924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.77.146.98

Oct  1 01:04:07 XXX sshd[55345]: Invalid user user from 59.1.116.20 port 58464

Chat Spam