SE_ALLTELE-SE-MNT_<177>1591272454 [1:2403462:57764] ET CINS Active Threat Intelligence Poor Reputation IP TCP group 82 [Classification: Misc Attack] [Priority: 2]:  {TCP} 87.241.105.71:18082

Jun  4 15:49:14 home sshd[24128]: Failed password for root from 201.219.50.217 port 34640 ssh2
Jun  4 15:52:48 home sshd[24491]: Failed password for root from 201.219.50.217 port 56900 ssh2
...

1591272491 - 06/04/2020 14:08:11 Host: 45.232.201.131/45.232.201.131 Port: 445 TCP Blocked

146.164.51.59 (BR/Brazil/-), 12 distributed sshd attacks on account [root] in the last 3600 secs

Jun  2 18:17:53 HOST sshd[31965]: Address 184.22.139.26 maps to 184-22-139-0.24.myaisfibre.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jun  2 18:17:53 HOST sshd[31965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.22.139.26  user=r.r
Jun  2 18:17:54 HOST sshd[31965]: Failed password for r.r from 184.22.139.26 port 46388 ssh2
Jun  2 18:17:55 HOST sshd[31965]: Received disconnect from 184.22.139.26: 11: Bye Bye [preauth]
Jun  2 18:20:52 HOST sshd[32065]: Address 184.22.139.26 maps to 184-22-139-0.24.myaisfibre.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Jun  2 18:20:52 HOST sshd[32065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.22.139.26  user=r.r
Jun  2 18:20:55 HOST sshd[32065]: Failed password for r.r from 184.22.139.26 port 27594 ssh2
Jun  2 18:20:55 HOST sshd[32065]: Received disconnect from 184.22.139.26: 11........
-------------------------------

Jun  4 14:02:49 mxgate1 sshd[23358]: Did not receive identification string from 39.50.234.78 port 59232
Jun  4 14:02:53 mxgate1 sshd[23368]: Invalid user admin2 from 39.50.234.78 port 59586
Jun  4 14:02:53 mxgate1 sshd[23368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.50.234.78
Jun  4 14:02:54 mxgate1 sshd[23368]: Failed password for invalid user admin2 from 39.50.234.78 port 59586 ssh2
Jun  4 14:02:54 mxgate1 sshd[23368]: Connection closed by 39.50.234.78 port 59586 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=39.50.234.78

Unauthorized connection attempt from IP address 58.69.17.2 on Port 445(SMB)

[2020-06-04 10:15:58] NOTICE[1288] chan_sip.c: Registration from '' failed for '185.130.184.207:63832' - Wrong password
[2020-06-04 10:15:58] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-04T10:15:58.809-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3419",SessionID="0x7f4d7403c148",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.130.184.207/63832",Challenge="37bd5592",ReceivedChallenge="37bd5592",ReceivedHash="6b2c9c3da3cdf71b2f3c9565b0c282cc"
[2020-06-04 10:16:27] NOTICE[1288] chan_sip.c: Registration from '' failed for '185.130.184.207:61092' - Wrong password
[2020-06-04 10:16:27] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-04T10:16:27.377-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2345",SessionID="0x7f4d74371bc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.130
...

Jun  4 13:07:36 cdc sshd[31843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.95.141.34  user=root
Jun  4 13:07:38 cdc sshd[31843]: Failed password for invalid user root from 111.95.141.34 port 46927 ssh2

Jun  4 12:54:24 game-panel sshd[16671]: Failed password for root from 51.38.48.127 port 53438 ssh2
Jun  4 12:58:11 game-panel sshd[16916]: Failed password for root from 51.38.48.127 port 58006 ssh2

prod6
...

1591272452 - 06/04/2020 14:07:32 Host: 179.216.137.32/179.216.137.32 Port: 445 TCP Blocked

2020-06-04T13:08:24.854311shield sshd\[7074\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.36.154  user=root
2020-06-04T13:08:27.202543shield sshd\[7074\]: Failed password for root from 159.203.36.154 port 35261 ssh2
2020-06-04T13:13:07.336202shield sshd\[9541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.36.154  user=root
2020-06-04T13:13:09.533941shield sshd\[9541\]: Failed password for root from 159.203.36.154 port 36839 ssh2
2020-06-04T13:17:48.783281shield sshd\[11429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.36.154  user=root

2020-06-04T14:07:52+0200 Failed SSH Authentication/Brute Force Attack. (Server 10)

bruteforce detected