Attempt to attack host OS, exploiting network vulnerabilities, on 18-12-2019 06:25:10.

Dec 18 07:25:31 debian-2gb-nbg1-2 kernel: \[303106.158202\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=220.182.3.39 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=3816 PROTO=TCP SPT=56016 DPT=1433 WINDOW=1024 RES=0x00 SYN URGP=0

--- report ---
Dec 18 09:43:34 sshd: Connection from 222.186.175.163 port 61728
Dec 18 09:43:39 sshd: Failed password for root from 222.186.175.163 port 61728 ssh2
Dec 18 09:43:41 sshd: Received disconnect from 222.186.175.163: 11:  [preauth]

\[2019-12-18 07:13:58\] NOTICE\[2839\] chan_sip.c: Registration from '"808" \' failed for '37.49.230.81:5294' - Wrong password
\[2019-12-18 07:13:58\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-18T07:13:58.085-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="808",SessionID="0x7f0fb4287008",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.81/5294",Challenge="36e89487",ReceivedChallenge="36e89487",ReceivedHash="196886df6a842e039194c5c1a0c3832c"
\[2019-12-18 07:13:58\] NOTICE\[2839\] chan_sip.c: Registration from '"808" \' failed for '37.49.230.81:5294' - Wrong password
\[2019-12-18 07:13:58\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-18T07:13:58.210-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="808",SessionID="0x7f0fb4123628",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.2

Unauthorized connection attempt detected from IP address 14.249.106.198 to port 445

Dec 18 02:32:44 php1 sshd\[30776\]: Invalid user dods from 182.61.39.131
Dec 18 02:32:44 php1 sshd\[30776\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.39.131
Dec 18 02:32:46 php1 sshd\[30776\]: Failed password for invalid user dods from 182.61.39.131 port 49992 ssh2
Dec 18 02:38:00 php1 sshd\[31406\]: Invalid user admin from 182.61.39.131
Dec 18 02:38:00 php1 sshd\[31406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.39.131

Dec 18 09:00:42 firewall sshd[548]: Failed password for invalid user host from 188.165.254.85 port 46086 ssh2
Dec 18 09:05:35 firewall sshd[687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.254.85  user=root
Dec 18 09:05:37 firewall sshd[687]: Failed password for root from 188.165.254.85 port 53468 ssh2
...

Honeypot attack, port: 445, PTR: irsrv.mihanmizban.com.

2019-12-18T07:48:05.162531xentho-1 sshd[88388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194  user=root
2019-12-18T07:48:06.793433xentho-1 sshd[88388]: Failed password for root from 222.186.169.194 port 40462 ssh2
2019-12-18T07:48:12.431821xentho-1 sshd[88388]: Failed password for root from 222.186.169.194 port 40462 ssh2
2019-12-18T07:48:05.162531xentho-1 sshd[88388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194  user=root
2019-12-18T07:48:06.793433xentho-1 sshd[88388]: Failed password for root from 222.186.169.194 port 40462 ssh2
2019-12-18T07:48:12.431821xentho-1 sshd[88388]: Failed password for root from 222.186.169.194 port 40462 ssh2
2019-12-18T07:48:05.162531xentho-1 sshd[88388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.169.194  user=root
2019-12-18T07:48:06.793433xentho-1 sshd[88388]: Failed password for roo
...

Honeypot attack, port: 5555, PTR: PTR record not found

1576650285 - 12/18/2019 07:24:45 Host: 14.189.75.213/14.189.75.213 Port: 445 TCP Blocked

Unauthorized connection attempt detected from IP address 119.160.219.5 to port 1433

Attempt to attack host OS, exploiting network vulnerabilities, on 18-12-2019 06:25:16.

SSH invalid-user multiple login try

Attempt to attack host OS, exploiting network vulnerabilities, on 18-12-2019 06:25:15.