2020-04-14T23:27:02.946844abusebot-6.cloudsearch.cf sshd[26685]: Invalid user elemental from 134.209.57.3 port 33400
2020-04-14T23:27:02.952853abusebot-6.cloudsearch.cf sshd[26685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.57.3
2020-04-14T23:27:02.946844abusebot-6.cloudsearch.cf sshd[26685]: Invalid user elemental from 134.209.57.3 port 33400
2020-04-14T23:27:04.311413abusebot-6.cloudsearch.cf sshd[26685]: Failed password for invalid user elemental from 134.209.57.3 port 33400 ssh2
2020-04-14T23:36:27.520041abusebot-6.cloudsearch.cf sshd[27351]: Invalid user j from 134.209.57.3 port 46852
2020-04-14T23:36:27.526554abusebot-6.cloudsearch.cf sshd[27351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.57.3
2020-04-14T23:36:27.520041abusebot-6.cloudsearch.cf sshd[27351]: Invalid user j from 134.209.57.3 port 46852
2020-04-14T23:36:29.120199abusebot-6.cloudsearch.cf sshd[27351]: Failed pa
...

(sshd) Failed SSH login from 122.160.51.88 (IN/India/abts-north-static-088.51.160.122.airtelbroadband.in): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 14 23:47:33 andromeda sshd[27076]: Invalid user zte from 122.160.51.88 port 5994
Apr 14 23:47:35 andromeda sshd[27076]: Failed password for invalid user zte from 122.160.51.88 port 5994 ssh2
Apr 14 23:56:15 andromeda sshd[27537]: Invalid user sheller from 122.160.51.88 port 48832

2020-04-15T00:01:48.737106abusebot-3.cloudsearch.cf sshd[12181]: Invalid user default from 206.189.45.234 port 60572
2020-04-15T00:01:48.743833abusebot-3.cloudsearch.cf sshd[12181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.45.234
2020-04-15T00:01:48.737106abusebot-3.cloudsearch.cf sshd[12181]: Invalid user default from 206.189.45.234 port 60572
2020-04-15T00:01:50.808348abusebot-3.cloudsearch.cf sshd[12181]: Failed password for invalid user default from 206.189.45.234 port 60572 ssh2
2020-04-15T00:05:34.679952abusebot-3.cloudsearch.cf sshd[12424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.45.234  user=root
2020-04-15T00:05:36.770740abusebot-3.cloudsearch.cf sshd[12424]: Failed password for root from 206.189.45.234 port 38060 ssh2
2020-04-15T00:09:29.177274abusebot-3.cloudsearch.cf sshd[12716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhos
...

[2020-04-14 20:05:24] NOTICE[1170][C-00000692] chan_sip.c: Call from '' (163.172.230.4:62723) to extension '99999999999011972592277524' rejected because extension not found in context 'public'.
[2020-04-14 20:05:24] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-14T20:05:24.082-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="99999999999011972592277524",SessionID="0x7f6c080b4a38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.230.4/62723",ACLName="no_extension_match"
[2020-04-14 20:10:19] NOTICE[1170][C-0000069c] chan_sip.c: Call from '' (163.172.230.4:59622) to extension '998011972592277524' rejected because extension not found in context 'public'.
[2020-04-14 20:10:19] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-14T20:10:19.661-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="998011972592277524",SessionID="0x7f6c08336de8",LocalAddress="IPV4/UDP/192.168.244.6/50
...

Unauthorized connection attempt from IP address 14.99.90.50 on Port 445(SMB)

daughtercoin.icu 45.155.125.159  Germ Cide X   -- phishing

trying to access non-authorized port

Unauthorised connection attempt detected at AUO NODE 1. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)

Automatic report - Port Scan Attack

20 attempts against mh-ssh on echoip

2020-04-14T20:42:45.650789shield sshd\[610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.229.211  user=root
2020-04-14T20:42:47.817973shield sshd\[610\]: Failed password for root from 49.235.229.211 port 38126 ssh2
2020-04-14T20:45:59.993063shield sshd\[1161\]: Invalid user vyos from 49.235.229.211 port 46652
2020-04-14T20:45:59.996839shield sshd\[1161\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.229.211
2020-04-14T20:46:01.461671shield sshd\[1161\]: Failed password for invalid user vyos from 49.235.229.211 port 46652 ssh2

Unauthorized connection attempt from IP address 139.255.244.34 on Port 445(SMB)

Apr 15 02:05:26 ns382633 sshd\[29919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.202.143  user=root
Apr 15 02:05:28 ns382633 sshd\[29919\]: Failed password for root from 167.99.202.143 port 38500 ssh2
Apr 15 02:14:22 ns382633 sshd\[31264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.202.143  user=root
Apr 15 02:14:24 ns382633 sshd\[31264\]: Failed password for root from 167.99.202.143 port 52034 ssh2
Apr 15 02:20:51 ns382633 sshd\[383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.202.143  user=root

Apr 14 22:52:36 debian-2gb-nbg1-2 kernel: \[9156544.067227\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=144.91.92.2 DST=195.201.40.59 LEN=28 TOS=0x00 PREC=0x00 TTL=248 ID=47017 PROTO=UDP SPT=50462 DPT=8089 LEN=8

Bruteforce detected by fail2ban