Jun 30 13:10:37 plex sshd[29168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.123.99.67  user=backup
Jun 30 13:10:39 plex sshd[29168]: Failed password for backup from 42.123.99.67 port 43502 ssh2

Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)

Jun 30 12:49:00 rotator sshd\[27624\]: Invalid user glassfish from 180.250.115.121Jun 30 12:49:02 rotator sshd\[27624\]: Failed password for invalid user glassfish from 180.250.115.121 port 33690 ssh2Jun 30 12:52:49 rotator sshd\[28406\]: Invalid user student from 180.250.115.121Jun 30 12:52:51 rotator sshd\[28406\]: Failed password for invalid user student from 180.250.115.121 port 51102 ssh2Jun 30 12:56:42 rotator sshd\[29183\]: Invalid user bb from 180.250.115.121Jun 30 12:56:44 rotator sshd\[29183\]: Failed password for invalid user bb from 180.250.115.121 port 40285 ssh2
...

Jun 30 01:57:53 ny01 sshd[9970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.106.9.125
Jun 30 01:57:55 ny01 sshd[9970]: Failed password for invalid user gis from 170.106.9.125 port 45986 ssh2
Jun 30 02:02:32 ny01 sshd[10984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.106.9.125

NOQUEUE: reject: RCPT from unknown\[119.122.91.11\]: 554 5.7.1 Service unavailable\; host \[119.122.91.11\] blocked using sbl-xbl.spamhaus.org\; https://www.spamhaus.org/sbl/query/SBLCSS

MultiHost/MultiPort Probe, Scan, Hack -

invalid user

Jun 30 13:19:29 mellenthin sshd[19728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.129.8.26  user=root
Jun 30 13:19:31 mellenthin sshd[19728]: Failed password for invalid user root from 150.129.8.26 port 60682 ssh2

[2020-06-30 07:18:26] NOTICE[1273] chan_sip.c: Registration from '' failed for '185.36.81.232:49644' - Wrong password
[2020-06-30 07:18:26] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-30T07:18:26.691-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="708",SessionID="0x7f31c018ea98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.36.81.232/49644",Challenge="7ca575de",ReceivedChallenge="7ca575de",ReceivedHash="ce24efddd2ea2b0fb663d07da2e9f088"
[2020-06-30 07:24:45] NOTICE[1273] chan_sip.c: Registration from '' failed for '185.36.81.232:50896' - Wrong password
[2020-06-30 07:24:45] SECURITY[1288] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-30T07:24:45.028-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="709",SessionID="0x7f31c004df38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.36.81.232/508
...

Hits on port : 445

Jun 30 12:27:10 gestao sshd[29442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.31.167.50 
Jun 30 12:27:12 gestao sshd[29442]: Failed password for invalid user daniel from 201.31.167.50 port 39033 ssh2
Jun 30 12:28:19 gestao sshd[29457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.31.167.50 
...

2020-06-30T08:33:38.822218mail.csmailer.org sshd[16787]: Invalid user bb from 193.228.108.122 port 35596
2020-06-30T08:33:38.824788mail.csmailer.org sshd[16787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.228.108.122
2020-06-30T08:33:38.822218mail.csmailer.org sshd[16787]: Invalid user bb from 193.228.108.122 port 35596
2020-06-30T08:33:40.859567mail.csmailer.org sshd[16787]: Failed password for invalid user bb from 193.228.108.122 port 35596 ssh2
2020-06-30T08:37:20.153053mail.csmailer.org sshd[17339]: Invalid user student4 from 193.228.108.122 port 45226
...

Automatic report - Banned IP Access

Unauthorized connection attempt detected from IP address 92.63.194.240 to port 3390

DATE:2020-06-30 05:48:10, IP:116.108.13.42, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)