SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: static.vnpt.vn.

SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found

Unauthorized connection attempt from IP address 91.190.52.81 on Port 445(SMB)

Cluster member 67.227.229.95 (US/United States/host.cjthedj97.me) said, DENY 116.97.110.230, Reason:[(sshd) Failed SSH login from 116.97.110.230 (VN/Vietnam/dynamic-ip-adsl.viettel.vn): 1 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER

2020-10-01T21:40:48.448971shield sshd\[24292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.232.108.181  user=root
2020-10-01T21:40:50.687843shield sshd\[24292\]: Failed password for root from 165.232.108.181 port 38400 ssh2
2020-10-01T21:44:41.452282shield sshd\[24728\]: Invalid user l4d2server from 165.232.108.181 port 51058
2020-10-01T21:44:41.461112shield sshd\[24728\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.232.108.181
2020-10-01T21:44:43.685082shield sshd\[24728\]: Failed password for invalid user l4d2server from 165.232.108.181 port 51058 ssh2

SSH invalid-user multiple login try

Oct  2 13:35:47 galaxy event: galaxy/lswi: smtp: agenda@uni-potsdam.de [212.70.149.52] authentication failure using internet password
Oct  2 13:36:12 galaxy event: galaxy/lswi: smtp: dbs@uni-potsdam.de [212.70.149.52] authentication failure using internet password
Oct  2 13:36:38 galaxy event: galaxy/lswi: smtp: lic@uni-potsdam.de [212.70.149.52] authentication failure using internet password
Oct  2 13:37:03 galaxy event: galaxy/lswi: smtp: spaces@uni-potsdam.de [212.70.149.52] authentication failure using internet password
Oct  2 13:37:28 galaxy event: galaxy/lswi: smtp: ntp1@uni-potsdam.de [212.70.149.52] authentication failure using internet password
...

Oct  2 09:50:17 game-panel sshd[32621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.105.12
Oct  2 09:50:19 game-panel sshd[32621]: Failed password for invalid user geral from 200.29.105.12 port 57934 ssh2
Oct  2 09:54:52 game-panel sshd[355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.29.105.12

Invalid user openhabian from 114.245.31.241 port 58212

Failed password for invalid user nick from 202.57.49.250 port 40852 ssh2
Invalid user upload from 202.57.49.250 port 34841
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.57.49.250
Invalid user upload from 202.57.49.250 port 34841
Failed password for invalid user upload from 202.57.49.250 port 34841 ssh2

 TCP (SYN) 39.81.30.91:7833 -> port 23, len 40

Oct  2 05:18:51 master sshd[28541]: Failed password for root from 139.59.32.156 port 45730 ssh2
Oct  2 05:31:04 master sshd[29102]: Failed password for root from 139.59.32.156 port 42340 ssh2
Oct  2 05:36:21 master sshd[29141]: Failed password for invalid user franco from 139.59.32.156 port 49206 ssh2
Oct  2 05:41:17 master sshd[29259]: Failed password for invalid user testing from 139.59.32.156 port 56084 ssh2
Oct  2 05:45:49 master sshd[29302]: Failed password for invalid user redis2 from 139.59.32.156 port 34726 ssh2
Oct  2 05:50:16 master sshd[29380]: Failed password for invalid user carlos from 139.59.32.156 port 41604 ssh2
Oct  2 05:54:41 master sshd[29394]: Failed password for invalid user admin from 139.59.32.156 port 48482 ssh2
Oct  2 05:59:08 master sshd[29441]: Failed password for invalid user henry from 139.59.32.156 port 55356 ssh2
Oct  2 06:03:27 master sshd[29892]: Failed password for invalid user system from 139.59.32.156 port 33998 ssh2

Oct  2 13:18:32 marvibiene sshd[9631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.95.124.103 
Oct  2 13:18:34 marvibiene sshd[9631]: Failed password for invalid user registry from 187.95.124.103 port 50140 ssh2

fail2ban

Port Scan
...