SSH Invalid Login

(From atrixxtrix@gmail.com) Dear Sir/mdm, 
 
How are you? 
 
We supply Professional surveillance & medical products: 
 
Moldex, makrite and 3M N95 1870, 1860, 9502, 9501, 8210, 9105 
3ply medical, KN95, FFP2, FFP3, PPDS masks 
Face shield/medical goggles 
Nitrile/vinyl/Latex/PP gloves 
Isolation/surgical gown lvl1-4 
Protective PPE/Overalls lvl1-4 
IR non-contact/oral thermometers 
sanitizer dispenser 
 
Logitech/OEM webcam 
Marine underwater CCTV 
Explosionproof CCTV 
4G Solar CCTV 
Human body thermal cameras 
IP & analog cameras for homes/industrial/commercial 
 
Let us know which products you are interested and we can send you our full pricelist. 
 
We also welcome distributors/resellers. Our CCTV cameras are made in Taiwan. Our ip camera system is plug and play without any configuration (just scan QR code on 
mobile phone) and our cameras do not require any standalone power supply to work. 
Feel free to contact us below 
 
Whatsapp: +65 87695655 
Telegram: cctv_hub 
Skype: cc

Sep  5 23:58:41 sd-69548 sshd[851729]: Unable to negotiate with 45.82.136.246 port 47826: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Sep  5 23:58:53 sd-69548 sshd[851746]: Unable to negotiate with 45.82.136.246 port 57016: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
...

Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2020-09-05T22:34:55Z

Sep  6 00:13:59 baraca dovecot: auth-worker(58929): passwd(mughal@net.ua,45.142.120.121): unknown user
Sep  6 00:14:45 baraca dovecot: auth-worker(58929): passwd(eris@net.ua,45.142.120.121): unknown user
Sep  6 00:15:28 baraca dovecot: auth-worker(58929): passwd(22222@net.ua,45.142.120.121): unknown user
Sep  6 00:15:59 baraca dovecot: auth-worker(58929): passwd(ines@net.ua,45.142.120.121): unknown user
Sep  6 01:16:26 baraca dovecot: auth-worker(63039): passwd(user_name@net.ua,45.142.120.121): unknown user
Sep  6 01:17:09 baraca dovecot: auth-worker(63039): passwd(door@net.ua,45.142.120.121): unknown user
...

31.217.5.13 - - [05/Sep/2020:16:57:42 +0000] "GET /wp-login.php HTTP/1.1" 301 599 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:40.0) Gecko/20100101 Firefox/40.1"
...

[2020-09-05 18:25:57] NOTICE[1194] chan_sip.c: Registration from '' failed for '185.147.212.8:49692' - Wrong password
[2020-09-05 18:25:57] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-05T18:25:57.257-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="338",SessionID="0x7f2ddc04e988",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.212.8/49692",Challenge="76837c96",ReceivedChallenge="76837c96",ReceivedHash="c4b900d6af0f448b2b2a5815bd5643ff"
[2020-09-05 18:28:51] NOTICE[1194] chan_sip.c: Registration from '' failed for '185.147.212.8:53766' - Wrong password
[2020-09-05 18:28:51] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-05T18:28:51.105-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1894",SessionID="0x7f2ddc3127f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.212.8/5
...

1599324634 - 09/05/2020 18:50:34 Host: 112.202.3.55/112.202.3.55 Port: 445 TCP Blocked

Automatic report - Port Scan Attack

SSH Invalid Login

Brute force attempt

Sep  5 20:40:07 pve1 sshd[23314]: Failed password for root from 103.205.5.158 port 50088 ssh2
...

Unauthorised access (Sep  5) SRC=218.35.219.79 LEN=40 TTL=44 ID=31577 TCP DPT=23 WINDOW=22944 SYN

Icarus honeypot on github

firewall-block, port(s): 1433/tcp