Mar  8 04:54:28 sshgateway sshd\[9536\]: Invalid user admin from 82.209.235.1
Mar  8 04:54:29 sshgateway sshd\[9536\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.209.235.1
Mar  8 04:54:30 sshgateway sshd\[9536\]: Failed password for invalid user admin from 82.209.235.1 port 36375 ssh2

[2020-03-08 04:15:07] NOTICE[1148][C-0000fca8] chan_sip.c: Call from '' (185.53.88.49:5071) to extension '00972595778361' rejected because extension not found in context 'public'.
[2020-03-08 04:15:07] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-08T04:15:07.399-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00972595778361",SessionID="0x7fd82c3f03d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.49/5071",ACLName="no_extension_match"
[2020-03-08 04:22:53] NOTICE[1148][C-0000fcb2] chan_sip.c: Call from '' (185.53.88.49:5074) to extension '011972595778361' rejected because extension not found in context 'public'.
[2020-03-08 04:22:53] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-08T04:22:53.468-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011972595778361",SessionID="0x7fd82ca9d388",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.8
...

Automatic report - Port Scan Attack

Mar  8 09:27:07 lnxded64 sshd[30895]: Failed password for root from 140.86.12.31 port 9860 ssh2
Mar  8 09:32:00 lnxded64 sshd[32059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.86.12.31
Mar  8 09:32:02 lnxded64 sshd[32059]: Failed password for invalid user rails from 140.86.12.31 port 44727 ssh2

Honeypot attack, port: 445, PTR: 187.130.126.185.right-net.

Mar  8 13:59:21 areeb-Workstation sshd[8612]: Failed password for root from 222.186.175.148 port 20378 ssh2
Mar  8 13:59:25 areeb-Workstation sshd[8612]: Failed password for root from 222.186.175.148 port 20378 ssh2
...

failed_logins

Mar  8 09:48:02 plex sshd[28263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.17  user=root
Mar  8 09:48:04 plex sshd[28263]: Failed password for root from 222.186.190.17 port 37928 ssh2

Mar  8 05:29:20 firewall sshd[22032]: Failed password for root from 222.186.169.192 port 45874 ssh2
Mar  8 05:29:31 firewall sshd[22032]: error: maximum authentication attempts exceeded for root from 222.186.169.192 port 45874 ssh2 [preauth]
Mar  8 05:29:31 firewall sshd[22032]: Disconnecting: Too many authentication failures [preauth]
...

Mar  8 13:53:17 gw1 sshd[27422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.232.215.24
Mar  8 13:53:19 gw1 sshd[27422]: Failed password for invalid user lars from 103.232.215.24 port 52848 ssh2
...

Mar  8 12:38:51 gw1 sshd[25094]: Failed password for root from 51.158.162.242 port 49046 ssh2
Mar  8 12:44:21 gw1 sshd[25367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.162.242
...

Mar  7 22:46:54 web1 sshd\[2329\]: Invalid user security from 51.75.18.215
Mar  7 22:46:54 web1 sshd\[2329\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.18.215
Mar  7 22:46:56 web1 sshd\[2329\]: Failed password for invalid user security from 51.75.18.215 port 50156 ssh2
Mar  7 22:50:15 web1 sshd\[2663\]: Invalid user david from 51.75.18.215
Mar  7 22:50:15 web1 sshd\[2663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.18.215

Mar  8 06:45:14 mail.srvfarm.net postfix/smtpd[3252860]: NOQUEUE: reject: RCPT from unknown[217.112.142.92]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 06:45:14 mail.srvfarm.net postfix/smtpd[3252859]: NOQUEUE: reject: RCPT from unknown[217.112.142.92]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 06:45:14 mail.srvfarm.net postfix/smtpd[3251595]: NOQUEUE: reject: RCPT from unknown[217.112.142.92]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 06:46:06 mail.srvfarm.net postfix/smtpd[3252862]: NOQUEUE: reject: RCPT fro

port

port scan and connect, tcp 22 (ssh)