May  4 13:39:04 game-panel sshd[17415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.33.240
May  4 13:39:07 game-panel sshd[17415]: Failed password for invalid user jeremiah from 107.175.33.240 port 34054 ssh2
May  4 13:43:04 game-panel sshd[17758]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.175.33.240

05/04/2020-19:55:33.060441 52.26.66.228 Protocol: 6 SURICATA TLS invalid record/traffic

May  4 13:09:33 mercury smtpd[1321]: ca90ab18da1735d0 smtp event=failed-command address=45.143.223.148 host=45.143.223.148 command="RCPT to:" result="550 Invalid recipient"
...

May  4 14:27:36 ip-172-31-61-156 sshd[25002]: Failed password for root from 61.152.70.126 port 46920 ssh2
May  4 14:31:52 ip-172-31-61-156 sshd[25098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.152.70.126  user=root
May  4 14:31:53 ip-172-31-61-156 sshd[25098]: Failed password for root from 61.152.70.126 port 4315 ssh2
May  4 14:31:52 ip-172-31-61-156 sshd[25098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.152.70.126  user=root
May  4 14:31:53 ip-172-31-61-156 sshd[25098]: Failed password for root from 61.152.70.126 port 4315 ssh2
...

May  4 13:13:37 XXX sshd[41356]: Invalid user abdou from 129.204.118.151 port 44616

May  4 10:42:06 mockhub sshd[16720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.158.195
May  4 10:42:07 mockhub sshd[16720]: Failed password for invalid user server from 49.235.158.195 port 53638 ssh2
...

May  4 17:09:32 gw1 sshd[10478]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.168.95.234
May  4 17:09:34 gw1 sshd[10478]: Failed password for invalid user postgres from 180.168.95.234 port 51972 ssh2
...

DATE:2020-05-04 14:09:51, IP:187.111.219.89, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)

Rude login attack (743 tries in 1d)

May  4 14:09:44 host sshd[5122]: Invalid user su from 36.36.200.181 port 40534
...

2020-05-04T18:30:08.056331mail.broermann.family sshd[15787]: Failed password for invalid user ken from 103.131.169.186 port 43822 ssh2
2020-05-04T18:33:17.490583mail.broermann.family sshd[15933]: Invalid user spb from 103.131.169.186 port 56742
2020-05-04T18:33:17.494965mail.broermann.family sshd[15933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.131.169.186
2020-05-04T18:33:17.490583mail.broermann.family sshd[15933]: Invalid user spb from 103.131.169.186 port 56742
2020-05-04T18:33:19.452391mail.broermann.family sshd[15933]: Failed password for invalid user spb from 103.131.169.186 port 56742 ssh2
...

May  4 14:39:18 dns1 sshd[17585]: Failed password for root from 43.255.84.38 port 1957 ssh2
May  4 14:43:31 dns1 sshd[17804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.255.84.38 
May  4 14:43:33 dns1 sshd[17804]: Failed password for invalid user iguana from 43.255.84.38 port 56581 ssh2

May  4 16:58:13 mail sshd\[14552\]: Invalid user denise from 35.200.161.135
May  4 16:58:13 mail sshd\[14552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.200.161.135
May  4 16:58:15 mail sshd\[14552\]: Failed password for invalid user denise from 35.200.161.135 port 56102 ssh2
...

May  4 19:33:45  sshd\[18257\]: Invalid user dodsserver from 202.113.91.8May  4 19:33:48  sshd\[18257\]: Failed password for invalid user dodsserver from 202.113.91.8 port 43670 ssh2
...

Automatic report - Port Scan Attack