Honeypot attack, port: 81, PTR: PTR record not found

Mar  3 05:41:58 h2177944 sshd\[5319\]: Invalid user suporte from 69.229.6.47 port 40390
Mar  3 05:41:58 h2177944 sshd\[5319\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=69.229.6.47
Mar  3 05:41:59 h2177944 sshd\[5319\]: Failed password for invalid user suporte from 69.229.6.47 port 40390 ssh2
Mar  3 06:29:32 h2177944 sshd\[7570\]: Invalid user vboxuser from 69.229.6.47 port 51410
...

Jillor

2020-03-03T06:30:44.410004Z 0fd6af1a6820 New connection: 222.186.42.7:10913 (172.17.0.3:2222) [session: 0fd6af1a6820]
2020-03-03T06:57:36.086774Z b06e1e376bda New connection: 222.186.42.7:26726 (172.17.0.3:2222) [session: b06e1e376bda]

Port probing on unauthorized port 5555

Honeypot attack, port: 445, PTR: PTR record not found

Mar  3 08:10:00 vpn01 sshd[23237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.16.253.254
Mar  3 08:10:02 vpn01 sshd[23237]: Failed password for invalid user admin from 108.16.253.254 port 54340 ssh2
...

Mar  3 **REMOVED** sshd\[10178\]: Invalid user **REMOVED** from 59.10.5.156
Mar  3 **REMOVED** sshd\[10191\]: Invalid user mysql from 59.10.5.156
Mar  3 **REMOVED** sshd\[10216\]: Invalid user ubuntu from 59.10.5.156

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/199.123.3.41/ 
 
 US - 1H : (41)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : US 
 NAME ASN : ASN15108 
 
 IP : 199.123.3.41 
 
 CIDR : 199.123.0.0/22 
 
 PREFIX COUNT : 34 
 
 UNIQUE IP COUNT : 35328 
 
 
 ATTACKS DETECTED ASN15108 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2020-03-03 05:57:22 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery

Brute force VPN server

RDP Bruteforce

Mar  2 20:58:22 web1 sshd\[2977\]: Invalid user jboss from 181.197.64.77
Mar  2 20:58:22 web1 sshd\[2977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.197.64.77
Mar  2 20:58:24 web1 sshd\[2977\]: Failed password for invalid user jboss from 181.197.64.77 port 43242 ssh2
Mar  2 21:03:30 web1 sshd\[3436\]: Invalid user sunfang from 181.197.64.77
Mar  2 21:03:30 web1 sshd\[3436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.197.64.77

said spectrum is not

Received: from p-mtain002.msg.pkvw.co.charter.net ([107.14.70.244])
          by dnvrco-fep10.email.rr.com
          (InterMail vM.8.04.03.24 201-2389-100-172-20151028) with ESMTP
          id <20200303033443.HRCX7016.dnvrco-fep10.email.rr.com@p-mtain002.msg.pkvw.co.charter.net>
          for ; Tue, 3 Mar 2020 03:34:43 +0000
Received: from p-impin024.msg.pkvw.co.charter.net ([47.43.26.179])
          by p-mtain002.msg.pkvw.co.charter.net
          (InterMail vM.9.01.00.037.1 201-2473-137-122-172) with ESMTP
          id <20200303033443.NDNZ30089.p-mtain002.msg.pkvw.co.charter.net@p-impin024.msg.pkvw.co.charter.net>
          for ; Tue, 3 Mar 2020 03:34:43 +0000
Received: from p-impout001.msg.pkvw.co.charter.net ([47.43.26.138])
Received: from [127.0.0.1] ([66.18.52.186])
	by cmsmtp with ESMTPA

Mar  3 06:57:32 localhost sshd[20073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166  user=root
Mar  3 06:57:34 localhost sshd[20073]: Failed password for root from 222.186.31.166 port 31969 ssh2
Mar  3 06:57:35 localhost sshd[20073]: Failed password for root from 222.186.31.166 port 31969 ssh2
Mar  3 06:57:32 localhost sshd[20073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166  user=root
Mar  3 06:57:34 localhost sshd[20073]: Failed password for root from 222.186.31.166 port 31969 ssh2
Mar  3 06:57:35 localhost sshd[20073]: Failed password for root from 222.186.31.166 port 31969 ssh2
Mar  3 06:57:32 localhost sshd[20073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.166  user=root
Mar  3 06:57:34 localhost sshd[20073]: Failed password for root from 222.186.31.166 port 31969 ssh2
Mar  3 06:57:35 localhost sshd[20073]: Fa
...

Honeypot attack, port: 81, PTR: PTR record not found