May  3 15:29:36 pkdns2 sshd\[31789\]: Address 117.169.41.85 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!May  3 15:29:36 pkdns2 sshd\[31789\]: Invalid user test from 117.169.41.85May  3 15:29:37 pkdns2 sshd\[31789\]: Failed password for invalid user test from 117.169.41.85 port 49168 ssh2May  3 15:35:38 pkdns2 sshd\[32128\]: Address 117.169.41.85 maps to localhost, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!May  3 15:35:38 pkdns2 sshd\[32128\]: Invalid user cone from 117.169.41.85May  3 15:35:41 pkdns2 sshd\[32128\]: Failed password for invalid user cone from 117.169.41.85 port 53812 ssh2
...

2020-05-03T15:19:06.871642homeassistant sshd[3473]: Invalid user spigot from 149.129.57.246 port 37926
2020-05-03T15:19:06.884535homeassistant sshd[3473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.129.57.246
...

nft/Honeypot/3389/73e86

May  3 20:11:20 gw1 sshd[13436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.33.240.91
May  3 20:11:22 gw1 sshd[13436]: Failed password for invalid user cz from 193.33.240.91 port 53380 ssh2
...

May  3 15:38:32 game-panel sshd[15602]: Failed password for root from 222.186.175.154 port 30058 ssh2
May  3 15:38:44 game-panel sshd[15602]: error: maximum authentication attempts exceeded for root from 222.186.175.154 port 30058 ssh2 [preauth]
May  3 15:38:53 game-panel sshd[15604]: Failed password for root from 222.186.175.154 port 25504 ssh2

1588507910 - 05/03/2020 14:11:50 Host: 176.204.102.202/176.204.102.202 Port: 445 TCP Blocked

May  3 17:08:53 mail kernel: [524151.866991] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3c:05:0d:89:f8:66:f2:68:66:ff:08:00 SRC=79.124.62.114 DST=77.73.69.240 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=24964 PROTO=TCP SPT=56789 DPT=5361 WINDOW=1024 RES=0x00 SYN URGP=0 
...

May  3 13:39:53 [host] kernel: [5134888.555176] [U
May  3 13:45:45 [host] kernel: [5135239.929643] [U
May  3 13:49:26 [host] kernel: [5135461.480108] [U
May  3 14:02:36 [host] kernel: [5136250.902791] [U
May  3 14:10:25 [host] kernel: [5136719.717916] [U
May  3 14:11:46 [host] kernel: [5136801.031095] [U

Unauthorised access (May  3) SRC=77.222.97.119 LEN=52 TTL=118 ID=18295 DF TCP DPT=445 WINDOW=8192 SYN

May  3 13:55:32 ovpn sshd\[31900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.204.164  user=root
May  3 13:55:34 ovpn sshd\[31900\]: Failed password for root from 128.199.204.164 port 55138 ssh2
May  3 14:12:09 ovpn sshd\[3436\]: Invalid user time from 128.199.204.164
May  3 14:12:09 ovpn sshd\[3436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.204.164
May  3 14:12:11 ovpn sshd\[3436\]: Failed password for invalid user time from 128.199.204.164 port 38598 ssh2

2020-05-03T12:22:18.577190shield sshd\[4484\]: Invalid user ydk from 120.92.151.17 port 31320
2020-05-03T12:22:18.580650shield sshd\[4484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.151.17
2020-05-03T12:22:19.983531shield sshd\[4484\]: Failed password for invalid user ydk from 120.92.151.17 port 31320 ssh2
2020-05-03T12:27:32.142919shield sshd\[5697\]: Invalid user read from 120.92.151.17 port 25032
2020-05-03T12:27:32.146875shield sshd\[5697\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.151.17

Connection by 14.98.189.2 on port: 8080 got caught by honeypot at 5/3/2020 1:11:33 PM

[2020-05-03 11:04:37] NOTICE[1170] chan_sip.c: Registration from '' failed for '51.195.5.233:63492' - Wrong password
[2020-05-03 11:04:37] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-03T11:04:37.504-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7381",SessionID="0x7f6c0825b8a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.195.5.233/63492",Challenge="42cbc873",ReceivedChallenge="42cbc873",ReceivedHash="cb5cd66d71575894203ec6ef299caccb"
[2020-05-03 11:04:42] NOTICE[1170] chan_sip.c: Registration from '' failed for '51.195.5.233:52290' - Wrong password
[2020-05-03 11:04:42] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-03T11:04:42.888-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8381",SessionID="0x7f6c083b5ae8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.195.5.233/522
...

Port probing on unauthorized port 445

May  3 16:23:43 combo sshd[5902]: Failed password for root from 222.186.175.150 port 38100 ssh2
May  3 16:23:46 combo sshd[5902]: Failed password for root from 222.186.175.150 port 38100 ssh2
May  3 16:23:50 combo sshd[5902]: Failed password for root from 222.186.175.150 port 38100 ssh2
...