Jun 20 23:14:44 Tower sshd[12648]: refused connect from 140.143.228.227 (140.143.228.227)
Jun 20 23:50:06 Tower sshd[12648]: Connection from 91.166.95.207 port 12143 on 192.168.10.220 port 22 rdomain ""
Jun 20 23:50:07 Tower sshd[12648]: Invalid user pi from 91.166.95.207 port 12143
Jun 20 23:50:07 Tower sshd[12648]: error: Could not get shadow information for NOUSER
Jun 20 23:50:07 Tower sshd[12648]: Failed password for invalid user pi from 91.166.95.207 port 12143 ssh2
Jun 20 23:50:07 Tower sshd[12648]: Connection closed by invalid user pi 91.166.95.207 port 12143 [preauth]

Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools

2020-06-21T12:08:01.512342vps773228.ovh.net sshd[7288]: Invalid user four from 111.229.82.131 port 47278
2020-06-21T12:08:01.524119vps773228.ovh.net sshd[7288]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.82.131
2020-06-21T12:08:01.512342vps773228.ovh.net sshd[7288]: Invalid user four from 111.229.82.131 port 47278
2020-06-21T12:08:03.387537vps773228.ovh.net sshd[7288]: Failed password for invalid user four from 111.229.82.131 port 47278 ssh2
2020-06-21T12:10:13.116877vps773228.ovh.net sshd[7308]: Invalid user master from 111.229.82.131 port 47762
...

DATE:2020-06-21 05:50:57, IP:157.119.227.120, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)

Invalid user ubuntu from 176.31.31.185 port 41845

06/21/2020-05:32:24.116809 87.251.74.221 Protocol: 6 ET SCAN NMAP -sS window 1024

$f2bV_matches

Unauthorized connection attempt from IP address 125.162.26.25 on Port 445(SMB)

Jun 21 12:23:13 vps sshd[15380]: Failed password for root from 49.88.112.115 port 34805 ssh2
Jun 21 12:23:16 vps sshd[15380]: Failed password for root from 49.88.112.115 port 34805 ssh2
Jun 21 12:24:22 vps sshd[20593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.115  user=root
Jun 21 12:24:24 vps sshd[20593]: Failed password for root from 49.88.112.115 port 60397 ssh2
Jun 21 12:24:27 vps sshd[20593]: Failed password for root from 49.88.112.115 port 60397 ssh2
...

Jun 21 11:53:28 vps687878 sshd\[6305\]: Failed password for invalid user mcguitaruser from 111.161.74.118 port 50154 ssh2
Jun 21 11:55:04 vps687878 sshd\[6403\]: Invalid user iii from 111.161.74.118 port 49062
Jun 21 11:55:04 vps687878 sshd\[6403\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.74.118
Jun 21 11:55:05 vps687878 sshd\[6403\]: Failed password for invalid user iii from 111.161.74.118 port 49062 ssh2
Jun 21 11:56:43 vps687878 sshd\[6663\]: Invalid user ronald from 111.161.74.118 port 48008
Jun 21 11:56:43 vps687878 sshd\[6663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.161.74.118
...

Jun 21 07:37:10 eventyay sshd[30880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.223.194
Jun 21 07:37:12 eventyay sshd[30880]: Failed password for invalid user hug from 223.247.223.194 port 50274 ssh2
Jun 21 07:40:34 eventyay sshd[31044]: Failed password for root from 223.247.223.194 port 57938 ssh2
...

Jun 21 12:26:01 ns37 sshd[14182]: Failed password for root from 194.152.206.93 port 55334 ssh2
Jun 21 12:26:01 ns37 sshd[14182]: Failed password for root from 194.152.206.93 port 55334 ssh2

Jun 21 03:19:01 Host-KLAX-C sshd[7954]: Disconnected from invalid user rosana 51.77.215.227 port 57412 [preauth]
...

 TCP (SYN) 59.126.9.65:4715 -> port 23, len 44

Invalid user ajc from 122.51.94.92 port 37624