Unauthorized connection attempt detected from IP address 194.180.224.117 to port 80 [T]

ET SCAN Sipvicious Scan - port: 5060 proto: UDP cat: Attempted Information Leak

Jul  5 06:43:39 h2779839 sshd[24315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.14.33.229  user=root
Jul  5 06:43:41 h2779839 sshd[24315]: Failed password for root from 103.14.33.229 port 45630 ssh2
Jul  5 06:46:46 h2779839 sshd[24371]: Invalid user ftp from 103.14.33.229 port 60464
Jul  5 06:46:46 h2779839 sshd[24371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.14.33.229
Jul  5 06:46:46 h2779839 sshd[24371]: Invalid user ftp from 103.14.33.229 port 60464
Jul  5 06:46:48 h2779839 sshd[24371]: Failed password for invalid user ftp from 103.14.33.229 port 60464 ssh2
Jul  5 06:49:58 h2779839 sshd[24394]: Invalid user wangjing from 103.14.33.229 port 47070
Jul  5 06:49:58 h2779839 sshd[24394]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.14.33.229
Jul  5 06:49:58 h2779839 sshd[24394]: Invalid user wangjing from 103.14.33.229 port 47070
Jul  5 06:5
...

"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:

Jul  5 05:54:12  sshd\[4982\]: Invalid user 8400 from 59.36.178.98Jul  5 05:54:14  sshd\[4982\]: Failed password for invalid user 8400 from 59.36.178.98 port 21580 ssh2
...

Icarus honeypot on github

2020-07-05T08:09:43.656892galaxy.wi.uni-potsdam.de sshd[19267]: Invalid user postgres from 157.245.137.211 port 37672
2020-07-05T08:09:43.658902galaxy.wi.uni-potsdam.de sshd[19267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.137.211
2020-07-05T08:09:43.656892galaxy.wi.uni-potsdam.de sshd[19267]: Invalid user postgres from 157.245.137.211 port 37672
2020-07-05T08:09:45.667012galaxy.wi.uni-potsdam.de sshd[19267]: Failed password for invalid user postgres from 157.245.137.211 port 37672 ssh2
2020-07-05T08:12:52.750084galaxy.wi.uni-potsdam.de sshd[19655]: Invalid user hansen from 157.245.137.211 port 35818
2020-07-05T08:12:52.751949galaxy.wi.uni-potsdam.de sshd[19655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.137.211
2020-07-05T08:12:52.750084galaxy.wi.uni-potsdam.de sshd[19655]: Invalid user hansen from 157.245.137.211 port 35818
2020-07-05T08:12:54.373521galaxy.wi.uni-potsdam.de ss
...

Jul  5 06:09:46 haigwepa sshd[2213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.88.166.145 
Jul  5 06:09:48 haigwepa sshd[2213]: Failed password for invalid user deploy from 113.88.166.145 port 37396 ssh2
...

Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-07-05T05:43:48Z and 2020-07-05T05:50:19Z

 TCP (SYN) 37.49.230.204:43217 -> port 22, len 44

Jul  5 11:25:41 webhost01 sshd[15140]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.95.45
Jul  5 11:25:43 webhost01 sshd[15140]: Failed password for invalid user aps from 106.12.95.45 port 60096 ssh2
...

159.89.123.66 - - [05/Jul/2020:05:25:18 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1865 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
159.89.123.66 - - [05/Jul/2020:05:25:24 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1846 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
159.89.123.66 - - [05/Jul/2020:05:25:25 +0100] "POST /wp/xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...

Jul  5 06:59:48 debian-2gb-nbg1-2 kernel: \[16183803.624601\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=91.240.118.61 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=3972 PROTO=TCP SPT=41142 DPT=3408 WINDOW=1024 RES=0x00 SYN URGP=0

"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:

$f2bV_matches