20/2/27@00:44:35: FAIL: Alarm-Network address from=118.70.120.255
...

Honeypot attack, port: 4567, PTR: 189-18-90-251.dsl.telesp.net.br.

Feb 26 05:12:03 webmail sshd[5674]: reveeclipse mapping checking getaddrinfo for 30-218-188-190.cab.prima.net.ar [190.188.218.30] failed - POSSIBLE BREAK-IN ATTEMPT!
Feb 26 05:12:03 webmail sshd[5674]: Invalid user 0 from 190.188.218.30
Feb 26 05:12:03 webmail sshd[5674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.188.218.30 
Feb 26 05:12:06 webmail sshd[5674]: Failed password for invalid user 0 from 190.188.218.30 port 59058 ssh2
Feb 26 05:12:16 webmail sshd[5674]: Received disconnect from 190.188.218.30: 11: Bye Bye [preauth]
Feb 26 05:14:02 webmail sshd[5679]: reveeclipse mapping checking getaddrinfo for 30-218-188-190.cab.prima.net.ar [190.188.218.30] failed - POSSIBLE BREAK-IN ATTEMPT!
Feb 26 05:14:02 webmail sshd[5679]: Invalid user 00 from 190.188.218.30
Feb 26 05:14:02 webmail sshd[5679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.188.218.30 
Feb 26 05:14:04 webmail........
-------------------------------

Feb 27 11:31:09 * sshd[9083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.113.190
Feb 27 11:31:11 * sshd[9083]: Failed password for invalid user clamav from 107.170.113.190 port 39293 ssh2

Scanning

Feb 27 10:22:14 game-panel sshd[11836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.160.216.147
Feb 27 10:22:15 game-panel sshd[11836]: Failed password for invalid user william from 111.160.216.147 port 54943 ssh2
Feb 27 10:28:39 game-panel sshd[12058]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.160.216.147

Feb 27 06:44:38 grey postfix/smtpd\[15058\]: NOQUEUE: reject: RCPT from shared-aoo139.rev.nazwa.pl\[85.128.249.139\]: 554 5.7.1 Service unavailable\; Client host \[85.128.249.139\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[85.128.249.139\]\; from=\ to=\ proto=ESMTP helo=\
...

1582782276 - 02/27/2020 06:44:36 Host: 202.79.36.155/202.79.36.155 Port: 445 TCP Blocked

2020-02-25T16:43:14.359634srv.ecualinux.com sshd[6522]: Invalid user ogpbot from 62.171.139.59 port 52732
2020-02-25T16:43:14.365536srv.ecualinux.com sshd[6522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmd48528.contaboserver.net
2020-02-25T16:43:16.197220srv.ecualinux.com sshd[6522]: Failed password for invalid user ogpbot from 62.171.139.59 port 52732 ssh2
2020-02-25T16:43:34.631529srv.ecualinux.com sshd[6538]: Invalid user ogpbot from 62.171.139.59 port 59104
2020-02-25T16:43:34.635205srv.ecualinux.com sshd[6538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=vmd48528.contaboserver.net

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=62.171.139.59

Honeypot attack, port: 5555, PTR: PTR record not found

Feb 27 10:33:03 silence02 sshd[6291]: Failed password for root from 177.194.171.24 port 60399 ssh2
Feb 27 10:42:58 silence02 sshd[6723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.194.171.24
Feb 27 10:43:00 silence02 sshd[6723]: Failed password for invalid user mapred from 177.194.171.24 port 35634 ssh2

DATE:2020-02-27 06:42:00, IP:212.93.154.120, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)

Honeypot attack, port: 445, PTR: 213-135-101-203.dsl.esoo.ru.

Feb 27 10:44:54 combo sshd[23009]: Failed password for root from 222.186.175.202 port 23650 ssh2
Feb 27 10:44:58 combo sshd[23009]: Failed password for root from 222.186.175.202 port 23650 ssh2
Feb 27 10:45:01 combo sshd[23009]: Failed password for root from 222.186.175.202 port 23650 ssh2
...

Feb 27 11:04:01 vpn01 sshd[14836]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.4.204
Feb 27 11:04:03 vpn01 sshd[14836]: Failed password for invalid user xhchen from 167.114.4.204 port 45960 ssh2
...