Sep 21 12:07:24 plusreed sshd[7329]: Invalid user ftpuser from 178.128.150.79
...

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-21 12:53:33,478 INFO [amun_request_handler] PortScan Detected on Port: 445 (145.255.22.27)

\[2019-09-21 11:29:00\] NOTICE\[2270\] chan_sip.c: Registration from '"4009" \' failed for '77.247.108.220:6796' - Wrong password
\[2019-09-21 11:29:00\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-21T11:29:00.822-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4009",SessionID="0x7fcd8c1c4788",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.108.220/6796",Challenge="502bfb2e",ReceivedChallenge="502bfb2e",ReceivedHash="6e44134dea64af6f0c8a48bfd0ac1362"
\[2019-09-21 11:29:01\] NOTICE\[2270\] chan_sip.c: Registration from '"4009" \' failed for '77.247.108.220:6796' - Wrong password
\[2019-09-21 11:29:01\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-21T11:29:01.030-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4009",SessionID="0x7fcd8c409238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4

MultiHost/MultiPort Probe, Scan, Hack -

Sep 21 17:49:16 mail sshd\[11068\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.168.127
Sep 21 17:49:18 mail sshd\[11068\]: Failed password for invalid user marko from 51.255.168.127 port 51720 ssh2
Sep 21 17:53:19 mail sshd\[11650\]: Invalid user celeste from 51.255.168.127 port 35730
Sep 21 17:53:19 mail sshd\[11650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.168.127
Sep 21 17:53:22 mail sshd\[11650\]: Failed password for invalid user celeste from 51.255.168.127 port 35730 ssh2

Sep 21 11:28:07 ny01 sshd[24349]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.111
Sep 21 11:28:07 ny01 sshd[24350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.111
Sep 21 11:28:09 ny01 sshd[24349]: Failed password for invalid user admin from 141.98.81.111 port 38965 ssh2
Sep 21 11:28:09 ny01 sshd[24350]: Failed password for invalid user admin from 141.98.81.111 port 46343 ssh2

Sep 21 17:32:15 rpi sshd[30206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.228.88.115 
Sep 21 17:32:17 rpi sshd[30206]: Failed password for invalid user aDmin.123 from 116.228.88.115 port 11726 ssh2

Sep 21 15:57:17 tux-35-217 sshd\[25900\]: Invalid user adm1n from 114.118.91.32 port 38176
Sep 21 15:57:17 tux-35-217 sshd\[25900\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.118.91.32
Sep 21 15:57:19 tux-35-217 sshd\[25900\]: Failed password for invalid user adm1n from 114.118.91.32 port 38176 ssh2
Sep 21 16:03:48 tux-35-217 sshd\[25962\]: Invalid user mona from 114.118.91.32 port 50990
Sep 21 16:03:48 tux-35-217 sshd\[25962\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.118.91.32
...

Automatic report - Port Scan Attack

Sep 21 05:21:07 hcbb sshd\[2051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.214.192.141  user=root
Sep 21 05:21:10 hcbb sshd\[2051\]: Failed password for root from 179.214.192.141 port 24393 ssh2
Sep 21 05:27:28 hcbb sshd\[2593\]: Invalid user col from 179.214.192.141
Sep 21 05:27:28 hcbb sshd\[2593\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.214.192.141
Sep 21 05:27:30 hcbb sshd\[2593\]: Failed password for invalid user col from 179.214.192.141 port 55193 ssh2

Sep 21 17:28:01 cvbnet sshd[26505]: Failed password for root from 153.36.236.35 port 20629 ssh2
Sep 21 17:28:03 cvbnet sshd[26505]: Failed password for root from 153.36.236.35 port 20629 ssh2

Sep 21 18:04:49 OPSO sshd\[4960\]: Invalid user loveme from 130.61.72.90 port 33694
Sep 21 18:04:49 OPSO sshd\[4960\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.72.90
Sep 21 18:04:51 OPSO sshd\[4960\]: Failed password for invalid user loveme from 130.61.72.90 port 33694 ssh2
Sep 21 18:09:05 OPSO sshd\[6079\]: Invalid user dockeruser from 130.61.72.90 port 46748
Sep 21 18:09:05 OPSO sshd\[6079\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.61.72.90

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/200.103.86.154/ 
 BR - 1H : (212)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : BR 
 NAME ASN : ASN8167 
 
 IP : 200.103.86.154 
 
 CIDR : 200.103.64.0/18 
 
 PREFIX COUNT : 299 
 
 UNIQUE IP COUNT : 4493824 
 
 
 WYKRYTE ATAKI Z ASN8167 :  
  1H - 1 
  3H - 1 
  6H - 2 
 12H - 3 
 24H - 6 
 
 INFO : SERVER - ABB - Looking for resource vulnerabilities Detected and Blocked by ADMIN  - data recovery

Sep 21 11:40:17 xtremcommunity sshd\[324686\]: Invalid user readonly from 138.68.4.8 port 56838
Sep 21 11:40:17 xtremcommunity sshd\[324686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.4.8
Sep 21 11:40:19 xtremcommunity sshd\[324686\]: Failed password for invalid user readonly from 138.68.4.8 port 56838 ssh2
Sep 21 11:44:55 xtremcommunity sshd\[324787\]: Invalid user acitoolkit from 138.68.4.8 port 42702
Sep 21 11:44:55 xtremcommunity sshd\[324787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.4.8
...

MultiHost/MultiPort Probe, Scan, Hack -