TCP (SYN) 223.22.243.179:31349 -> port 81, len 44

2020-09-07 12:27:19 dovecot_login authenticator failed for \(User\) \[45.142.120.36\]: 535 Incorrect authentication data \(set_id=assets2@org.ua\)2020-09-07 12:27:56 dovecot_login authenticator failed for \(User\) \[45.142.120.36\]: 535 Incorrect authentication data \(set_id=s33@org.ua\)2020-09-07 12:28:34 dovecot_login authenticator failed for \(User\) \[45.142.120.36\]: 535 Incorrect authentication data \(set_id=blogs@org.ua\)
...

Sep  7 06:42:52 firewall sshd[9401]: Failed password for root from 104.248.237.70 port 34715 ssh2
Sep  7 06:44:33 firewall sshd[9452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.237.70  user=root
Sep  7 06:44:35 firewall sshd[9452]: Failed password for root from 104.248.237.70 port 64437 ssh2
...

$f2bV_matches

(sshd) Failed SSH login from 27.128.162.183 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  7 05:11:10 server sshd[32734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.128.162.183  user=root
Sep  7 05:11:11 server sshd[32734]: Failed password for root from 27.128.162.183 port 39515 ssh2
Sep  7 05:21:02 server sshd[4415]: Invalid user grafana from 27.128.162.183 port 49215
Sep  7 05:21:05 server sshd[4415]: Failed password for invalid user grafana from 27.128.162.183 port 49215 ssh2
Sep  7 05:24:51 server sshd[5429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.128.162.183  user=root

Sep  7 11:22:13 theomazars sshd[27984]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.91.247.113  user=root
Sep  7 11:22:15 theomazars sshd[27984]: Failed password for root from 64.91.247.113 port 36454 ssh2

Sep  7 09:59:12 vpn01 sshd[30034]: Failed password for root from 192.42.116.19 port 40150 ssh2
Sep  7 09:59:23 vpn01 sshd[30034]: error: maximum authentication attempts exceeded for root from 192.42.116.19 port 40150 ssh2 [preauth]
...

Sep  7 08:48:04 abendstille sshd\[1324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.29.136  user=root
Sep  7 08:48:06 abendstille sshd\[1324\]: Failed password for root from 212.64.29.136 port 55198 ssh2
Sep  7 08:52:23 abendstille sshd\[5263\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.29.136  user=root
Sep  7 08:52:25 abendstille sshd\[5263\]: Failed password for root from 212.64.29.136 port 53528 ssh2
Sep  7 08:56:56 abendstille sshd\[9408\]: Invalid user gpadmin from 212.64.29.136
Sep  7 08:56:56 abendstille sshd\[9408\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.29.136
...

Failed password for root from 51.38.239.53 port 51458 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=solution-info-services.fr  user=root
Failed password for root from 51.38.239.53 port 58096 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=solution-info-services.fr  user=root
Failed password for root from 51.38.239.53 port 36496 ssh2

2020-09-06 11:38:30.930021-0500  localhost smtpd[58341]: NOQUEUE: reject: RCPT from unknown[88.157.66.158]: 554 5.7.1 Service unavailable; Client host [88.157.66.158] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/88.157.66.158; from= to= proto=ESMTP helo=

Icarus honeypot on github

SSH login attempts.

(smtpauth) Failed SMTP AUTH login from 52.185.161.47 (JP/Japan/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2020-09-06 21:36:18 dovecot_login authenticator failed for (ADMIN) [52.185.161.47]:45700: 535 Incorrect authentication data (set_id=reservations@rosaritoreservations.com)
2020-09-06 21:36:18 dovecot_login authenticator failed for (ADMIN) [52.185.161.47]:45698: 535 Incorrect authentication data (set_id=links@rosaritoreservations.com)
2020-09-06 21:38:37 dovecot_login authenticator failed for (ADMIN) [52.185.161.47]:37102: 535 Incorrect authentication data (set_id=links@rosaritoreservations.com)
2020-09-06 21:38:37 dovecot_login authenticator failed for (ADMIN) [52.185.161.47]:37122: 535 Incorrect authentication data (set_id=reservations@rosaritoreservations.com)
2020-09-06 21:40:57 dovecot_login authenticator failed for (ADMIN) [52.185.161.47]:56662: 535 Incorrect authentication data (set_id=reservations@rosaritoreservations.com)

Sep  7 16:28:31 webhost01 sshd[663]: Failed password for root from 148.70.149.39 port 41884 ssh2
...

LinkSys E-series Routers Remote Code Execution Vulnerability , PTR: PTR record not found