@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-22 03:15:37,143 INFO [amun_request_handler] PortScan Detected on Port: 445 (182.75.38.29)

Sep 22 09:21:57 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.78.85, lip=176.9.177.164, session=\
Sep 22 09:25:14 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.78.85, lip=176.9.177.164, session=\
Sep 22 09:26:35 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.78.85, lip=176.9.177.164, session=\<+zUCOR+TJCdQUk5V\>
Sep 22 09:30:42 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.78.85, lip=176.9.177.164, session=\
Sep 22 09:32:29 relay dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.78.85, lip=176.9.177.164
...

Sep 22 06:59:07 server sshd\[9013\]: Invalid user ffff from 51.15.182.231 port 37368
Sep 22 06:59:07 server sshd\[9013\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.182.231
Sep 22 06:59:10 server sshd\[9013\]: Failed password for invalid user ffff from 51.15.182.231 port 37368 ssh2
Sep 22 07:03:25 server sshd\[21538\]: Invalid user testmail from 51.15.182.231 port 50170
Sep 22 07:03:25 server sshd\[21538\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.15.182.231

Sep 22 08:54:03 markkoudstaal sshd[23589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.11.216
Sep 22 08:54:05 markkoudstaal sshd[23589]: Failed password for invalid user cirros from 206.81.11.216 port 34570 ssh2
Sep 22 08:58:31 markkoudstaal sshd[24022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.11.216

Sep 22 09:23:57 meumeu sshd[31895]: Failed password for minecraft from 51.83.106.0 port 35362 ssh2
Sep 22 09:28:22 meumeu sshd[32499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.106.0 
Sep 22 09:28:25 meumeu sshd[32499]: Failed password for invalid user py from 51.83.106.0 port 49138 ssh2
...

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-22 03:16:31,707 INFO [amun_request_handler] PortScan Detected on Port: 445 (185.5.193.121)

Sep 21 21:50:06 auw2 sshd\[15906\]: Invalid user max from 118.24.101.182
Sep 21 21:50:06 auw2 sshd\[15906\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.101.182
Sep 21 21:50:08 auw2 sshd\[15906\]: Failed password for invalid user max from 118.24.101.182 port 35132 ssh2
Sep 21 21:57:01 auw2 sshd\[16891\]: Invalid user admin from 118.24.101.182
Sep 21 21:57:01 auw2 sshd\[16891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.101.182

Sep 22 09:04:39 mail postfix/smtpd\[13347\]: warning: unknown\[91.191.223.207\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 22 09:04:39 mail postfix/smtpd\[11776\]: warning: unknown\[91.191.223.207\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 22 09:04:39 mail postfix/smtpd\[13354\]: warning: unknown\[91.191.223.207\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 22 09:04:39 mail postfix/smtpd\[13364\]: warning: unknown\[91.191.223.207\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6

Sep 21 21:08:25 friendsofhawaii sshd\[30111\]: Invalid user elasticsearch from 43.239.176.113
Sep 21 21:08:25 friendsofhawaii sshd\[30111\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.239.176.113
Sep 21 21:08:28 friendsofhawaii sshd\[30111\]: Failed password for invalid user elasticsearch from 43.239.176.113 port 45403 ssh2
Sep 21 21:12:46 friendsofhawaii sshd\[30603\]: Invalid user jazmin from 43.239.176.113
Sep 21 21:12:46 friendsofhawaii sshd\[30603\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.239.176.113

Sep 22 07:13:22 taivassalofi sshd[40595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.97.45
Sep 22 07:13:24 taivassalofi sshd[40595]: Failed password for invalid user msda from 62.234.97.45 port 42457 ssh2
...

Port scan: Attack repeated for 24 hours

Sep 22 07:12:34 www_kotimaassa_fi sshd[1706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.63.133.86
Sep 22 07:12:36 www_kotimaassa_fi sshd[1706]: Failed password for invalid user admin from 119.63.133.86 port 40613 ssh2
...

Sep 22 05:52:44 lnxweb61 sshd[8669]: Failed password for root from 92.238.51.136 port 34438 ssh2
Sep 22 05:52:50 lnxweb61 sshd[8760]: Failed password for root from 92.238.51.136 port 34880 ssh2

port scan and connect, tcp 80 (http)

Sep 21 21:53:59 php1 sshd\[14007\]: Invalid user filler from 95.85.60.251
Sep 21 21:53:59 php1 sshd\[14007\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.60.251
Sep 21 21:54:01 php1 sshd\[14007\]: Failed password for invalid user filler from 95.85.60.251 port 46794 ssh2
Sep 21 21:58:41 php1 sshd\[14395\]: Invalid user nabih from 95.85.60.251
Sep 21 21:58:41 php1 sshd\[14395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.60.251