Dec 16 08:51:03 sauna sshd[167928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.32.194.213
Dec 16 08:51:05 sauna sshd[167928]: Failed password for invalid user informix from 118.32.194.213 port 45870 ssh2
...

Unauthorized connection attempt from IP address 171.223.172.219 on Port 445(SMB)

(smtpauth) Failed SMTP AUTH login from 185.208.211.90 (US/United States/-): 5 in the last 3600 secs

Dec 16 07:54:36 lnxmysql61 sshd[9737]: Failed password for root from 104.168.250.71 port 60142 ssh2
Dec 16 07:54:36 lnxmysql61 sshd[9737]: Failed password for root from 104.168.250.71 port 60142 ssh2
Dec 16 08:01:18 lnxmysql61 sshd[11524]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.250.71

Dec 16 07:04:37 localhost sshd\[1275\]: Invalid user admin from 36.72.182.25 port 65332
Dec 16 07:04:37 localhost sshd\[1275\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.72.182.25
Dec 16 07:04:39 localhost sshd\[1275\]: Failed password for invalid user admin from 36.72.182.25 port 65332 ssh2
...

Dec 16 07:41:54 legacy sshd[9648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.130.10.13
Dec 16 07:41:56 legacy sshd[9648]: Failed password for invalid user jamp from 220.130.10.13 port 35977 ssh2
Dec 16 07:48:06 legacy sshd[9913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.130.10.13
...

Dec 16 07:17:36 server6 sshd[14130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-54-234-177-32.compute-1.amazonaws.com
Dec 16 07:17:37 server6 sshd[14130]: Failed password for invalid user loren from 54.234.177.32 port 37876 ssh2
Dec 16 07:17:38 server6 sshd[14130]: Received disconnect from 54.234.177.32: 11: Bye Bye [preauth]
Dec 16 07:27:35 server6 sshd[24389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-54-234-177-32.compute-1.amazonaws.com
Dec 16 07:27:37 server6 sshd[24389]: Failed password for invalid user test from 54.234.177.32 port 51940 ssh2
Dec 16 07:27:37 server6 sshd[24389]: Received disconnect from 54.234.177.32: 11: Bye Bye [preauth]
Dec 16 07:32:55 server6 sshd[29761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-54-234-177-32.compute-1.amazonaws.com  user=r.r
Dec 16 07:32:56 server6 sshd[29761]: Failed password f........
-------------------------------

DATE:2019-12-16 07:29:35, IP:85.113.136.31, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc)

Dec 16 03:53:52 firewall sshd[1272]: Failed password for root from 222.186.180.17 port 29194 ssh2
Dec 16 03:53:55 firewall sshd[1272]: Failed password for root from 222.186.180.17 port 29194 ssh2
Dec 16 03:54:00 firewall sshd[1272]: Failed password for root from 222.186.180.17 port 29194 ssh2
...

Dec 16 04:20:14 ws12vmsma01 sshd[62204]: Failed password for invalid user test from 140.246.124.36 port 39316 ssh2
Dec 16 04:29:08 ws12vmsma01 sshd[63446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.246.124.36  user=root
Dec 16 04:29:11 ws12vmsma01 sshd[63446]: Failed password for root from 140.246.124.36 port 35772 ssh2
...

Dec 16 07:30:01 debian-2gb-nbg1-2 kernel: \[130587.249377\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=175.119.91.146 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=50 ID=54403 PROTO=TCP SPT=24470 DPT=23 WINDOW=11181 RES=0x00 SYN URGP=0

Host Scan

Dec 16 09:29:44 debian-2gb-vpn-nbg1-1 kernel: [856154.688402] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.5.64 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=230 ID=8108 DF PROTO=TCP SPT=19105 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0

1576477785 - 12/16/2019 07:29:45 Host: 185.67.1.200/185.67.1.200 Port: 445 TCP Blocked

Dec 16 07:29:54 grey postfix/smtpd\[10632\]: NOQUEUE: reject: RCPT from unknown\[49.81.95.239\]: 554 5.7.1 Service unavailable\; Client host \[49.81.95.239\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[49.81.95.239\]\; from=\ to=\ proto=ESMTP helo=\
...