@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-05 16:12:37,325 INFO [amun_request_handler] PortScan Detected on Port: 445 (122.252.227.228)

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 23:03:17,670 INFO [shellcode_manager] (117.3.66.244) no match, writing hexdump (86755ecbcf8f9c714526602b995b1f37 :2050560) - MS17010 (EternalBlue)

k+ssh-bruteforce

Honeypot attack, port: 445, PTR: customer-187-216-60-134.uninet-ide.com.mx.

\[2019-07-06 02:49:56\] NOTICE\[4808\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '5.62.19.38:2702' \(callid: 59946983-989280420-61650758\) - Failed to authenticate
\[2019-07-06 02:49:56\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-06T02:49:56.731+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="59946983-989280420-61650758",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/5.62.19.38/2702",Challenge="1562374196/857e2e27fcdb8852784ced63e76e975f",Response="5d8819a7df1623fef932d52f20e0b9b7",ExpectedResponse=""
\[2019-07-06 02:49:56\] NOTICE\[13863\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '5.62.19.38:2702' \(callid: 59946983-989280420-61650758\) - Failed to authenticate
\[2019-07-06 02:49:56\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-

Honeypot attack, port: 23, PTR: PTR record not found

Jul  6 00:49:21 marvibiene sshd[14937]: Invalid user grace from 45.55.157.147 port 39431
Jul  6 00:49:21 marvibiene sshd[14937]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.157.147
Jul  6 00:49:21 marvibiene sshd[14937]: Invalid user grace from 45.55.157.147 port 39431
Jul  6 00:49:23 marvibiene sshd[14937]: Failed password for invalid user grace from 45.55.157.147 port 39431 ssh2
...

port scan and connect, tcp 8081 (blackice-icecap)

Honeypot attack, port: 23, PTR: PTR record not found

Jul  6 00:13:14 mail sshd\[10447\]: Failed password for root from 125.77.252.164 port 44646 ssh2\
Jul  6 00:15:50 mail sshd\[10453\]: Invalid user guang from 125.77.252.164\
Jul  6 00:15:53 mail sshd\[10453\]: Failed password for invalid user guang from 125.77.252.164 port 57337 ssh2\
Jul  6 00:18:21 mail sshd\[10483\]: Invalid user sahil from 125.77.252.164\
Jul  6 00:18:23 mail sshd\[10483\]: Failed password for invalid user sahil from 125.77.252.164 port 6052 ssh2\
Jul  6 00:20:43 mail sshd\[10488\]: Invalid user tanya from 125.77.252.164\

Honeypot attack, port: 445, PTR: dsl-201-123-116-113-dyn.prod-infinitum.com.mx.

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 22:30:29,352 INFO [shellcode_manager] (1.179.184.177) no match, writing hexdump (82d9fe5a436b804f2aefe369d0cb9d07 :2125842) - MS17010 (EternalBlue)

2019-07-06T01:26:13.902513hub.schaetter.us sshd\[8225\]: Invalid user gi from 41.198.59.42
2019-07-06T01:26:13.931773hub.schaetter.us sshd\[8225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.198.59.42
2019-07-06T01:26:16.214726hub.schaetter.us sshd\[8225\]: Failed password for invalid user gi from 41.198.59.42 port 39349 ssh2
2019-07-06T01:31:10.384909hub.schaetter.us sshd\[8241\]: Invalid user die123 from 41.198.59.42
2019-07-06T01:31:10.416918hub.schaetter.us sshd\[8241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.198.59.42
...

Honeypot attack, port: 23, PTR: 78-128.206.104.serverhubrdns.in-addr.arpa.

dovecot jail smtp auth [dl]