May  5 03:11:14 vmanager6029 postfix/smtpd\[4633\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May  5 03:12:39 vmanager6029 postfix/smtpd\[4633\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6

Honeypot attack, port: 445, PTR: PTR record not found

May  4 19:07:36 server1 sshd\[1970\]: Failed password for invalid user jyoti from 64.227.25.170 port 40978 ssh2
May  4 19:10:00 server1 sshd\[2780\]: Invalid user wol from 64.227.25.170
May  4 19:10:00 server1 sshd\[2780\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.25.170 
May  4 19:10:03 server1 sshd\[2780\]: Failed password for invalid user wol from 64.227.25.170 port 54914 ssh2
May  4 19:12:27 server1 sshd\[3604\]: Invalid user delphi from 64.227.25.170
...

2020-05-05T01:07:25.714737shield sshd\[10307\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=diskspace.ump.ac.za  user=root
2020-05-05T01:07:27.241877shield sshd\[10307\]: Failed password for root from 196.21.175.54 port 55936 ssh2
2020-05-05T01:12:43.188079shield sshd\[12444\]: Invalid user skynet from 196.21.175.54 port 39634
2020-05-05T01:12:43.191853shield sshd\[12444\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=diskspace.ump.ac.za
2020-05-05T01:12:45.708900shield sshd\[12444\]: Failed password for invalid user skynet from 196.21.175.54 port 39634 ssh2

May  5 03:12:39 mellenthin sshd[14840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.232.2.118  user=steam
May  5 03:12:42 mellenthin sshd[14840]: Failed password for invalid user steam from 109.232.2.118 port 65288 ssh2

05/05/2020-03:32:32.568103 151.101.14.214 Protocol: 6 SURICATA TLS invalid record/traffic

Icarus honeypot on github

proto=tcp  .  spt=55836  .  dpt=25  .     Found on   Dark List de      (44)

$f2bV_matches

May  5 03:12:50 server postfix/smtpd[10379]: NOQUEUE: reject: RCPT from unknown[45.227.87.164]: 554 5.7.1 Service unavailable; Client host [45.227.87.164] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/45.227.87.164; from= to=<7927378anav@anavveneto.it> proto=ESMTP helo=<45-227-87-164.host.netmais.net.br>

Unauthorized connection attempt detected from IP address 222.186.52.39 to port 22 [T]

May  5 10:56:33 web1 sshd[1215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.229.203.202  user=root
May  5 10:56:34 web1 sshd[1215]: Failed password for root from 104.229.203.202 port 40474 ssh2
May  5 11:09:20 web1 sshd[4940]: Invalid user vboxadmin from 104.229.203.202 port 45440
May  5 11:09:20 web1 sshd[4940]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.229.203.202
May  5 11:09:20 web1 sshd[4940]: Invalid user vboxadmin from 104.229.203.202 port 45440
May  5 11:09:22 web1 sshd[4940]: Failed password for invalid user vboxadmin from 104.229.203.202 port 45440 ssh2
May  5 11:15:25 web1 sshd[6457]: Invalid user waf from 104.229.203.202 port 56768
May  5 11:15:25 web1 sshd[6457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.229.203.202
May  5 11:15:25 web1 sshd[6457]: Invalid user waf from 104.229.203.202 port 56768
May  5 11:15:27 web1 sshd[6457
...

ههههه بدك الحساب تعال انا بعطيك ايام بس اذا عرفتك امك راح انيكها

Email rejected due to spam filtering

May  5 08:12:42 itv-usvr-01 sshd[24730]: Invalid user fatemeh from 89.82.248.54
May  5 08:12:42 itv-usvr-01 sshd[24730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.82.248.54
May  5 08:12:42 itv-usvr-01 sshd[24730]: Invalid user fatemeh from 89.82.248.54
May  5 08:12:44 itv-usvr-01 sshd[24730]: Failed password for invalid user fatemeh from 89.82.248.54 port 56886 ssh2