I think someone is trying to access my Mac remotely.

I am getting the logs below at least 3-4 times in a day. Earlier my remote management and sharing were ON and the firewall is off, after that I disabled the remote management & sharing and enabled a firewall.

Sometimes my Mac's screen automatically lights up from the lock screen.

May 16 00:27:59 Dan-Mac-Pro com.apple.xpc.launchd[1] (com.apple.preferences.sharing.remoteservice[1015]): Service exited due to SIGKILL | sent by com.apple.preferences.sharing.re[1015]
May 16 00:28:16 Dan-Mac-Pro com.apple.xpc.launchd[1] (com.apple.preferences.sharing.remoteservice[1053]): Service exited due to SIGKILL | sent by com.apple.preferences.sharing.re[1053]

May 13 19:39:32 Dan-Mac-Pro com.apple.xpc.launchd[1] (com.apple.screensharing): Unknown key for string: SHAuthorizationRight
May 13 19:40:51 Dan-Mac-Pro com.apple.xpc.launchd[1] (com.apple.screensharing): Unknown key for string: SHAuthorizationRight

Also, incoming requests are coming on a process name 'screensharingd', after enabling firewall they are blocked.

https://macmyths.com/how-to-tell-if-someone-is-remotely-accessing-your-mac/

I have also found some similar info from this article. But I am not sure about the authenticity of this article.