Jun 26 14:19:38 XXX sshd[62007]: Invalid user qbf77101 from 177.92.16.186 port 33015

From: Dave Davis Sent: 26 June 2019 18:28Subject: Financial Benefit
 Donation to you, contact julieleach106@gmail.comThe information contained in this message is confidential and intended solely for the use of the individual or entity named. If the reader of this message is not the intended recipient or the employee or agent responsible for delivering it to the intended recipient, you are hereby notified that any dissemination, distribution, copying or unauthorized use of this communication is strictly prohibited. If you have received this by error, please notify the sender immediately.HonorHealth-	john.colquist@honorhealth.com digital.marketing@HonorHealth.com

Jun 26 19:58:10 itv-usvr-01 sshd[4914]: Invalid user julie from 191.232.50.24
Jun 26 19:58:10 itv-usvr-01 sshd[4914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.232.50.24
Jun 26 19:58:10 itv-usvr-01 sshd[4914]: Invalid user julie from 191.232.50.24
Jun 26 19:58:12 itv-usvr-01 sshd[4914]: Failed password for invalid user julie from 191.232.50.24 port 48366 ssh2
Jun 26 20:02:19 itv-usvr-01 sshd[5072]: Invalid user sanal from 191.232.50.24

Jun 26 19:46:12 lnxmail61 sshd[28433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.213.214.225

Jun 26 13:01:05 work-partkepr sshd\[12537\]: Invalid user student from 200.207.220.128 port 33407
Jun 26 13:01:05 work-partkepr sshd\[12537\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.207.220.128
...

Calling not existent HTTP content (400 or 404).

Jun 26 15:00:19 mail sshd\[1409\]: Invalid user ubuntu from 129.204.201.9 port 56900
Jun 26 15:00:19 mail sshd\[1409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.201.9
Jun 26 15:00:21 mail sshd\[1409\]: Failed password for invalid user ubuntu from 129.204.201.9 port 56900 ssh2
Jun 26 15:02:26 mail sshd\[2383\]: Invalid user support from 129.204.201.9 port 46062
Jun 26 15:02:26 mail sshd\[2383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.201.9
...

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-26 08:59:24,586 INFO [amun_request_handler] PortScan Detectemun_request_handler] PortScan Detected on Port: 445 (14.235.39.193)

[ssh] SSH attack

Jun 26 16:04:53 Tower sshd[25916]: Connection from 187.87.38.201 port 39869 on 192.168.10.220 port 22
Jun 26 16:04:54 Tower sshd[25916]: Invalid user presta from 187.87.38.201 port 39869
Jun 26 16:04:54 Tower sshd[25916]: error: Could not get shadow information for NOUSER
Jun 26 16:04:54 Tower sshd[25916]: Failed password for invalid user presta from 187.87.38.201 port 39869 ssh2
Jun 26 16:04:54 Tower sshd[25916]: Received disconnect from 187.87.38.201 port 39869:11: Bye Bye [preauth]
Jun 26 16:04:54 Tower sshd[25916]: Disconnected from invalid user presta 187.87.38.201 port 39869 [preauth]

Jun 26 07:01:50 mail postfix/postscreen[54480]: PREGREET 23 after 0.29 from [147.30.173.103]:61935: HELO [147.30.173.103]

...

VoIP Brute Force - 212.83.153.170 - Auto Report
...

Brute force SMTP login attempts.

web-1 [ssh] SSH Attack

SMTP-sasl brute force
...