03.07.2019 01:14:47 - Login Fail on hMailserver 
Detected by ELinOX-hMail-A2F

2019-07-03 01:55:39 dovecot_login authenticator failed for (xTS0wCwTPr) [172.245.5.172]:61509: 535 Incorrect authentication data (set_id=alex)
2019-07-03 01:55:49 dovecot_login authenticator failed for (SlC1J4b) [172.245.5.172]:63541: 535 Incorrect authentication data (set_id=alex)
2019-07-03 01:56:02 dovecot_login authenticator failed for (fHOeK4XB) [172.245.5.172]:64250: 535 Incorrect authentication data (set_id=alex)
2019-07-03 01:56:22 dovecot_login authenticator failed for (qVp2N8) [172.245.5.172]:56128: 535 Incorrect authentication data (set_id=alex)
2019-07-03 01:56:42 dovecot_login authenticator failed for (st9DfkxIk6) [172.245.5.172]:62338: 535 Incorrect authentication data (set_id=alex)
2019-07-03 01:57:03 dovecot_login authenticator failed for (K4nbrbsg92) [172.245.5.172]:63731: 535 Incorrect authentication data (set_id=alex)
2019-07-03 01:57:22 dovecot_login authenticator failed for (wtNXqx0EWX) [172.245.5.172]:50807: 535 Incorrect authentication data (set_id........
------------------------------

(From animatedvideos33@gmail.com) Hi, I just came across your website and wanted to get in touch. 
 
I run an animation studio that makes animated explainer videos helping companies to explain what they do, why it matters and how they're unique in less than 2 minutes. 
 
You can take a look at some of our work here: 
http://bit.ly/306e3Yp  - do you like it? 
 
I would be very interested in creating a great animated video for your company. 
 
We have a smooth production process and handle everything needed for a high-quality video that typically takes us 6 weeks to produce from start to finish. 
 
First, we nail the script, design storyboards you can’t wait to see animated. Voice actors in your native language that capture your brand and animation that screams premium with sound design that brings it all together. 
 
Our videos are made from scratch and designed to make you stand out and get results. No templates, no cookie cutter animation that tarnishes your brand. 
 
If you’re interested in l

Jul  3 01:34:59 dedicated sshd[4718]: Invalid user user4 from 59.57.34.58 port 40450

DATE:2019-07-03_01:14:44, IP:121.150.84.210, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)

Jul  3 01:35:48 dedicated sshd[4805]: Invalid user test_ftp from 68.183.148.78 port 53712

Jul  3 03:53:21 debian64 sshd\[25243\]: Invalid user iview from 212.156.210.223 port 58334
Jul  3 03:53:21 debian64 sshd\[25243\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.156.210.223
Jul  3 03:53:23 debian64 sshd\[25243\]: Failed password for invalid user iview from 212.156.210.223 port 58334 ssh2
...

Jul  3 01:14:39 rpi sshd[17347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.7.129.60 
Jul  3 01:14:41 rpi sshd[17347]: Failed password for invalid user node from 189.7.129.60 port 59641 ssh2

Lines containing failures of 106.75.60.142
Jul  2 21:55:55 siirappi sshd[27528]: Did not receive identification string from 106.75.60.142 port 35322
Jul  2 21:57:57 siirappi sshd[27553]: Invalid user storm from 106.75.60.142 port 49690
Jul  2 21:57:57 siirappi sshd[27553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.60.142
Jul  2 21:57:59 siirappi sshd[27553]: Failed password for invalid user storm from 106.75.60.142 port 49690 ssh2
Jul  2 21:58:09 siirappi sshd[27553]: Received disconnect from 106.75.60.142 port 49690:11: Normal Shutdown, Thank you for playing [preauth]
Jul  2 21:58:09 siirappi sshd[27553]: Disconnected from 106.75.60.142 port 49690 [preauth]
Jul  2 22:00:11 siirappi sshd[27640]: Invalid user storm from 106.75.60.142 port 48582
Jul  2 22:00:11 siirappi sshd[27640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.60.142


........
-----------------------------------------------
https://www.blockl

Port scan on 2 port(s): 139 445

Jul  3 01:44:32 mail sshd\[18485\]: Failed password for invalid user debian from 134.209.20.68 port 41064 ssh2
Jul  3 02:00:45 mail sshd\[18820\]: Invalid user jiu from 134.209.20.68 port 44554
...

proto=tcp  .  spt=58899  .  dpt=25  .     (listed on Blocklist de  Jul 02)     (40)

proto=tcp  .  spt=50184  .  dpt=25  .     (listed on Blocklist de  Jul 02)     (32)

Automatic report - CMS Brute-Force Attack

CloudCIX Reconnaissance Scan Detected, PTR: 70-33-31-64.static.reverse.lstn.net.