Sep 27 23:13:13 *** sshd[12967]: Invalid user webuser from 106.12.47.216

Sep 27 17:19:18 dallas01 sshd[8617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.22.227
Sep 27 17:19:20 dallas01 sshd[8617]: Failed password for invalid user sumeet from 37.187.22.227 port 53686 ssh2
Sep 27 17:23:56 dallas01 sshd[9161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.22.227

Sep 27 23:34:55 vps647732 sshd[25202]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.56.44.252
Sep 27 23:34:57 vps647732 sshd[25202]: Failed password for invalid user ionut from 111.56.44.252 port 41080 ssh2
...

DATE:2019-09-27 22:58:58, IP:59.127.10.133, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc-bis)

Sep 27 13:39:20 web9 sshd\[18125\]: Invalid user ubuntu from 67.184.64.224
Sep 27 13:39:20 web9 sshd\[18125\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.184.64.224
Sep 27 13:39:22 web9 sshd\[18125\]: Failed password for invalid user ubuntu from 67.184.64.224 port 29469 ssh2
Sep 27 13:43:33 web9 sshd\[18927\]: Invalid user pi from 67.184.64.224
Sep 27 13:43:33 web9 sshd\[18927\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.184.64.224

Obvious phishing.

From: Jay Ket [mailto:admin@ketmonetaryfunding.com] 
Sent: Friday, September 27, 2019 01:55
Subject: Gift Order

Hello,
Trust you are well. I got your details through the internet while searching for gift items for a family event.
I will like to know if you sell Gift Baskets or gift boxes?
My brother's wedding is coming up towards the end of next month and I am planning a surprise wedding gift baskets or boxes for all the guests.
Kindly back if this is a service you offer so I can let you know my budget per gift basket. Also, what types of credit cards do you accept for payment? You can reply to my email below.
Best Regards,
Jay

Sep 27 23:46:36 SilenceServices sshd[29828]: Failed password for root from 54.38.192.96 port 54482 ssh2
Sep 27 23:50:22 SilenceServices sshd[32259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.192.96
Sep 27 23:50:24 SilenceServices sshd[32259]: Failed password for invalid user manorel from 54.38.192.96 port 38622 ssh2

2019-09-27T23:43:04.706130abusebot-2.cloudsearch.cf sshd\[30263\]: Invalid user monsegur from 69.3.118.101 port 20241

Sep 27 07:10:41 xb0 sshd[2675]: Failed password for invalid user sao from 60.224.23.207 port 51450 ssh2
Sep 27 07:10:41 xb0 sshd[2675]: Received disconnect from 60.224.23.207: 11: Bye Bye [preauth]
Sep 27 07:19:18 xb0 sshd[10594]: Failed password for invalid user unocasa from 60.224.23.207 port 33108 ssh2
Sep 27 07:19:18 xb0 sshd[10594]: Received disconnect from 60.224.23.207: 11: Bye Bye [preauth]
Sep 27 07:24:25 xb0 sshd[11508]: Failed password for invalid user user from 60.224.23.207 port 48376 ssh2
Sep 27 07:24:25 xb0 sshd[11508]: Received disconnect from 60.224.23.207: 11: Bye Bye [preauth]
Sep 27 07:29:15 xb0 sshd[9877]: Failed password for invalid user serverg from 60.224.23.207 port 36106 ssh2
Sep 27 07:29:16 xb0 sshd[9877]: Received disconnect from 60.224.23.207: 11: Bye Bye [preauth]
Sep 27 07:34:14 xb0 sshd[12367]: Failed password for invalid user stan2tsc from 60.224.23.207 port 52012 ssh2
Sep 27 07:34:14 xb0 sshd[12367]: Received disconnect from 60.224.23.2........
-------------------------------

Sep 28 01:34:16 vps01 sshd[15989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.5.35
Sep 28 01:34:18 vps01 sshd[15989]: Failed password for invalid user user from 106.12.5.35 port 33310 ssh2

2019-09-25 13:32:40 -> 2019-09-27 18:48:04 : 18 login attempts (218.92.0.210)

Automatic report - Banned IP Access

Obvious phishing.  Every question they ask is answered on our web site.  Language errors indicate a foreign sender.

From: Jay Ket [mailto:admin@ketmonetaryfunding.com] 
Sent: Friday, September 27, 2019 01:55
Subject: Gift Order

Hello,
Trust you are well. I got your details through the internet while searching for gift items for a family event.
I will like to know if you sell Gift Baskets or gift boxes?
My brother's wedding is coming up towards the end of next month and I am planning a surprise wedding gift baskets or boxes for all the guests.
Kindly back if this is a service you offer so I can let you know my budget per gift basket. Also, what types of credit cards do you accept for payment? You can reply to my email below.
Best Regards,
Jay

2019-09-27 16:07:46 H=(livingarts.it) [110.232.255.149]:53359 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4, 127.0.0.11) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-09-27 16:07:47 H=(livingarts.it) [110.232.255.149]:53359 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.11, 127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-09-27 16:07:48 H=(livingarts.it) [110.232.255.149]:53359 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.11, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
...

2019-09-27T21:40:40.969179abusebot-7.cloudsearch.cf sshd\[30889\]: Invalid user ahobala from 51.77.210.216 port 45914