| 37.59.66.250 |
attackspam |
37.59.66.250 - - [08/Jul/2019:02:08:20 +0200] "GET /wp-login.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
37.59.66.250 - - [08/Jul/2019:02:08:20 +0200] "GET /wp-login.php HTTP/1.1" 404 93 "http://netpixeldesign.net/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
... |
2019-07-08 08:55:17 |
| 165.22.251.129 |
attackbotsspam |
Jul 8 01:50:20 debian sshd\[25032\]: Invalid user fachbereich from 165.22.251.129 port 40868
Jul 8 01:50:20 debian sshd\[25032\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.251.129
... |
2019-07-08 08:53:20 |
| 87.120.36.238 |
attackbotsspam |
Jul 8 02:27:03 mail postfix/smtpd\[27498\]: warning: guard.webcare360.net\[87.120.36.238\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 8 02:27:08 mail postfix/smtpd\[27545\]: warning: guard.webcare360.net\[87.120.36.238\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 8 02:32:22 mail postfix/smtpd\[30554\]: warning: guard.webcare360.net\[87.120.36.238\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2019-07-08 08:38:43 |
| 188.165.0.128 |
attackbots |
ENG,WP GET /wp-login.php |
2019-07-08 08:26:20 |
| 80.211.133.238 |
attack |
Tried sshing with brute force. |
2019-07-08 08:29:36 |
| 34.210.122.70 |
attack |
TCP Port: 25 _ invalid blocked dnsbl-sorbs spam-sorbs _ _ _ _ (9) |
2019-07-08 08:14:50 |
| 190.96.23.236 |
attackbotsspam |
Jul 8 01:09:55 dedicated sshd[10080]: Invalid user testftp from 190.96.23.236 port 4286
Jul 8 01:09:55 dedicated sshd[10080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.96.23.236
Jul 8 01:09:55 dedicated sshd[10080]: Invalid user testftp from 190.96.23.236 port 4286
Jul 8 01:09:58 dedicated sshd[10080]: Failed password for invalid user testftp from 190.96.23.236 port 4286 ssh2
Jul 8 01:12:34 dedicated sshd[10295]: Invalid user woju from 190.96.23.236 port 39227 |
2019-07-08 08:25:08 |
| 144.76.18.217 |
attack |
(From hayden.laroche@hotmail.com) Hello
YOU WANT LIVE BUT EXPIRED DOMAINS That Are Still Posted On Wikipedia And Youtube ?
Can you imagine how powerful it is to be able to pick up an expired domain that is still posted below a YouTube video that is getting hundreds or even thousands of views per day?
Or be able to pick up an expired domain that still has a live link from Wikipedia?
MyTrafficJacker allows users to search by keyword on either Wikipedia and YouTube and
find live but expired links that are still posted on these sites that you can pick up for as little as $10 and
redirect that traffic and authority anywhere they’d like.
NOW GET TRAFFIC and SALES in as little as 24 hours: without having to make or rank any videos,
without having to create a website, without having to pay a dime for traffic...
IF YOU ARE INTERESTED, CONTACT US ==> sayedasaliha748@gmail.com
Once you Join TODAY, You'll Also GET AMAZING BONUSES
Regards,
TrafficJacker |
2019-07-08 08:43:19 |
| 102.165.35.243 |
attackspam |
Jul 4 07:28:08 srv00 sshd[12045]: fatal: Unable to negotiate whostnameh 102.165.35.243 port 3842: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Jul 4 07:28:11 srv00 sshd[12047]: fatal: Unable to negotiate whostnameh 102.165.35.243 port 4000: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Jul 4 07:28:14 srv00 sshd[12049]: fatal: Unable to negotiate whostnameh 102.165.35.243 port 4167: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Jul 4 07:28:17 srv00 sshd[12051]: fatal: Unable to negotiate whostnameh 102.165.35.243 port 4339: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-gro........
------------------------------ |
2019-07-08 08:26:48 |
| 191.243.199.42 |
attackspam |
Jul 3 04:22:52 ghostname-secure sshd[2574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.243.199.42 user=r.r
Jul 3 04:22:54 ghostname-secure sshd[2574]: Failed password for r.r from 191.243.199.42 port 55598 ssh2
Jul 3 04:22:57 ghostname-secure sshd[2574]: Failed password for r.r from 191.243.199.42 port 55598 ssh2
Jul 3 04:23:01 ghostname-secure sshd[2574]: Failed password for r.r from 191.243.199.42 port 55598 ssh2
Jul 3 04:23:04 ghostname-secure sshd[2574]: Failed password for r.r from 191.243.199.42 port 55598 ssh2
Jul 3 04:23:07 ghostname-secure sshd[2574]: Failed password for r.r from 191.243.199.42 port 55598 ssh2
Jul 3 04:23:11 ghostname-secure sshd[2574]: Failed password for r.r from 191.243.199.42 port 55598 ssh2
Jul 3 04:23:11 ghostname-secure sshd[2574]: Disconnecting: Too many authentication failures for r.r from 191.243.199.42 port 55598 ssh2 [preauth]
Jul 3 04:23:11 ghostname-secure sshd[2574]: PAM ........
------------------------------- |
2019-07-08 08:38:03 |
| 131.72.147.233 |
attackspam |
SPF Fail sender not permitted to send mail for @mgsionline.com |
2019-07-08 08:54:50 |
| 223.255.10.6 |
attackbots |
Jul 7 18:11:38 mailman sshd[23042]: Invalid user pi from 223.255.10.6
Jul 7 18:11:39 mailman sshd[23044]: Invalid user pi from 223.255.10.6
Jul 7 18:11:39 mailman sshd[23042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.255.10.6 |
2019-07-08 08:48:46 |
| 5.62.19.38 |
attack |
\[2019-07-08 02:08:14\] NOTICE\[9010\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '5.62.19.38:2767' \(callid: 343400005-956404847-1620976198\) - Failed to authenticate
\[2019-07-08 02:08:14\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-08T02:08:14.417+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="343400005-956404847-1620976198",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/5.62.19.38/2767",Challenge="1562544494/54ce85a6321bf25484ae320a87711d21",Response="20936bbaca899497878f56a605b5b085",ExpectedResponse=""
\[2019-07-08 02:08:14\] NOTICE\[11540\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '5.62.19.38:2767' \(callid: 343400005-956404847-1620976198\) - Failed to authenticate
\[2019-07-08 02:08:14\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",Event |
2019-07-08 08:39:41 |
| 112.135.99.239 |
attack |
WordPress XMLRPC scan :: 112.135.99.239 0.168 BYPASS [08/Jul/2019:09:12:48 1000] [censored_1] "GET /xmlrpc.php HTTP/1.1" 405 53 "-" "Mozilla/5.0 (X11; Linux i686; rv:2.0.1) Gecko/20100101 Firefox/4.0.1" |
2019-07-08 08:21:28 |
| 36.90.253.106 |
attackspambots |
(From hayden.laroche@hotmail.com) Hello
YOU WANT LIVE BUT EXPIRED DOMAINS That Are Still Posted On Wikipedia And Youtube ?
Can you imagine how powerful it is to be able to pick up an expired domain that is still posted below a YouTube video that is getting hundreds or even thousands of views per day?
Or be able to pick up an expired domain that still has a live link from Wikipedia?
MyTrafficJacker allows users to search by keyword on either Wikipedia and YouTube and
find live but expired links that are still posted on these sites that you can pick up for as little as $10 and
redirect that traffic and authority anywhere they’d like.
NOW GET TRAFFIC and SALES in as little as 24 hours: without having to make or rank any videos,
without having to create a website, without having to pay a dime for traffic...
IF YOU ARE INTERESTED, CONTACT US ==> sayedasaliha748@gmail.com
Once you Join TODAY, You'll Also GET AMAZING BONUSES
Regards,
TrafficJacker |
2019-07-08 08:39:59 |