2020-10-11T17:52:55.133018Z bf6360505b44 New connection: 14.21.7.162:35550 (172.17.0.5:2222) [session: bf6360505b44]
2020-10-11T17:58:53.325513Z af4d0b919325 New connection: 14.21.7.162:35551 (172.17.0.5:2222) [session: af4d0b919325]

Invalid user teste from 14.21.7.162 port 58335

2020-09-25T15:51:49.637104afi-git.jinr.ru sshd[1302]: Invalid user postgres from 14.21.7.162 port 55356
2020-09-25T15:51:49.640354afi-git.jinr.ru sshd[1302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162
2020-09-25T15:51:49.637104afi-git.jinr.ru sshd[1302]: Invalid user postgres from 14.21.7.162 port 55356
2020-09-25T15:51:51.710323afi-git.jinr.ru sshd[1302]: Failed password for invalid user postgres from 14.21.7.162 port 55356 ssh2
2020-09-25T15:56:22.480643afi-git.jinr.ru sshd[2629]: Invalid user cliente from 14.21.7.162 port 55357
...

2020-09-25T15:51:49.637104afi-git.jinr.ru sshd[1302]: Invalid user postgres from 14.21.7.162 port 55356
2020-09-25T15:51:49.640354afi-git.jinr.ru sshd[1302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162
2020-09-25T15:51:49.637104afi-git.jinr.ru sshd[1302]: Invalid user postgres from 14.21.7.162 port 55356
2020-09-25T15:51:51.710323afi-git.jinr.ru sshd[1302]: Failed password for invalid user postgres from 14.21.7.162 port 55356 ssh2
2020-09-25T15:56:22.480643afi-git.jinr.ru sshd[2629]: Invalid user cliente from 14.21.7.162 port 55357
...

Invalid user usuario from 14.21.7.162 port 29817

Sep 11 11:16:34 ns382633 sshd\[31617\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162  user=root
Sep 11 11:16:36 ns382633 sshd\[31617\]: Failed password for root from 14.21.7.162 port 26341 ssh2
Sep 11 11:17:22 ns382633 sshd\[31682\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162  user=root
Sep 11 11:17:24 ns382633 sshd\[31682\]: Failed password for root from 14.21.7.162 port 26343 ssh2
Sep 11 11:17:45 ns382633 sshd\[31706\]: Invalid user cn from 14.21.7.162 port 26344
Sep 11 11:17:45 ns382633 sshd\[31706\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162

(sshd) Failed SSH login from 14.21.7.162 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 11 00:40:06 server sshd[29824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162  user=root
Sep 11 00:40:09 server sshd[29824]: Failed password for root from 14.21.7.162 port 61485 ssh2
Sep 11 00:50:15 server sshd[31459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162  user=root
Sep 11 00:50:17 server sshd[31459]: Failed password for root from 14.21.7.162 port 61488 ssh2
Sep 11 00:51:27 server sshd[31608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162  user=root

(sshd) Failed SSH login from 14.21.7.162 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 11 00:40:06 server sshd[29824]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162  user=root
Sep 11 00:40:09 server sshd[29824]: Failed password for root from 14.21.7.162 port 61485 ssh2
Sep 11 00:50:15 server sshd[31459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162  user=root
Sep 11 00:50:17 server sshd[31459]: Failed password for root from 14.21.7.162 port 61488 ssh2
Sep 11 00:51:27 server sshd[31608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162  user=root

2020-08-20T22:11:33.846549shield sshd\[11598\]: Invalid user deployer from 14.21.7.162 port 39026
2020-08-20T22:11:33.854577shield sshd\[11598\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162
2020-08-20T22:11:35.007426shield sshd\[11598\]: Failed password for invalid user deployer from 14.21.7.162 port 39026 ssh2
2020-08-20T22:12:38.904760shield sshd\[11769\]: Invalid user admin from 14.21.7.162 port 39027
2020-08-20T22:12:38.913720shield sshd\[11769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162

Aug 12 23:54:42 Host-KEWR-E sshd[29377]: User root from 14.21.7.162 not allowed because not listed in AllowUsers
...

Aug  6 00:03:43 lnxweb61 sshd[7599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162

Jul  8 00:07:09 master sshd[8714]: Failed password for invalid user bridgette from 14.21.7.162 port 21974 ssh2
Jul  8 00:18:07 master sshd[8907]: Failed password for invalid user warserver1 from 14.21.7.162 port 21975 ssh2
Jul  8 00:19:22 master sshd[8921]: Failed password for invalid user yonkey from 14.21.7.162 port 21976 ssh2
Jul  8 00:20:36 master sshd[8993]: Failed password for invalid user biagio from 14.21.7.162 port 21977 ssh2

Failed password for invalid user monitor from 14.21.7.162 port 41809 ssh2

$f2bV_matches | Triggered by Fail2Ban at Vostok web server

Jun  5 12:43:05 auw2 sshd\[23711\]: Invalid user Geos\\r from 14.21.7.162
Jun  5 12:43:05 auw2 sshd\[23711\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162
Jun  5 12:43:06 auw2 sshd\[23711\]: Failed password for invalid user Geos\\r from 14.21.7.162 port 29766 ssh2
Jun  5 12:51:12 auw2 sshd\[24258\]: Invalid user weblogic\\r from 14.21.7.162
Jun  5 12:51:12 auw2 sshd\[24258\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.21.7.162

Apr 22 14:05:08 server postfix/smtpd[5531]: NOQUEUE: reject: RCPT from srv134.uk-marketing.com[94.176.189.134]: 554 5.7.1 Service unavailable; Client host [94.176.189.134] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=

Apr 22 12:04:58 scw-6657dc sshd[8147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.49.73.13
Apr 22 12:04:58 scw-6657dc sshd[8147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.49.73.13
Apr 22 12:05:00 scw-6657dc sshd[8147]: Failed password for invalid user lt from 198.49.73.13 port 60966 ssh2
...

Apr 22 04:59:18 mockhub sshd[9459]: Failed password for root from 150.109.147.145 port 49868 ssh2
Apr 22 05:04:59 mockhub sshd[9645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.147.145
...

Apr 22 17:04:44 gw1 sshd[29988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.52.3
Apr 22 17:04:46 gw1 sshd[29988]: Failed password for invalid user admin from 142.93.52.3 port 58626 ssh2
...

2020-04-22T05:16:04.248351hessvillage.com sshd\[27860\]: Invalid user test from 209.141.55.11
2020-04-22T05:16:04.249124hessvillage.com sshd\[27854\]: Invalid user devops from 209.141.55.11
2020-04-22T05:16:04.249477hessvillage.com sshd\[27861\]: Invalid user oracle from 209.141.55.11
2020-04-22T05:16:04.249478hessvillage.com sshd\[27855\]: Invalid user ec2-user from 209.141.55.11
2020-04-22T05:16:04.251424hessvillage.com sshd\[27858\]: Invalid user guest from 209.141.55.11
2020-04-22T05:16:04.258208hessvillage.com sshd\[27856\]: Invalid user ubuntu from 209.141.55.11
2020-04-22T05:16:04.262253hessvillage.com sshd\[27863\]: Invalid user user from 209.141.55.11
2020-04-22T05:16:04.272698hessvillage.com sshd\[27865\]: Invalid user java from 209.141.55.11
...

Sending SPAM email

Apr 22 09:27:03 dns1 sshd[6665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.58.4 
Apr 22 09:27:06 dns1 sshd[6665]: Failed password for invalid user admin from 106.12.58.4 port 45608 ssh2
Apr 22 09:30:41 dns1 sshd[7009]: Failed password for root from 106.12.58.4 port 53874 ssh2

Bad bot/spoofed identity

Port scan on 2 port(s): 8291 8728

Honeypot attack, port: 81, PTR: bzq-82-81-2-50.red.bezeqint.net.

Lines containing failures of 59.41.119.65
Apr 22 09:12:26 nextcloud sshd[10898]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.41.119.65  user=r.r
Apr 22 09:12:28 nextcloud sshd[10898]: Failed password for r.r from 59.41.119.65 port 61012 ssh2
Apr 22 09:12:29 nextcloud sshd[10898]: Received disconnect from 59.41.119.65 port 61012:11: Bye Bye [preauth]
Apr 22 09:12:29 nextcloud sshd[10898]: Disconnected from authenticating user r.r 59.41.119.65 port 61012 [preauth]
Apr 22 09:24:13 nextcloud sshd[12627]: Invalid user test from 59.41.119.65 port 60166
Apr 22 09:24:13 nextcloud sshd[12627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.41.119.65
Apr 22 09:24:16 nextcloud sshd[12627]: Failed password for invalid user test from 59.41.119.65 port 60166 ssh2
Apr 22 09:24:16 nextcloud sshd[12627]: Received disconnect from 59.41.119.65 port 60166:11: Bye Bye [preauth]
Apr 22 09:24:16 nextclou........
------------------------------

Apr 22 08:05:14 plusreed sshd[8364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.113  user=root
Apr 22 08:05:16 plusreed sshd[8364]: Failed password for root from 49.88.112.113 port 58210 ssh2
...

(From eric@talkwithwebvisitor.com) Hey there, I just found your site, quick question…

My name’s Eric, I found millenniumchiro.com after doing a quick search – you showed up near the top of the rankings, so whatever you’re doing for SEO, looks like it’s working well.

So here’s my question – what happens AFTER someone lands on your site?  Anything?

Research tells us at least 70% of the people who find your site, after a quick once-over, they disappear… forever.

That means that all the work and effort you put into getting them to show up, goes down the tubes.

Why would you want all that good work – and the great site you’ve built – go to waste?

Because the odds are they’ll just skip over calling or even grabbing their phone, leaving you high and dry.

But here’s a thought… what if you could make it super-simple for someone to raise their hand, say, “okay, let’s talk” without requiring them to even pull their cell phone from their pocket?
  
You can – thanks to revolutionary new software tha

Apr 22 13:59:26 minden010 sshd[25821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.70.118
Apr 22 13:59:28 minden010 sshd[25821]: Failed password for invalid user ubuntu from 106.12.70.118 port 38988 ssh2
Apr 22 14:04:55 minden010 sshd[26798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.70.118
...

Automatic report - Banned IP Access