firewall-block, port(s): 23/tcp

UTC: 2019-10-21 port: 80/tcp

2019-10-21 22:50:32 H=(luceat.it) [46.47.255.194]:48822 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-10-21 22:50:32 H=(luceat.it) [46.47.255.194]:48822 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
2019-10-21 22:50:33 H=(luceat.it) [46.47.255.194]:48822 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/sbl/query/SBLCSS)
...

Invalid user uc from 106.12.58.4 port 51928

3389BruteforceFW21

Oct 22 09:17:32 localhost sshd\[34449\]: Invalid user admin from 157.245.73.144 port 54710
Oct 22 09:17:32 localhost sshd\[34449\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.73.144
Oct 22 09:17:34 localhost sshd\[34449\]: Failed password for invalid user admin from 157.245.73.144 port 54710 ssh2
Oct 22 09:21:20 localhost sshd\[34571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.73.144  user=root
Oct 22 09:21:22 localhost sshd\[34571\]: Failed password for root from 157.245.73.144 port 38130 ssh2
...

UTC: 2019-10-21 port: 23/tcp

UTC: 2019-10-21 port: 23/tcp

Oct 22 11:13:31 server sshd\[21454\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.161.107  user=root
Oct 22 11:13:32 server sshd\[21454\]: Failed password for root from 182.61.161.107 port 58604 ssh2
Oct 22 11:36:04 server sshd\[27226\]: Invalid user rodriguez from 182.61.161.107
Oct 22 11:36:04 server sshd\[27226\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.161.107 
Oct 22 11:36:06 server sshd\[27226\]: Failed password for invalid user rodriguez from 182.61.161.107 port 51786 ssh2
...

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/155.94.195.57/ 
 
 RU - 1H : (155)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : RU 
 NAME ASN : ASN8100 
 
 IP : 155.94.195.57 
 
 CIDR : 155.94.192.0/20 
 
 PREFIX COUNT : 593 
 
 UNIQUE IP COUNT : 472064 
 
 
 ATTACKS DETECTED ASN8100 :  
  1H - 1 
  3H - 2 
  6H - 2 
 12H - 2 
 24H - 3 
 
 DateTime : 2019-10-22 05:50:16 
 
 INFO : Web Crawlers ? Scan Detected and Blocked by ADMIN  - data recovery

Oct 21 23:17:32 server sshd\[11580\]: Failed password for invalid user www from 198.211.123.183 port 48748 ssh2
Oct 22 06:42:56 server sshd\[10121\]: Invalid user ubuntu from 198.211.123.183
Oct 22 06:42:56 server sshd\[10121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.123.183 
Oct 22 06:42:58 server sshd\[10121\]: Failed password for invalid user ubuntu from 198.211.123.183 port 51238 ssh2
Oct 22 12:41:00 server sshd\[14289\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.211.123.183  user=nagios
...

(From sales@chronicwatch.com)  Dear Health care provider
Medicare Care Management Program reimburses $46 per patient per month for non face-to-face care of 20 minutes by a MA. You can continue to see patients in the office face to face and get reimbursed for the same. This is just additional revenue for the practice to help patients better manage their chronic conditions. Medicare reimburses around $100 for some of your patients that qualify to be "sickest of the sick" when you provide additional non face-to-face care of 60 minutes.

Can we schedule a demo and small webinar to explain the Medicare CCM program and how we can help.

Thanks
ChronicWatch, Inc.

Oct2209:14:38server4pure-ftpd:\(\?@117.68.155.81\)[WARNING]Authenticationfailedforuser[viadifuga]Oct2209:14:44server4pure-ftpd:\(\?@117.68.155.81\)[WARNING]Authenticationfailedforuser[viadifuga]Oct2209:14:50server4pure-ftpd:\(\?@117.68.155.81\)[WARNING]Authenticationfailedforuser[viadifuga]Oct2209:14:57server4pure-ftpd:\(\?@117.68.155.81\)[WARNING]Authenticationfailedforuser[viadifuga]Oct2209:15:03server4pure-ftpd:\(\?@117.68.155.81\)[WARNING]Authenticationfailedforuser[viadifuga]Oct2209:15:08server4pure-ftpd:\(\?@117.68.155.81\)[WARNING]Authenticationfailedforuser[viadifuga]Oct2209:15:15server4pure-ftpd:\(\?@117.68.155.81\)[WARNING]Authenticationfailedforuser[viadifuga]Oct2209:15:19server4pure-ftpd:\(\?@117.68.155.81\)[WARNING]Authenticationfailedforuser[viadifuga]Oct2209:15:25server4pure-ftpd:\(\?@117.68.155.81\)[WARNING]Authenticationfailedforuser[viadifuga]Oct2209:15:29server4pure-ftpd:\(\?@117.68.155.81\)[WARNING]Authenticationfailedforuser[viadifuga]

Oct 22 06:57:07 OPSO sshd\[12059\]: Invalid user boc from 118.25.103.132 port 56774
Oct 22 06:57:07 OPSO sshd\[12059\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.103.132
Oct 22 06:57:09 OPSO sshd\[12059\]: Failed password for invalid user boc from 118.25.103.132 port 56774 ssh2
Oct 22 07:01:30 OPSO sshd\[13008\]: Invalid user legal2 from 118.25.103.132 port 34946
Oct 22 07:01:30 OPSO sshd\[13008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.103.132

Oct 22 11:38:20 server sshd\[27634\]: Invalid user ghosts from 196.200.181.2
Oct 22 11:38:20 server sshd\[27634\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.200.181.2 
Oct 22 11:38:22 server sshd\[27634\]: Failed password for invalid user ghosts from 196.200.181.2 port 42421 ssh2
Oct 22 11:43:33 server sshd\[28797\]: Invalid user ghosts from 196.200.181.2
Oct 22 11:43:33 server sshd\[28797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.200.181.2 
...