bruteforce detected

SSH login attempts.

Sep  6 18:51:11 localhost sshd[49475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.60.168.180  user=root
Sep  6 18:51:13 localhost sshd[49475]: Failed password for root from 115.60.168.180 port 18317 ssh2
Sep  6 18:55:32 localhost sshd[49784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.60.168.180  user=root
Sep  6 18:55:34 localhost sshd[49784]: Failed password for root from 115.60.168.180 port 17661 ssh2
Sep  6 19:00:36 localhost sshd[50203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.60.168.180  user=root
Sep  6 19:00:38 localhost sshd[50203]: Failed password for root from 115.60.168.180 port 18845 ssh2
...

Honeypot attack, port: 445, PTR: PTR record not found

Honeypot attack, port: 445, PTR: 177-66-71-234.sapucainet.net.br.

(From eric@talkwithwebvisitor.com) Hey there, I just found your site, quick question…

My name’s Eric, I found ottochiropractic.net after doing a quick search – you showed up near the top of the rankings, so whatever you’re doing for SEO, looks like it’s working well.

So here’s my question – what happens AFTER someone lands on your site?  Anything?

Research tells us at least 70% of the people who find your site, after a quick once-over, they disappear… forever.

That means that all the work and effort you put into getting them to show up, goes down the tubes.

Why would you want all that good work – and the great site you’ve built – go to waste?

Because the odds are they’ll just skip over calling or even grabbing their phone, leaving you high and dry.

But here’s a thought… what if you could make it super-simple for someone to raise their hand, say, “okay, let’s talk” without requiring them to even pull their cell phone from their pocket?
  
You can – thanks to revolutionary new software th

(sshd) Failed SSH login from 82.62.153.15 (IT/Italy/host-82-62-153-15.business.telecomitalia.it): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  6 12:53:51 server sshd[10151]: Failed password for root from 82.62.153.15 port 55511 ssh2
Sep  6 13:01:21 server sshd[12539]: Failed password for root from 82.62.153.15 port 59619 ssh2
Sep  6 13:04:27 server sshd[13321]: Failed password for root from 82.62.153.15 port 52445 ssh2
Sep  6 13:07:40 server sshd[14346]: Failed password for root from 82.62.153.15 port 51134 ssh2
Sep  6 13:10:43 server sshd[15258]: Failed password for root from 82.62.153.15 port 55672 ssh2

Sep  6 23:45:05 rancher-0 sshd[1468335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.11.218  user=root
Sep  6 23:45:06 rancher-0 sshd[1468335]: Failed password for root from 132.232.11.218 port 53712 ssh2
...

 TCP (SYN) 68.183.107.155:44090 -> port 23, len 40

20 attempts against mh-ssh on echoip

Attempted connection to port 22.

Honeypot attack, port: 445, PTR: PTR record not found

Aug 31 16:20:07 nxxxxxxx sshd[13756]: refused connect from 49.69.205.106 (49=
.69.205.106)


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=49.69.205.106

1599411133 - 09/06/2020 18:52:13 Host: 43.251.97.99/43.251.97.99 Port: 445 TCP Blocked

Sep  6 20:26:08 firewall sshd[7525]: Failed password for root from 222.186.175.148 port 23062 ssh2
Sep  6 20:26:11 firewall sshd[7525]: Failed password for root from 222.186.175.148 port 23062 ssh2
Sep  6 20:26:15 firewall sshd[7525]: Failed password for root from 222.186.175.148 port 23062 ssh2
...