Nov  1 19:15:27 hpm sshd\[19623\]: Invalid user ltsp from 59.51.65.17
Nov  1 19:15:27 hpm sshd\[19623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.51.65.17
Nov  1 19:15:29 hpm sshd\[19623\]: Failed password for invalid user ltsp from 59.51.65.17 port 51290 ssh2
Nov  1 19:20:17 hpm sshd\[20003\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.51.65.17  user=mysql
Nov  1 19:20:19 hpm sshd\[20003\]: Failed password for mysql from 59.51.65.17 port 60906 ssh2

Nov  2 05:41:04 vps691689 sshd[6289]: Failed password for root from 119.18.192.98 port 6638 ssh2
Nov  2 05:46:43 vps691689 sshd[6379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.18.192.98
...

Nov  2 05:51:15 cavern sshd[2166]: Failed password for root from 42.159.89.4 port 44946 ssh2

2019-11-02T05:19:39.919851abusebot-8.cloudsearch.cf sshd\[5866\]: Invalid user test from 200.93.148.19 port 56254

Nov  2 09:37:40 areeb-Workstation sshd[1210]: Failed password for root from 178.128.55.52 port 39549 ssh2
Nov  2 09:44:25 areeb-Workstation sshd[2483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.55.52
...

$f2bV_matches

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/178.0.239.93/ 
 
 DE - 1H : (56)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : DE 
 NAME ASN : ASN3209 
 
 IP : 178.0.239.93 
 
 CIDR : 178.0.0.0/13 
 
 PREFIX COUNT : 165 
 
 UNIQUE IP COUNT : 8314624 
 
 
 ATTACKS DETECTED ASN3209 :  
  1H - 1 
  3H - 3 
  6H - 4 
 12H - 4 
 24H - 8 
 
 DateTime : 2019-11-02 04:54:02 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

Nov  2 04:53:37 cp sshd[22862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.153.75

Lines containing failures of 106.12.207.220 (max 1000)
Oct 31 21:42:12 mm sshd[5448]: Invalid user osboxes from 106.12.207.220=
 port 60812
Oct 31 21:42:12 mm sshd[5448]: pam_unix(sshd:auth): authentication fail=
ure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D106.12.207.=
220
Oct 31 21:42:14 mm sshd[5448]: Failed password for invalid user osboxes=
 from 106.12.207.220 port 60812 ssh2
Oct 31 21:42:14 mm sshd[5448]: Received disconnect from 106.12.207.220 =
port 60812:11: Bye Bye [preauth]
Oct 31 21:42:14 mm sshd[5448]: Disconnected from invalid user osboxes 1=
06.12.207.220 port 60812 [preauth]
Oct 31 21:55:19 mm sshd[5627]: Invalid user info from 106.12.207.220 po=
rt 51662
Oct 31 21:55:19 mm sshd[5627]: pam_unix(sshd:auth): authentication fail=
ure; logname=3D uid=3D0 euid=3D0 tty=3Dssh ruser=3D rhost=3D106.12.207.=
220
Oct 31 21:55:21 mm sshd[5627]: Failed password for invalid user info fr=
om 106.12.207.220 port 51662 ssh2
Oct 31 21:55:22 mm sshd[5627]: R........
------------------------------

Automatic report - Port Scan Attack

Nov  2 04:52:25 venus sshd\[8249\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.160.147  user=root
Nov  2 04:52:27 venus sshd\[8249\]: Failed password for root from 180.76.160.147 port 60574 ssh2
Nov  2 04:57:59 venus sshd\[8296\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.160.147  user=root
...

Nov  2 01:00:42 mecmail postfix/smtpd[6925]: NOQUEUE: reject: RCPT from unknown[193.32.160.147]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=<[193.32.160.153]>
Nov  2 01:00:42 mecmail postfix/smtpd[6925]: NOQUEUE: reject: RCPT from unknown[193.32.160.147]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=<[193.32.160.153]>
Nov  2 01:00:42 mecmail postfix/smtpd[6925]: NOQUEUE: reject: RCPT from unknown[193.32.160.147]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=<[193.32.160.153]>
Nov  2 01:00:42 mecmail postfix/smtpd[6925]: NOQUEUE: reject: RCPT from unknown[193.32.160.147]: 554 5.7.1 : Relay access denied; from=
...

(From eric@talkwithcustomer.com) Hello abcchiropractic.net,

People ask, “why does TalkWithCustomer work so well?”

It’s simple.

TalkWithCustomer enables you to connect with a prospective customer at EXACTLY the Perfect Time.

- NOT one week, two weeks, three weeks after they’ve checked out your website abcchiropractic.net.
- NOT with a form letter style email that looks like it was written by a bot.
- NOT with a robocall that could come at any time out of the blue.

TalkWithCustomer connects you to that person within seconds of THEM asking to hear from YOU.

They kick off the conversation.

They take that first step.

They ask to hear from you regarding what you have to offer and how it can make their life better. 

And it happens almost immediately. In real time. While they’re still looking over your website abcchiropractic.net, trying to make up their mind whether you are right for them.

When you connect with them at that very moment it’s the ultimate in Perfect Timing – as one famo

Tried sshing with brute force.

Nov  1 18:52:31 eddieflores sshd\[10455\]: Invalid user money from 62.234.140.216
Nov  1 18:52:31 eddieflores sshd\[10455\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.140.216
Nov  1 18:52:33 eddieflores sshd\[10455\]: Failed password for invalid user money from 62.234.140.216 port 58038 ssh2
Nov  1 18:57:55 eddieflores sshd\[10874\]: Invalid user user from 62.234.140.216
Nov  1 18:57:55 eddieflores sshd\[10874\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.140.216