Unauthorized connection attempt detected from IP address 139.59.67.96 to port 2220 [J]

DATE:2020-02-02 16:07:42, IP:118.172.205.181, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc)

Jan 12 18:22:59 ms-srv sshd[7182]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.146.157.73  user=root
Jan 12 18:23:01 ms-srv sshd[7182]: Failed password for invalid user root from 194.146.157.73 port 50233 ssh2

DATE:2020-02-02 16:07:44, IP:119.93.132.243, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc)

Feb  2 16:05:25 firewall sshd[24025]: Invalid user passw0rd from 82.127.66.48
Feb  2 16:05:26 firewall sshd[24025]: Failed password for invalid user passw0rd from 82.127.66.48 port 50272 ssh2
Feb  2 16:08:19 firewall sshd[24173]: Invalid user tennis from 82.127.66.48
...

Unauthorized connection attempt detected from IP address 193.70.42.33 to port 2220 [J]

Aug  1 22:17:29 ms-srv sshd[17934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.15.36.201
Aug  1 22:17:31 ms-srv sshd[17934]: Failed password for invalid user jasper from 194.15.36.201 port 33678 ssh2

Feb  3 11:57:00 ms-srv sshd[16370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.140.146.74
Feb  3 11:57:02 ms-srv sshd[16370]: Failed password for invalid user web from 194.140.146.74 port 46124 ssh2

Jan  7 19:05:55 ms-srv sshd[57143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.147.35.111
Jan  7 19:05:57 ms-srv sshd[57143]: Failed password for invalid user tuscany from 194.147.35.111 port 49476 ssh2

Jan 27 08:53:09 ovpn sshd[12710]: Invalid user marc from 139.99.238.48
Jan 27 08:53:09 ovpn sshd[12710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.238.48
Jan 27 08:53:12 ovpn sshd[12710]: Failed password for invalid user marc from 139.99.238.48 port 53186 ssh2
Jan 27 08:53:12 ovpn sshd[12710]: Received disconnect from 139.99.238.48 port 53186:11: Bye Bye [preauth]
Jan 27 08:53:12 ovpn sshd[12710]: Disconnected from 139.99.238.48 port 53186 [preauth]
Jan 27 09:03:47 ovpn sshd[15245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.99.238.48  user=r.r
Jan 27 09:03:49 ovpn sshd[15245]: Failed password for r.r from 139.99.238.48 port 59842 ssh2
Jan 27 09:03:49 ovpn sshd[15245]: Received disconnect from 139.99.238.48 port 59842:11: Bye Bye [preauth]
Jan 27 09:03:49 ovpn sshd[15245]: Disconnected from 139.99.238.48 port 59842 [preauth]

........
-----------------------------------------------
https://www.blocklist.de/en

ssh intrusion attempt

(From eric@talkwithcustomer.com)  
Hey,

You have a website nervedoc.org, right?

Of course you do. I am looking at your website now.

It gets traffic every day – that you’re probably spending $2 / $4 / $10 or more a click to get.  Not including all of the work you put into creating social media, videos, blog posts, emails, and so on.

So you’re investing seriously in getting people to that site.

But how’s it working?  Great? Okay?  Not so much?

If that answer could be better, then it’s likely you’re putting a lot of time, effort, and money into an approach that’s not paying off like it should.

Now… imagine doubling your lead conversion in just minutes… In fact, I’ll go even better.
 
You could actually get up to 100X more conversions!

I’m not making this up.  As Chris Smith, best-selling author of The Conversion Code says: Speed is essential - there is a 100x decrease in Leads when a Lead is contacted within 14 minutes vs being contacted within 5 minutes.

He’s backed up by a study a

Oct 28 01:33:44 ms-srv sshd[7103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.93.117.211
Oct 28 01:33:46 ms-srv sshd[7103]: Failed password for invalid user admin2 from 193.93.117.211 port 52105 ssh2

2020-02-02 19:58:02 dovecot_login authenticator failed for \(User\) \[46.38.144.231\]: 535 Incorrect authentication data \(set_id=assets5@no-server.de\)
2020-02-02 19:58:08 dovecot_login authenticator failed for \(User\) \[46.38.144.231\]: 535 Incorrect authentication data \(set_id=assets5@no-server.de\)
2020-02-02 19:58:08 dovecot_login authenticator failed for \(User\) \[46.38.144.231\]: 535 Incorrect authentication data \(set_id=assets5@no-server.de\)
2020-02-02 19:58:15 dovecot_login authenticator failed for \(User\) \[46.38.144.231\]: 535 Incorrect authentication data \(set_id=conter@no-server.de\)
2020-02-02 19:58:26 dovecot_login authenticator failed for \(User\) \[46.38.144.231\]: 535 Incorrect authentication data \(set_id=conter@no-server.de\)
2020-02-02 19:58:26 dovecot_login authenticator failed for \(User\) \[46.38.144.231\]: 535 Incorrect authentication data \(set_id=conter@no-server.de\)
...

#7288 - [112.51.253.95] Closing connection (IP still banned)
#7288 - [112.51.253.95] Closing connection (IP still banned)
#7288 - [112.51.253.95] Closing connection (IP still banned)
#7288 - [112.51.253.95] Closing connection (IP still banned)

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=112.51.253.9