Sep 26 02:58:53 ny01 sshd[17244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.74.137
Sep 26 02:58:55 ny01 sshd[17244]: Failed password for invalid user rkassim from 193.112.74.137 port 51313 ssh2
Sep 26 03:03:50 ny01 sshd[17992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.74.137

2019-09-26T11:55:06.273224lon01.zurich-datacenter.net sshd\[12424\]: Invalid user amy from 51.38.176.147 port 57923
2019-09-26T11:55:06.279336lon01.zurich-datacenter.net sshd\[12424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.ip-51-38-176.eu
2019-09-26T11:55:07.865246lon01.zurich-datacenter.net sshd\[12424\]: Failed password for invalid user amy from 51.38.176.147 port 57923 ssh2
2019-09-26T11:58:53.633346lon01.zurich-datacenter.net sshd\[12484\]: Invalid user betty from 51.38.176.147 port 49927
2019-09-26T11:58:53.642212lon01.zurich-datacenter.net sshd\[12484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.ip-51-38-176.eu
...

09/26/2019-13:44:23.749286 185.176.27.42 Protocol: 6 ET DROP Dshield Block Listed Source group 1

\[2019-09-26 07:11:22\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '77.247.110.203:64449' - Wrong password
\[2019-09-26 07:11:22\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-26T07:11:22.238-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4862",SessionID="0x7f1e1c162d78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.203/64449",Challenge="5d7401f3",ReceivedChallenge="5d7401f3",ReceivedHash="bbd3cd9edcd23934bc33bb46ef6c6815"
\[2019-09-26 07:11:58\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '77.247.110.203:53529' - Wrong password
\[2019-09-26 07:11:58\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-26T07:11:58.503-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="18",SessionID="0x7f1e1c0bf258",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.203/53529",

Sep 26 07:03:11 www2 sshd\[22250\]: Invalid user verwalter from 106.248.41.245Sep 26 07:03:13 www2 sshd\[22250\]: Failed password for invalid user verwalter from 106.248.41.245 port 34230 ssh2Sep 26 07:08:19 www2 sshd\[22808\]: Invalid user kym from 106.248.41.245
...

MultiHost/MultiPort Probe, Scan, Hack -

web-1 [ssh] SSH Attack

Unauthorised access (Sep 26) SRC=180.109.250.15 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=1837 TCP DPT=8080 WINDOW=18749 SYN 
Unauthorised access (Sep 26) SRC=180.109.250.15 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=44428 TCP DPT=8080 WINDOW=18749 SYN 
Unauthorised access (Sep 25) SRC=180.109.250.15 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=103 TCP DPT=8080 WINDOW=18749 SYN 
Unauthorised access (Sep 25) SRC=180.109.250.15 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=12243 TCP DPT=8080 WINDOW=18749 SYN 
Unauthorised access (Sep 24) SRC=180.109.250.15 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=44380 TCP DPT=8080 WINDOW=18749 SYN

162.158.106.201 - - [26/Sep/2019:10:41:17 +0700] "GET /js/pathConfig.js HTTP/1.1" 200 3348 "https://web.floware.ml/" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.96 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"

WordPress XMLRPC scan :: 194.93.39.244 0.324 BYPASS [26/Sep/2019:13:41:50  1000] www.[censored_1] "POST /xmlrpc.php HTTP/1.1" 200 382 "https://www.[censored_1]/" "PHP/7.2.96"

2019-09-26T18:06:43.623700enmeeting.mahidol.ac.th sshd\[15517\]: Invalid user vweru from 148.216.29.46 port 42228
2019-09-26T18:06:43.638603enmeeting.mahidol.ac.th sshd\[15517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.216.29.46
2019-09-26T18:06:45.123768enmeeting.mahidol.ac.th sshd\[15517\]: Failed password for invalid user vweru from 148.216.29.46 port 42228 ssh2
...

[Thu Sep 26 04:44:12.582337 2019] [cgid:error] [pid 54149:tid 139732667299584] [client 88.250.11.221:54490] AH01264: script not found or unable to stat: /usr/lib/cgi-bin/ViewLog.asp
[Thu Sep 26 04:44:14.795406 2019] [cgid:error] [pid 54149:tid 139732650514176] [client 88.250.11.221:54472] AH01264: script not found or unable to stat: /usr/lib/cgi-bin/ViewLog.asp

Sep 26 12:50:17 server sshd\[20920\]: Invalid user ro from 164.132.107.245 port 40308
Sep 26 12:50:17 server sshd\[20920\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.107.245
Sep 26 12:50:19 server sshd\[20920\]: Failed password for invalid user ro from 164.132.107.245 port 40308 ssh2
Sep 26 12:54:24 server sshd\[16856\]: Invalid user chase from 164.132.107.245 port 53702
Sep 26 12:54:24 server sshd\[16856\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.107.245

162.158.107.118 - - [26/Sep/2019:10:41:27 +0700] "GET /apple-touch-icon.png HTTP/1.1" 404 2828 "-" "Googlebot-Image/1.0"

(From darren@custompicsfromairplane.com) Hi

We have extended the below offer just 2 more days

Aerial Impressions will be photographing businesses and homes in Burlington and throughout a large part of the USA from Sept 28th.

Aerial photographs of Associates In Chiropractic would make a great addition to your advertising material and photos of your home will make a awesome wall hanging.

We shoot 30+ images from various aspects from an airplane (we do not use drones) and deliver digitally free from any copyright.

Only $249 per location.

For more info, schedule and bookings please visit www.custompicsfromairplane.com
or call 1877 533 9003


Regards
Aerial Impressions