$f2bV_matches

suspicious action Wed, 26 Feb 2020 10:37:30 -0300

2020-02-26T16:19:57.727636  sshd[480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.148  user=root
2020-02-26T16:19:59.342023  sshd[480]: Failed password for root from 222.186.175.148 port 41108 ssh2
2020-02-26T16:20:03.680989  sshd[480]: Failed password for root from 222.186.175.148 port 41108 ssh2
2020-02-26T16:19:57.727636  sshd[480]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.148  user=root
2020-02-26T16:19:59.342023  sshd[480]: Failed password for root from 222.186.175.148 port 41108 ssh2
2020-02-26T16:20:03.680989  sshd[480]: Failed password for root from 222.186.175.148 port 41108 ssh2
...

Feb 26 05:29:25 hanapaa sshd\[28468\]: Invalid user chenyang from 23.225.151.187
Feb 26 05:29:25 hanapaa sshd\[28468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.225.151.187
Feb 26 05:29:27 hanapaa sshd\[28468\]: Failed password for invalid user chenyang from 23.225.151.187 port 48092 ssh2
Feb 26 05:35:14 hanapaa sshd\[28942\]: Invalid user xor from 23.225.151.187
Feb 26 05:35:14 hanapaa sshd\[28942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.225.151.187

2020-02-26T15:21:46.968670shield sshd\[28767\]: Invalid user hanshow from 212.232.25.224 port 44157
2020-02-26T15:21:46.976370shield sshd\[28767\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=11379-02.root.nessus.at
2020-02-26T15:21:49.226003shield sshd\[28767\]: Failed password for invalid user hanshow from 212.232.25.224 port 44157 ssh2
2020-02-26T15:30:40.420439shield sshd\[31279\]: Invalid user narciso from 212.232.25.224 port 39245
2020-02-26T15:30:40.426543shield sshd\[31279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=11379-02.root.nessus.at

suspicious action Wed, 26 Feb 2020 10:37:25 -0300

(sshd) Failed SSH login from 106.13.45.212 (CN/China/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Feb 26 14:50:06 ubnt-55d23 sshd[26810]: Invalid user lhb from 106.13.45.212 port 33452
Feb 26 14:50:08 ubnt-55d23 sshd[26810]: Failed password for invalid user lhb from 106.13.45.212 port 33452 ssh2

(From eric@talkwithwebvisitor.com) Cool website!

My name’s Eric, and I just found your site - drbrianferris.info - while surfing the net. You showed up at the top of the search results, so I checked you out. Looks like what you’re doing is pretty cool.
 
But if you don’t mind me asking – after someone like me stumbles across drbrianferris.info, what usually happens?

Is your site generating leads for your business? 
 
I’m guessing some, but I also bet you’d like more… studies show that 7 out 10 who land on a site wind up leaving without a trace.

Not good.

Here’s a thought – what if there was an easy way for every visitor to “raise their hand” to get a phone call from you INSTANTLY… the second they hit your site and said, “call me now.”

You can –
  
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It lets you know IMMEDIATELY – so that you can talk to that lead while they’re literally looking over you

Feb 26 17:06:46 server sshd\[14534\]: Invalid user piotr from 196.22.240.6
Feb 26 17:06:46 server sshd\[14534\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.22.240.6 
Feb 26 17:06:48 server sshd\[14534\]: Failed password for invalid user piotr from 196.22.240.6 port 33196 ssh2
Feb 26 17:30:15 server sshd\[18717\]: Invalid user oracle from 196.22.240.6
Feb 26 17:30:15 server sshd\[18717\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.22.240.6 
...

$f2bV_matches

1582724233 - 02/26/2020 14:37:13 Host: 180.253.62.48/180.253.62.48 Port: 445 TCP Blocked

Feb 26 12:13:30 firewall sshd[3589]: Failed password for root from 222.186.180.6 port 57410 ssh2
Feb 26 12:13:30 firewall sshd[3589]: error: maximum authentication attempts exceeded for root from 222.186.180.6 port 57410 ssh2 [preauth]
Feb 26 12:13:30 firewall sshd[3589]: Disconnecting: Too many authentication failures [preauth]
...

MYH,DEF GET /magmi/web/magmi.php

[2020-02-26 10:23:15] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.147.215.8:53348' - Wrong password
[2020-02-26 10:23:15] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-26T10:23:15.840-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="140",SessionID="0x7fd82c538db8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/53348",Challenge="2eb020bd",ReceivedChallenge="2eb020bd",ReceivedHash="5f33a07ea8a10b0975df5c9e0772308c"
[2020-02-26 10:23:39] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.147.215.8:50482' - Wrong password
[2020-02-26 10:23:39] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-26T10:23:39.147-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="2167",SessionID="0x7fd82c3c9898",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.8/5
...

$f2bV_matches