(pop3d) Failed POP3 login from 103.207.38.155 (VN/Vietnam/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 16 08:26:24 ir1 dovecot[566034]: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=103.207.38.155, lip=5.63.12.44, session=

SSH login attempts.

Port scan: Attack repeated for 24 hours

Apr 16 06:06:53 srv-ubuntu-dev3 sshd[93882]: Invalid user deploy from 36.108.170.241
Apr 16 06:06:53 srv-ubuntu-dev3 sshd[93882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.108.170.241
Apr 16 06:06:53 srv-ubuntu-dev3 sshd[93882]: Invalid user deploy from 36.108.170.241
Apr 16 06:06:55 srv-ubuntu-dev3 sshd[93882]: Failed password for invalid user deploy from 36.108.170.241 port 36282 ssh2
Apr 16 06:10:29 srv-ubuntu-dev3 sshd[94451]: Invalid user jira from 36.108.170.241
Apr 16 06:10:29 srv-ubuntu-dev3 sshd[94451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.108.170.241
Apr 16 06:10:29 srv-ubuntu-dev3 sshd[94451]: Invalid user jira from 36.108.170.241
Apr 16 06:10:31 srv-ubuntu-dev3 sshd[94451]: Failed password for invalid user jira from 36.108.170.241 port 33031 ssh2
Apr 16 06:14:07 srv-ubuntu-dev3 sshd[95063]: Invalid user user from 36.108.170.241
...

Invalid user koss from 2.119.3.137 port 39563

Apr 16 05:47:10 h1745522 sshd[29025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.132.73.14  user=root
Apr 16 05:47:12 h1745522 sshd[29025]: Failed password for root from 125.132.73.14 port 36760 ssh2
Apr 16 05:51:14 h1745522 sshd[29141]: Invalid user wp-user from 125.132.73.14 port 40249
Apr 16 05:51:14 h1745522 sshd[29141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.132.73.14
Apr 16 05:51:14 h1745522 sshd[29141]: Invalid user wp-user from 125.132.73.14 port 40249
Apr 16 05:51:16 h1745522 sshd[29141]: Failed password for invalid user wp-user from 125.132.73.14 port 40249 ssh2
Apr 16 05:53:42 h1745522 sshd[29226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.132.73.14  user=root
Apr 16 05:53:45 h1745522 sshd[29226]: Failed password for root from 125.132.73.14 port 32803 ssh2
Apr 16 05:56:11 h1745522 sshd[29326]: Invalid user admin from 125.132.
...

Apr 16 05:52:42 meumeu sshd[1873]: Failed password for nagios from 175.24.95.240 port 48406 ssh2
Apr 16 05:56:29 meumeu sshd[2427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.95.240 
Apr 16 05:56:31 meumeu sshd[2427]: Failed password for invalid user cturner from 175.24.95.240 port 48648 ssh2
...

(From eric@talkwithwebvisitor.com) Hi, my name is Eric and I’m betting you’d like your website grundychiropractic.com to generate more leads.

Here’s how:
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It signals you as soon as they say they’re interested – so that you can talk to that lead while they’re still there at grundychiropractic.com.

Talk With Web Visitor – CLICK HERE http://www.talkwithwebvisitor.com for a live demo now.

And now that you’ve got their phone number, our new SMS Text With Lead feature enables you to start a text (SMS) conversation – answer questions, provide more info, and close a deal that way.

If they don’t take you up on your offer then, just follow up with text messages for new offers, content links, even just “how you doing?” notes to build a relationship.

CLICK HERE http://www.talkwithwebvisitor.com to discover what Talk With Web Visitor can do for your business.

The dif

Apr 16 06:59:34 server2 sshd\[16711\]: User root from 222.186.15.158 not allowed because not listed in AllowUsers
Apr 16 06:59:35 server2 sshd\[16713\]: User root from 222.186.15.158 not allowed because not listed in AllowUsers
Apr 16 07:02:35 server2 sshd\[17039\]: User root from 222.186.15.158 not allowed because not listed in AllowUsers
Apr 16 07:02:41 server2 sshd\[17037\]: User root from 222.186.15.158 not allowed because not listed in AllowUsers
Apr 16 07:04:19 server2 sshd\[17101\]: User root from 222.186.15.158 not allowed because not listed in AllowUsers
Apr 16 07:04:19 server2 sshd\[17103\]: User root from 222.186.15.158 not allowed because not listed in AllowUsers

2020-04-16T04:08:27.900926shield sshd\[6056\]: Invalid user k from 60.199.131.62 port 35172
2020-04-16T04:08:27.904942shield sshd\[6056\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60-199-131-62.static.tfn.net.tw
2020-04-16T04:08:29.499279shield sshd\[6056\]: Failed password for invalid user k from 60.199.131.62 port 35172 ssh2
2020-04-16T04:12:44.746664shield sshd\[6733\]: Invalid user damian from 60.199.131.62 port 42888
2020-04-16T04:12:44.750632shield sshd\[6733\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60-199-131-62.static.tfn.net.tw

SSH brute force

SSH login attempts.

Unauthorized connection attempt detected from IP address 222.186.30.35 to port 22 [T]

Apr 15 23:55:55 mail sshd\[27776\]: Invalid user perstat from 115.148.235.31
...

SSH login attempts.