SSH login attempts with user root.

SSH login attempts with user root.

(From reed.christian@gmail.com) Hi,

“According to Gartner’s recent research, data decays on an average of 7 to 9% every month because of various reasons.”

Do you have a large database of contacts/companies in-house? If yes, is it up-to-date? 

We can cleanse, validate and enrich your in-house database with relevant fields that can get you connected with the most premium target profiles of your choice.

Please let me know of a convenient time for a quick call to discuss this further. Also, feel free to seek any specific clarifications or assistance that we can help you with. 

Thank you for your time, wishing you a great day ahead. 

Best Regards,
Diana Baker
Marketing Data Specialist
Just Validate- https://bit.ly/www-justvalidate-com
Email: diana.baker@justvalidate.com

(From jennifer.graff@gmail.com) Hi,

“According to Gartner’s recent research, data decays on an average of 7 to 9% every month because of various reasons.”

Do you have a large database of contacts/companies in-house? If yes, is it up-to-date? 

We can cleanse, validate and enrich your in-house database with relevant fields that can get you connected with the most premium target profiles of your choice.

Please let me know of a convenient time for a quick call to discuss this further. Also, feel free to seek any specific clarifications or assistance that we can help you with. 

Thank you for your time, wishing you a great day ahead. 

Best Regards,
Diana Baker
Marketing Data Specialist
Just Validate- https://bit.ly/www-justvalidate-com
Email: diana.baker@justvalidate.com

Malicious Traffic/Form Submission

(From granier.rodrigo@gmail.com) Unique gift ideas for men check out: https://bit.ly/photogeographics
use discount code MC20 for a 20% discount at checkout.

(From milan.sunderland@outlook.com) ABOLISH REACTIVE DEPRESSION AND EMERGE FROM ITS DEEP, DARK, BLACK HOLE?
• Do you feel this came from the beginnings of a dysfunctional family system?
• Or did this come from the loss of a beloved job or loved one?
• Or did this come from dire effects from the disease of Alcoholism?
• Or did this come from the brainwashing attempts of a fearful and angry world, i.e. terroristic recruitment?
Do you know that whatever caused this DEEP, DARK, BLACK HOLE OF DEPRESSION which may have come from a NERVOUS BREAKDOWN can cease its influence over your life? Yes, you do not have to live buried in negative thinking from the defeat from negative life experiences in your life. Please know that any tragic experiences from childhood to adulthood need no longer affect your chance to gain emotional wellbeing.
Instead, now you have the opportunity to be HAPPY and in PEACEFUL CONTROL OF YOUR OWN DESTINY with only the memory of what once ailed you. Now is the time to overcome depression an

0,81-02/02 [bc01/m60] PostRequest-Spammer scoring: madrid

(From jiron.madison@gmail.com) Zero cost advertising for your website here: https://bit.ly/freeadsubmission

(From minter.fausto@gmail.com) In the past 15 years we have built over 400 websites and generated over 500,000 leads for our clients.

 

We are a US company – with tons of references, testimonials and happy clients – and we want to be your go to marketing agency!

 

So, here is our offer 15% off any of our services PLUS a FREE review of your:

 

-Website (speed, SEO, look and feel, mobile compliance – everything)

-Social media pages

-Directory listings (are you showing up on google?  What about Alexa and Siri?)

-Landing pages

-Email newsletters

-Even your promotional products and printed materials…!

 

The goal here is to make sure your brand is consistent – and your business grows!

We are offering a 15% off voucher for your business


Email me back with your contact information and website link at  DebbieSilver2112@gmail.com

 

You will not be sorry!

 

Regards,

 

 

Debbie Silver

Branding & Marketing Specialist

Hacked facebook account

Automatic report - Banned IP Access

(From irene.armour@gmail.com) Hey there,
Would you like to reach new clients? 

We are personally welcoming you to join one of the leading influencer and affiliate networks online. 
This network sources influencers and affiliates in your niche who will promote your company on their websites and social media channels. 
Advantages of our program include: brand exposure for your product or service, increased trustworthiness, and possibly more clients. 

It is the safest, most convenient and most reliable way to increase your sales! 

What do you think?

Visit: http://bit.ly/socialinfluencernetwork

Dovecot Invalid User Login Attempt.

Oct 13 02:11:40 serwer sshd\[5172\]: Invalid user jacob from 122.51.151.194 port 34376
Oct 13 02:11:40 serwer sshd\[5172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.151.194
Oct 13 02:11:42 serwer sshd\[5172\]: Failed password for invalid user jacob from 122.51.151.194 port 34376 ssh2
...

Oct 13 16:35:52 DAAP sshd[4594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.81.158
Oct 13 16:35:52 DAAP sshd[4594]: Invalid user noel from 104.248.81.158 port 42650
Oct 13 16:35:54 DAAP sshd[4594]: Failed password for invalid user noel from 104.248.81.158 port 42650 ssh2
Oct 13 16:39:23 DAAP sshd[4662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.81.158  user=root
Oct 13 16:39:25 DAAP sshd[4662]: Failed password for root from 104.248.81.158 port 47340 ssh2
Oct 13 16:42:51 DAAP sshd[4699]: Invalid user lixia from 104.248.81.158 port 52028
...

2020-10-13T18:27:44.859045vps-d63064a2 sshd[110449]: User root from 113.118.185.180 not allowed because not listed in AllowUsers
2020-10-13T18:27:46.764540vps-d63064a2 sshd[110449]: Failed password for invalid user root from 113.118.185.180 port 63914 ssh2
2020-10-13T18:30:07.436205vps-d63064a2 sshd[110456]: User root from 113.118.185.180 not allowed because not listed in AllowUsers
2020-10-13T18:30:07.452292vps-d63064a2 sshd[110456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.118.185.180  user=root
2020-10-13T18:30:07.436205vps-d63064a2 sshd[110456]: User root from 113.118.185.180 not allowed because not listed in AllowUsers
2020-10-13T18:30:09.289494vps-d63064a2 sshd[110456]: Failed password for invalid user root from 113.118.185.180 port 61542 ssh2
...

Lines containing failures of 139.59.98.138 (max 1000)
Oct 12 20:00:49 UTC__SANYALnet-Labs__cac1 sshd[5496]: Connection from 139.59.98.138 port 55274 on 64.137.179.160 port 22
Oct 12 20:00:51 UTC__SANYALnet-Labs__cac1 sshd[5496]: User r.r from 139.59.98.138 not allowed because not listed in AllowUsers
Oct 12 20:00:51 UTC__SANYALnet-Labs__cac1 sshd[5496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.98.138  user=r.r
Oct 12 20:00:53 UTC__SANYALnet-Labs__cac1 sshd[5496]: Failed password for invalid user r.r from 139.59.98.138 port 55274 ssh2
Oct 12 20:00:53 UTC__SANYALnet-Labs__cac1 sshd[5496]: Received disconnect from 139.59.98.138 port 55274:11: Bye Bye [preauth]
Oct 12 20:00:53 UTC__SANYALnet-Labs__cac1 sshd[5496]: Disconnected from 139.59.98.138 port 55274 [preauth]
Oct 12 20:15:17 UTC__SANYALnet-Labs__cac1 sshd[6045]: Connection from 139.59.98.138 port 47234 on 64.137.179.160 port 22
Oct 12 20:15:18 UTC__SANYALnet-Labs__........
------------------------------

2020-10-13T22:19:38.494209vps773228.ovh.net sshd[7475]: Failed password for root from 112.85.42.231 port 32666 ssh2
2020-10-13T22:19:41.890467vps773228.ovh.net sshd[7475]: Failed password for root from 112.85.42.231 port 32666 ssh2
2020-10-13T22:19:45.170960vps773228.ovh.net sshd[7475]: Failed password for root from 112.85.42.231 port 32666 ssh2
2020-10-13T22:19:48.867198vps773228.ovh.net sshd[7475]: Failed password for root from 112.85.42.231 port 32666 ssh2
2020-10-13T22:19:52.107556vps773228.ovh.net sshd[7475]: Failed password for root from 112.85.42.231 port 32666 ssh2
...

DATE:2020-10-12 22:39:49, IP:61.54.189.57, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)

Oct 13 16:03:27 george sshd[9432]: Invalid user spy from 211.155.225.104 port 51453
Oct 13 16:03:27 george sshd[9432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.155.225.104 
Oct 13 16:03:30 george sshd[9432]: Failed password for invalid user spy from 211.155.225.104 port 51453 ssh2
Oct 13 16:08:19 george sshd[9463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.155.225.104  user=root
Oct 13 16:08:22 george sshd[9463]: Failed password for root from 211.155.225.104 port 53748 ssh2
...

Oct 12 22:35:07 PorscheCustomer sshd[9876]: Failed password for root from 47.88.228.246 port 47004 ssh2
Oct 12 22:39:01 PorscheCustomer sshd[10010]: Failed password for root from 47.88.228.246 port 52806 ssh2
...

Attempt to log in with non-existing username: admin

186.121.251.3 - - [13/Oct/2020:21:30:00 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
186.121.251.3 - - [13/Oct/2020:21:30:02 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
186.121.251.3 - - [13/Oct/2020:21:30:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

Oct 14 01:56:45 mx sshd[1426623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.254.54.96 
Oct 14 01:56:45 mx sshd[1426623]: Invalid user ken from 43.254.54.96 port 56159
Oct 14 01:56:47 mx sshd[1426623]: Failed password for invalid user ken from 43.254.54.96 port 56159 ssh2
Oct 14 01:59:19 mx sshd[1426659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.254.54.96  user=root
Oct 14 01:59:21 mx sshd[1426659]: Failed password for root from 43.254.54.96 port 44272 ssh2
...

Oct 12 02:16:02 *** sshd[12996]: Invalid user test from 12.229.215.19 port 59806
Oct 12 02:16:02 *** sshd[12996]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=12.229.215.19
Oct 12 02:16:04 *** sshd[12996]: Failed password for invalid user test from 12.229.215.19 port 59806 ssh2
Oct 12 02:16:05 *** sshd[12996]: Received disconnect from 12.229.215.19 port 59806:11: Bye Bye [preauth]
Oct 12 02:16:05 *** sshd[12996]: Disconnected from 12.229.215.19 port 59806 [preauth]
Oct 12 02:20:44 *** sshd[13057]: Invalid user joseluis from 12.229.215.19 port 59220
Oct 12 02:20:44 *** sshd[13057]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=12.229.215.19
Oct 12 02:20:46 *** sshd[13057]: Failed password for invalid user joseluis from 12.229.215.19 port 59220 ssh2
Oct 12 02:20:46 *** sshd[13057]: Received disconnect from 12.229.215.19 port 59220:11: Bye Bye [preauth]
Oct 12 02:20:46 *** sshd[13057]: Dis........
-------------------------------

Port Scan
...

Port Scan
...