Dec 10 12:30:16 ahost sshd[5079]: Invalid user gil from 182.61.5.188
Dec 10 12:30:16 ahost sshd[5079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.5.188 
Dec 10 12:30:18 ahost sshd[5079]: Failed password for invalid user gil from 182.61.5.188 port 49856 ssh2
Dec 10 12:30:18 ahost sshd[5079]: Received disconnect from 182.61.5.188: 11: Bye Bye [preauth]
Dec 10 12:43:00 ahost sshd[9693]: Invalid user build from 182.61.5.188
Dec 10 12:43:00 ahost sshd[9693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.5.188 
Dec 10 12:43:02 ahost sshd[9693]: Failed password for invalid user build from 182.61.5.188 port 40004 ssh2
Dec 10 12:43:02 ahost sshd[9693]: Received disconnect from 182.61.5.188: 11: Bye Bye [preauth]
Dec 10 12:49:53 ahost sshd[11422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.5.188  user=r.r
Dec 10 12:49:55 ahost ssh........
------------------------------

Dec 11 09:08:12 localhost sshd\[13397\]: Invalid user dz from 218.104.231.2 port 42672
Dec 11 09:08:12 localhost sshd\[13397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.104.231.2
Dec 11 09:08:14 localhost sshd\[13397\]: Failed password for invalid user dz from 218.104.231.2 port 42672 ssh2

2019-12-11T08:09:09.967510abusebot-6.cloudsearch.cf sshd\[3254\]: Invalid user apache from 111.231.239.143 port 57936

$f2bV_matches

Dec 11 13:31:23 areeb-Workstation sshd[32554]: Failed password for root from 190.186.170.83 port 50612 ssh2
Dec 11 13:39:13 areeb-Workstation sshd[3256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.186.170.83 
...

Cryptocurrency Fraud Spam

Return-Path: 
Received: from source:[109.169.0.103] helo:server36.festiveseasondeals.com
Subject:  Bitcoins are driving people out of 9-5 Jobs - Here's Why!
Message-ID: 
Date: Tue, 10 Dec 2019 14:51:53 +0000
From: "Charlotte Clark" 
Reply-To: admin@marketsconnects.com

Did you know that early investors and adopters of Bitcoins are comfortably living a remarkable life style with billions of dollars invested in the real estate markets? 25 % of the World's Population have already quit their 9-5 Jobs to build a fortune of their own using Bitcoins. In today's article we uncover the mystery about Bitcoins and how to profit from them using a simple formula for success. Watch a short presentation by accessing the links given below in your preferred language.

ENGLISH >> VISIT HERE
PORTUGAL >> VISIT HERE
ITALY >> VISIT HERE
FINLAND >> VISIT HERE
POLAND >> VISIT HERE
WEDEN >> VISIT HERE

Dec 11 10:30:52 sauna sshd[172443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.87.25.201
Dec 11 10:30:53 sauna sshd[172443]: Failed password for invalid user clywd from 103.87.25.201 port 57522 ssh2
...

Dec 11 11:38:58 debian-2gb-vpn-nbg1-1 kernel: [431921.053048] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=45.136.111.65 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54683 PROTO=TCP SPT=45713 DPT=64337 WINDOW=1024 RES=0x00 SYN URGP=0

Dec 11 08:56:17 vps691689 sshd[10320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.75.16.210
Dec 11 08:56:19 vps691689 sshd[10320]: Failed password for invalid user kcha21 from 200.75.16.210 port 54285 ssh2
...

Dec 11 05:27:18 firewall sshd[13204]: Failed password for root from 222.186.175.181 port 64566 ssh2
Dec 11 05:27:22 firewall sshd[13204]: Failed password for root from 222.186.175.181 port 64566 ssh2
Dec 11 05:27:25 firewall sshd[13204]: Failed password for root from 222.186.175.181 port 64566 ssh2
...

1194/udp 3389/tcp 1080/tcp...
[2019-10-15/12-11]39pkt,4pt.(tcp),1pt.(udp)

Lines containing failures of 101.110.47.172
Dec 10 15:38:09 nextcloud sshd[10365]: Invalid user hod from 101.110.47.172 port 45318
Dec 10 15:38:09 nextcloud sshd[10365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.110.47.172
Dec 10 15:38:11 nextcloud sshd[10365]: Failed password for invalid user hod from 101.110.47.172 port 45318 ssh2
Dec 10 15:38:11 nextcloud sshd[10365]: Received disconnect from 101.110.47.172 port 45318:11: Bye Bye [preauth]
Dec 10 15:38:11 nextcloud sshd[10365]: Disconnected from invalid user hod 101.110.47.172 port 45318 [preauth]
Dec 10 15:48:27 nextcloud sshd[12841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.110.47.172  user=r.r
Dec 10 15:48:29 nextcloud sshd[12841]: Failed password for r.r from 101.110.47.172 port 48726 ssh2
Dec 10 15:48:29 nextcloud sshd[12841]: Received disconnect from 101.110.47.172 port 48726:11: Bye Bye [preauth]
Dec 10 15:48:29........
------------------------------

Unauthorised access (Dec 11) SRC=172.126.155.149 LEN=40 TTL=241 ID=31647 DF TCP DPT=23 WINDOW=14600 SYN

SSH brute-force: detected 8 distinct usernames within a 24-hour window.

Dec 10 22:18:45 eddieflores sshd\[15113\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.38.221  user=root
Dec 10 22:18:47 eddieflores sshd\[15113\]: Failed password for root from 165.22.38.221 port 54008 ssh2
Dec 10 22:24:02 eddieflores sshd\[15609\]: Invalid user hero from 165.22.38.221
Dec 10 22:24:02 eddieflores sshd\[15609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.38.221
Dec 10 22:24:05 eddieflores sshd\[15609\]: Failed password for invalid user hero from 165.22.38.221 port 35664 ssh2