Honeypot attack, port: 23, PTR: PTR record not found

Brute force SMTP login attempts.

Oct  5 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 7 secs\): user=\, method=PLAIN, rip=123.232.125.198, lip=**REMOVED**, TLS, session=\
Oct  5 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=123.232.125.198, lip=**REMOVED**, TLS, session=\
Oct  5 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 7 secs\): user=\, method=PLAIN, rip=123.232.125.198, lip=**REMOVED**, TLS, session=\

Automatic report - Port Scan Attack

Oct  5 07:06:06 www5 sshd\[49111\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.6.72.17  user=root
Oct  5 07:06:08 www5 sshd\[49111\]: Failed password for root from 45.6.72.17 port 38530 ssh2
Oct  5 07:10:38 www5 sshd\[49914\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.6.72.17  user=root
...

Honeypot attack, port: 445, PTR: PTR record not found

Automatic report - Port Scan Attack

Oct  5 09:08:36 localhost sshd\[416\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.110.179.26  user=root
Oct  5 09:08:38 localhost sshd\[416\]: Failed password for root from 203.110.179.26 port 17629 ssh2
Oct  5 09:12:51 localhost sshd\[837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.110.179.26  user=root

Oct  5 00:16:34 xtremcommunity sshd\[193497\]: Invalid user 123China from 149.202.206.206 port 42088
Oct  5 00:16:35 xtremcommunity sshd\[193497\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.206.206
Oct  5 00:16:37 xtremcommunity sshd\[193497\]: Failed password for invalid user 123China from 149.202.206.206 port 42088 ssh2
Oct  5 00:20:08 xtremcommunity sshd\[193563\]: Invalid user p0o9i8u7 from 149.202.206.206 port 33976
Oct  5 00:20:08 xtremcommunity sshd\[193563\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.202.206.206
...

Oct  5 07:53:35 dev0-dcde-rnet sshd[13029]: Failed password for root from 104.236.63.99 port 51944 ssh2
Oct  5 07:57:04 dev0-dcde-rnet sshd[13056]: Failed password for root from 104.236.63.99 port 34852 ssh2

Oct  4 20:25:01 hpm sshd\[12221\]: Invalid user P@ss@2016 from 101.124.6.112
Oct  4 20:25:01 hpm sshd\[12221\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.124.6.112
Oct  4 20:25:04 hpm sshd\[12221\]: Failed password for invalid user P@ss@2016 from 101.124.6.112 port 37346 ssh2
Oct  4 20:29:09 hpm sshd\[12571\]: Invalid user Compiler_123 from 101.124.6.112
Oct  4 20:29:09 hpm sshd\[12571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.124.6.112

Oct  5 06:25:32 *** sshd[24777]: Invalid user wordpress from 206.189.167.53

[portscan] Port scan

(From gretchen.nichols779@gmail.com) Hello,

I'm quite certain you're aware that most successful businesses always have their website come up on the first page of Google search results since they're more relevant, popular, and more credible compared to the other companies found on page 2 or so on. Have you ever wondered how these websites dominated the first page? It's not at all difficult to achieve! We can put your site on the first page using search engine optimization.

I ran a few tests on your website and found out that there are many keywords you can potentially rank for. These are crucial for you to be easily found while people searching on Google input words relevant to your products or services. To give you an idea of my work, I will send you case studies of websites I've worked with before and how they gained more profit after the optimization.

I'll also give you a free consultation over the phone, and the information about your website can benefit you whether or not you choose to avail of m

failed_logins