Mar 18 23:11:42 ns382633 sshd\[29142\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.1.213.19  user=root
Mar 18 23:11:43 ns382633 sshd\[29142\]: Failed password for root from 177.1.213.19 port 58737 ssh2
Mar 18 23:14:35 ns382633 sshd\[29372\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.1.213.19  user=root
Mar 18 23:14:37 ns382633 sshd\[29372\]: Failed password for root from 177.1.213.19 port 15034 ssh2
Mar 18 23:16:01 ns382633 sshd\[29980\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.1.213.19  user=root

1584569759 - 03/18/2020 23:15:59 Host: 183.97.137.215/183.97.137.215 Port: 23 TCP Blocked

2020-03-18 1jEYCP-0002Qr-Mf H=overload.wokoro.com \(overload.umeshkz.com\) \[217.112.142.42\] rejected **REMOVED** : REJECTED - You seem to be a spammer!
2020-03-18 H=overload.wokoro.com \(overload.umeshkz.com\) \[217.112.142.42\] F=\ rejected RCPT \<**REMOVED****REMOVED**last.fm@**REMOVED**.de\>: recipient blacklisted
2020-03-18 H=overload.wokoro.com \(overload.umeshkz.com\) \[217.112.142.42\] F=\ rejected RCPT \<**REMOVED****REMOVED**perl@**REMOVED**.de\>: recipient blacklisted

1584536647 - 03/18/2020 14:04:07 Host: 109.94.183.27/109.94.183.27 Port: 445 TCP Blocked

Mar 18 23:00:26 vps sshd[20472]: Failed password for root from 122.51.107.227 port 34570 ssh2
Mar 18 23:11:39 vps sshd[21423]: Failed password for root from 122.51.107.227 port 53808 ssh2
...

Unauthorized connection attempt from IP address 188.227.195.19 on Port 445(SMB)

(sshd) Failed SSH login from 111.229.220.40 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 18 23:15:56 ubnt-55d23 sshd[30966]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.220.40  user=root
Mar 18 23:15:58 ubnt-55d23 sshd[30966]: Failed password for root from 111.229.220.40 port 45766 ssh2

Mar 18 22:19:10 xeon sshd[21521]: Failed password for root from 181.30.28.219 port 41022 ssh2

none

Unauthorized connection attempt from IP address 187.114.212.197 on Port 445(SMB)

(From doreen.warby54@gmail.com) Good morning

My name is Sergey and I am a founder of Sweaty Quid Freelancer Marketplace just where you can purchase and sell all kinds of on-line solutions ranging from back links and guest post to explainer video clips, infographics and articles for your business website.

I believe that you and drroeder.com  can seriously benefit from Sweaty Quid, no matter if you would like to supply your services or employ the services of freelancers to assist you to expand your business.

I have been a freelancer on a number of marketplaces for over 5 years and have had my accounts randomly shut down, my revenues pocketed and I simply had a tough time with many poor quality freelancers. After much unnecessary aggravation, I made a decision to launch my very own freelance market place that would do things differently and much better.

After almost one year of caffeinne powered evenings, myself and my crew at Creative Bear Tech have developed Sweaty Quid from ground up. One month in

Mar 18 23:12:17 eventyay sshd[14029]: Failed password for root from 134.209.41.17 port 39734 ssh2
Mar 18 23:14:00 eventyay sshd[14071]: Failed password for root from 134.209.41.17 port 42886 ssh2
...

Mar 19 01:04:33 hosting sshd[31995]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.10.238  user=root
Mar 19 01:04:35 hosting sshd[31995]: Failed password for root from 118.25.10.238 port 43490 ssh2
Mar 19 01:10:05 hosting sshd[562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.10.238  user=root
Mar 19 01:10:07 hosting sshd[562]: Failed password for root from 118.25.10.238 port 50236 ssh2
Mar 19 01:15:41 hosting sshd[1237]: Invalid user unknown from 118.25.10.238 port 56992
...

Honeypot attack, port: 445, PTR: PTR record not found

18.03.2020 21:46:31 Connection to port 4022 blocked by firewall