May  3 05:44:54 Ubuntu-1404-trusty-64-minimal sshd\[25284\]: Invalid user cust from 5.196.70.107
May  3 05:44:54 Ubuntu-1404-trusty-64-minimal sshd\[25284\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.70.107
May  3 05:44:56 Ubuntu-1404-trusty-64-minimal sshd\[25284\]: Failed password for invalid user cust from 5.196.70.107 port 55044 ssh2
May  3 05:57:26 Ubuntu-1404-trusty-64-minimal sshd\[30306\]: Invalid user test1 from 5.196.70.107
May  3 05:57:26 Ubuntu-1404-trusty-64-minimal sshd\[30306\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.70.107

May  3 02:22:01 vpn01 sshd[15996]: Failed password for root from 218.92.0.158 port 30375 ssh2
May  3 02:22:14 vpn01 sshd[15996]: error: maximum authentication attempts exceeded for root from 218.92.0.158 port 30375 ssh2 [preauth]
...

fail2ban/May  3 01:43:41 h1962932 sshd[10074]: Invalid user helpdesk from 212.64.29.78 port 60384
May  3 01:43:41 h1962932 sshd[10074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.29.78
May  3 01:43:41 h1962932 sshd[10074]: Invalid user helpdesk from 212.64.29.78 port 60384
May  3 01:43:43 h1962932 sshd[10074]: Failed password for invalid user helpdesk from 212.64.29.78 port 60384 ssh2
May  3 01:48:09 h1962932 sshd[10217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.29.78  user=root
May  3 01:48:12 h1962932 sshd[10217]: Failed password for root from 212.64.29.78 port 40248 ssh2

Invalid user frappe from 87.103.120.250 port 34078

Malicious brute force vulnerability hacking attacks

May  3 03:22:14 hosting sshd[1553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns567538.ip-51-79-21.net  user=root
May  3 03:22:15 hosting sshd[1553]: Failed password for root from 51.79.21.228 port 52656 ssh2
...

[2020-05-02 20:19:44] NOTICE[1170][C-00009a93] chan_sip.c: Call from '' (198.46.135.250:53267) to extension '0081046520458223' rejected because extension not found in context 'public'.
[2020-05-02 20:19:44] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-02T20:19:44.263-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="0081046520458223",SessionID="0x7f6c085d4d48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/198.46.135.250/53267",ACLName="no_extension_match"
[2020-05-02 20:21:11] NOTICE[1170][C-00009a94] chan_sip.c: Call from '' (198.46.135.250:53343) to extension '+81046520458223' rejected because extension not found in context 'public'.
[2020-05-02 20:21:11] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-05-02T20:21:11.452-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="+81046520458223",SessionID="0x7f6c085d4d48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4
...

(From eric@talkwithwebvisitor.com) Hi, my name is Eric and I’m betting you’d like your website newtonpainrelief.com to generate more leads.

Here’s how:
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It signals you as soon as they say they’re interested – so that you can talk to that lead while they’re still there at newtonpainrelief.com.

Talk With Web Visitor – CLICK HERE http://www.talkwithwebvisitor.com for a live demo now.

And now that you’ve got their phone number, our new SMS Text With Lead feature enables you to start a text (SMS) conversation – answer questions, provide more info, and close a deal that way.

If they don’t take you up on your offer then, just follow up with text messages for new offers, content links, even just “how you doing?” notes to build a relationship.

CLICK HERE http://www.talkwithwebvisitor.com to discover what Talk With Web Visitor can do for your business.

The differe

May  3 05:59:21 sip sshd[89563]: Invalid user wenbo from 80.211.60.125 port 34016
May  3 05:59:22 sip sshd[89563]: Failed password for invalid user wenbo from 80.211.60.125 port 34016 ssh2
May  3 06:03:01 sip sshd[89602]: Invalid user sabnzbd from 80.211.60.125 port 45804
...

5x Failed Password

k+ssh-bruteforce

Icarus honeypot on github

SSH / Telnet Brute Force Attempts on Honeypot

windhundgang.de 221.199.41.218 [02/May/2020:22:32:52 +0200] "POST /wp-login.php HTTP/1.1" 200 12481 "http://windhundgang.de/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"
windhundgang.de 221.199.41.218 [02/May/2020:22:32:55 +0200] "POST /wp-login.php HTTP/1.1" 200 12481 "http://windhundgang.de/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; rv:60.0) Gecko/20100101 Firefox/60.0"

Automatic report - Port Scan Attack