Sep 28 01:55:29 markkoudstaal sshd[8862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.229.208.187
Sep 28 01:55:31 markkoudstaal sshd[8862]: Failed password for invalid user ubnt from 58.229.208.187 port 43540 ssh2
Sep 28 02:00:43 markkoudstaal sshd[9315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.229.208.187

Sep 28 07:14:16 www sshd\[135086\]: Invalid user lidia from 103.226.185.24
Sep 28 07:14:16 www sshd\[135086\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.226.185.24
Sep 28 07:14:18 www sshd\[135086\]: Failed password for invalid user lidia from 103.226.185.24 port 51900 ssh2
...

2019-09-27T23:43:16.9156641495-001 sshd\[55228\]: Invalid user fc from 45.55.176.173 port 44099
2019-09-27T23:43:16.9229461495-001 sshd\[55228\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.176.173
2019-09-27T23:43:18.8265431495-001 sshd\[55228\]: Failed password for invalid user fc from 45.55.176.173 port 44099 ssh2
2019-09-27T23:47:02.9768541495-001 sshd\[55389\]: Invalid user source from 45.55.176.173 port 35977
2019-09-27T23:47:02.9878881495-001 sshd\[55389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.176.173
2019-09-27T23:47:04.5810851495-001 sshd\[55389\]: Failed password for invalid user source from 45.55.176.173 port 35977 ssh2
...

DATE:2019-09-27 23:05:41, IP:118.179.59.69, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)

namecheap spam

$f2bV_matches

Sep 28 05:56:42 bouncer sshd\[29773\]: Invalid user admin from 193.32.163.182 port 57148
Sep 28 05:56:42 bouncer sshd\[29773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.32.163.182 
Sep 28 05:56:43 bouncer sshd\[29773\]: Failed password for invalid user admin from 193.32.163.182 port 57148 ssh2
...

Sep 28 06:02:56 dcd-gentoo sshd[30388]: User root from 222.186.31.136 not allowed because none of user's groups are listed in AllowGroups
Sep 28 06:02:58 dcd-gentoo sshd[30388]: error: PAM: Authentication failure for illegal user root from 222.186.31.136
Sep 28 06:02:56 dcd-gentoo sshd[30388]: User root from 222.186.31.136 not allowed because none of user's groups are listed in AllowGroups
Sep 28 06:02:58 dcd-gentoo sshd[30388]: error: PAM: Authentication failure for illegal user root from 222.186.31.136
Sep 28 06:02:56 dcd-gentoo sshd[30388]: User root from 222.186.31.136 not allowed because none of user's groups are listed in AllowGroups
Sep 28 06:02:58 dcd-gentoo sshd[30388]: error: PAM: Authentication failure for illegal user root from 222.186.31.136
Sep 28 06:02:58 dcd-gentoo sshd[30388]: Failed keyboard-interactive/pam for invalid user root from 222.186.31.136 port 45844 ssh2
...

*Port Scan* detected from 42.118.71.135 (VN/Vietnam/-). 4 hits in the last 115 seconds

Honeypot attack, port: 23, PTR: 122-117-125-133.HINET-IP.hinet.net.

Sep 27 18:07:46 lcdev sshd\[14593\]: Invalid user openelec from 216.144.251.86
Sep 27 18:07:46 lcdev sshd\[14593\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.144.251.86
Sep 27 18:07:48 lcdev sshd\[14593\]: Failed password for invalid user openelec from 216.144.251.86 port 38586 ssh2
Sep 27 18:11:38 lcdev sshd\[15035\]: Invalid user kevinc from 216.144.251.86
Sep 27 18:11:38 lcdev sshd\[15035\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.144.251.86

Sep 27 17:05:46 localhost kernel: [3356164.895649] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=182.254.150.47 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=231 ID=12798 PROTO=TCP SPT=58315 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 
Sep 27 17:05:46 localhost kernel: [3356164.895656] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=182.254.150.47 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=231 ID=12798 PROTO=TCP SPT=58315 DPT=445 SEQ=216879165 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0

(From eric@talkwithcustomer.com) Hello rasselfamilychiropractic.com,

People ask, “why does TalkWithCustomer work so well?”

It’s simple.

TalkWithCustomer enables you to connect with a prospective customer at EXACTLY the Perfect Time.

- NOT one week, two weeks, three weeks after they’ve checked out your website rasselfamilychiropractic.com.
- NOT with a form letter style email that looks like it was written by a bot.
- NOT with a robocall that could come at any time out of the blue.

TalkWithCustomer connects you to that person within seconds of THEM asking to hear from YOU.

They kick off the conversation.

They take that first step.

They ask to hear from you regarding what you have to offer and how it can make their life better. 

And it happens almost immediately. In real time. While they’re still looking over your website rasselfamilychiropractic.com, trying to make up their mind whether you are right for them.

When you connect with them at that very moment it’s the ultimate in P

Sep 27 23:16:17 [munged] sshd[8942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.24.100.42

Honeypot attack, port: 445, PTR: PTR record not found