Sep 25 21:29:09 tdfoods sshd\[4285\]: Invalid user elena from 58.17.243.151
Sep 25 21:29:09 tdfoods sshd\[4285\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.17.243.151
Sep 25 21:29:11 tdfoods sshd\[4285\]: Failed password for invalid user elena from 58.17.243.151 port 64583 ssh2
Sep 25 21:33:53 tdfoods sshd\[4632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.17.243.151  user=root
Sep 25 21:33:56 tdfoods sshd\[4632\]: Failed password for root from 58.17.243.151 port 55305 ssh2

Chat Spam

Sep 26 06:09:37 root sshd[20404]: Failed password for root from 218.92.0.145 port 32727 ssh2
Sep 26 06:09:41 root sshd[20404]: Failed password for root from 218.92.0.145 port 32727 ssh2
Sep 26 06:09:43 root sshd[20404]: Failed password for root from 218.92.0.145 port 32727 ssh2
Sep 26 06:09:47 root sshd[20404]: Failed password for root from 218.92.0.145 port 32727 ssh2
...

Lines containing failures of 192.144.140.20
Sep 24 11:38:43 vps9 sshd[25515]: Invalid user j0k3r from 192.144.140.20 port 42014
Sep 24 11:38:43 vps9 sshd[25515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.140.20 
Sep 24 11:38:46 vps9 sshd[25515]: Failed password for invalid user j0k3r from 192.144.140.20 port 42014 ssh2
Sep 24 11:38:46 vps9 sshd[25515]: Received disconnect from 192.144.140.20 port 42014:11: Bye Bye [preauth]
Sep 24 11:38:46 vps9 sshd[25515]: Disconnected from invalid user j0k3r 192.144.140.20 port 42014 [preauth]
Sep 24 12:00:03 vps9 sshd[4235]: Invalid user zhostnameian from 192.144.140.20 port 35450
Sep 24 12:00:03 vps9 sshd[4235]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.140.20 
Sep 24 12:00:05 vps9 sshd[4235]: Failed password for invalid user zhostnameian from 192.144.140.20 port 35450 ssh2
Sep 24 12:00:05 vps9 sshd[4235]: Received disconnect f........
------------------------------

Sep 26 07:06:50 taivassalofi sshd[162851]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.210.157.140
Sep 26 07:06:52 taivassalofi sshd[162851]: Failed password for invalid user zhouh from 62.210.157.140 port 46593 ssh2
...

F2B jail: sshd. Time: 2019-09-26 10:15:08, Reported by: VKReport

26.09.2019 04:46:07 Recursive DNS scan

Sep 26 08:28:15 mail postfix/smtpd\[6021\]: warning: unknown\[45.148.10.70\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Sep 26 08:58:57 mail postfix/smtpd\[6319\]: warning: unknown\[45.148.10.70\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Sep 26 09:00:11 mail postfix/smtpd\[7365\]: warning: unknown\[45.148.10.70\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Sep 26 09:01:21 mail postfix/smtpd\[6417\]: warning: unknown\[45.148.10.70\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\

Sep 26 05:42:16 ns3110291 sshd\[31199\]: Invalid user oracle from 37.187.54.67
Sep 26 05:42:18 ns3110291 sshd\[31199\]: Failed password for invalid user oracle from 37.187.54.67 port 38634 ssh2
Sep 26 05:46:15 ns3110291 sshd\[31425\]: Invalid user alan from 37.187.54.67
Sep 26 05:46:17 ns3110291 sshd\[31425\]: Failed password for invalid user alan from 37.187.54.67 port 59936 ssh2
Sep 26 05:50:09 ns3110291 sshd\[31587\]: Invalid user do from 37.187.54.67
...

Sep 26 04:50:30 h2421860 postfix/postscreen[4874]: CONNECT from [81.28.107.160]:58838 to [85.214.119.52]:25
Sep 26 04:50:30 h2421860 postfix/dnsblog[4882]: addr 81.28.107.160 listed by domain b.barracudacentral.org as 127.0.0.2
Sep 26 04:50:30 h2421860 postfix/dnsblog[4880]: addr 81.28.107.160 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Sep 26 04:50:30 h2421860 postfix/dnsblog[4880]: addr 81.28.107.160 listed by domain zen.spamhaus.org as 127.0.0.3
Sep 26 04:50:30 h2421860 postfix/dnsblog[4878]: addr 81.28.107.160 listed by domain Unknown.trblspam.com as 185.53.179.7
Sep 26 04:50:36 h2421860 postfix/postscreen[4874]: DNSBL rank 7 for [81.28.107.160]:58838
Sep x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=81.28.107.160

09/26/2019-05:50:03.495648 199.249.230.73 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 49

firewall-block, port(s): 5431/tcp

2019-09-26 00:54:23 H=(luxuryclass.it) [14.102.115.130]:49421 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address
2019-09-26 00:54:23 H=(luxuryclass.it) [14.102.115.130]:49421 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed
2019-09-26 00:54:24 H=(luxuryclass.it) [14.102.115.130]:49421 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed
...

firewall-block, port(s): 445/tcp

(From darren@custompicsfromairplane.com) Final Call

We have extended the below offer just 2 more days

Aerial Impressions will be photographing businesses and homes in Taunton and throughout a large part of the USA from Sept 28th.

Aerial images of Eaton Chiropractic would make a great addition to your marketing material and photos of your home will make a awesome wall hanging.

We shoot 30+ images from various aspects from an airplane (we do not use drones) and deliver digitally free from any copyright.

Only $249 per location.

For more info, schedule and bookings please visit www.custompicsfromairplane.com
or call 1877 533 9003


Regards
Aerial Impressions