Honeypot attack, port: 445, PTR: 200-206-251-254.dsl.telesp.net.br.

Mar  5 22:59:27 debian-2gb-nbg1-2 kernel: \[5704735.686440\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=78.110.159.40 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=8192 PROTO=TCP SPT=47753 DPT=3791 WINDOW=1024 RES=0x00 SYN URGP=0

Mar  5 22:59:14 * sshd[30867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.226.52
Mar  5 22:59:16 * sshd[30867]: Failed password for invalid user webmaster from 178.128.226.52 port 52160 ssh2

Brute force attempt

ET DROP Dshield Block Listed Source group 1 - port: 45456 proto: TCP cat: Misc Attack

Honeypot attack, port: 81, PTR: n148-h52.150.118.dynamic.da.net.tw.

$f2bV_matches

Mar  6 00:00:27 takio sshd[30494]: Invalid user ubuntu from 132.148.129.180 port 43990
Mar  6 00:03:43 takio sshd[30512]: Invalid user admin from 132.148.129.180 port 42110
Mar  6 00:06:55 takio sshd[30533]: Invalid user postgres from 132.148.129.180 port 40400

Honeypot attack, port: 5555, PTR: c213-103-136-51.bredband.comhem.se.

(From eric@talkwithwebvisitor.com) Cool website!

My name’s Eric, and I just found your site - lampechiropractic.com - while surfing the net. You showed up at the top of the search results, so I checked you out. Looks like what you’re doing is pretty cool.
 
But if you don’t mind me asking – after someone like me stumbles across lampechiropractic.com, what usually happens?

Is your site generating leads for your business? 
 
I’m guessing some, but I also bet you’d like more… studies show that 7 out 10 who land on a site wind up leaving without a trace.

Not good.

Here’s a thought – what if there was an easy way for every visitor to “raise their hand” to get a phone call from you INSTANTLY… the second they hit your site and said, “call me now.”

You can –
  
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It lets you know IMMEDIATELY – so that you can talk to that lead while they’re literally looking ov

Honeypot attack, port: 81, PTR: net-2-42-255-171.cust.vodafonedsl.it.

Mar  5 22:58:34 mail.srvfarm.net postfix/smtpd[1625951]: NOQUEUE: reject: RCPT from unknown[185.143.223.160]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=<[185.143.223.170]>
Mar  5 22:58:35 mail.srvfarm.net postfix/smtpd[1627461]: NOQUEUE: reject: RCPT from unknown[185.143.223.160]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=<[185.143.223.170]>
Mar  5 22:58:35 mail.srvfarm.net postfix/smtpd[1625951]: NOQUEUE: reject: RCPT from unknown[185.143.223.160]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=<[185.143.223.170]>
Mar  5 22:58:35 mail.srvfarm.net postfix/smtpd[1625951]: NOQUEUE: reject: RCPT from unknown[185.143.223.160]: 554 5.7.1 : Relay access denied; from= to=

(From eric@talkwithwebvisitor.com) Cool website!

My name’s Eric, and I just found your site - lampechiropractic.com - while surfing the net. You showed up at the top of the search results, so I checked you out. Looks like what you’re doing is pretty cool.
 
But if you don’t mind me asking – after someone like me stumbles across lampechiropractic.com, what usually happens?

Is your site generating leads for your business? 
 
I’m guessing some, but I also bet you’d like more… studies show that 7 out 10 who land on a site wind up leaving without a trace.

Not good.

Here’s a thought – what if there was an easy way for every visitor to “raise their hand” to get a phone call from you INSTANTLY… the second they hit your site and said, “call me now.”

You can –
  
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It lets you know IMMEDIATELY – so that you can talk to that lead while they’re literally looking ov

SSH invalid-user multiple login attempts

xmlrpc attack