Mar 12 03:12:39 mail sshd\[13810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.23.153.10  user=root
...

Mar 12 11:15:58 lnxweb61 sshd[24945]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.104.149.194

$f2bV_matches

20/3/11@23:48:09: FAIL: Alarm-Intrusion address from=192.184.46.235
...

(From devereaux.leif@gmail.com) In the past 15 years we have built over 400 websites and generated over 500,000 leads for our clients.

 

We are a US company – with tons of references, testimonials and happy clients – and we want to be your go to marketing agency!

 

So, here is our offer 15% off any of our services PLUS a FREE review of your:

 

-Website (speed, SEO, look and feel, mobile compliance – everything)

-Social media pages

-Directory listings (are you showing up on google?  What about Alexa and Siri?)

-Landing pages

-Email newsletters

-Even your promotional products and printed materials…!

 

The goal here is to make sure your brand is consistent – and your business grows!

We are offering a 15% off voucher for your business


Email me back with your contact information and website link at  DebbieSilver2112@gmail.com

 

You will not be sorry!

 

Regards,

 

 

Debbie Silver

Branding & Marketing Specialist

20/3/11@23:48:36: FAIL: Alarm-Network address from=14.140.249.74
...

Hits on port : 5555

Mar 12 12:07:14 server sshd\[1571\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.157.229.58  user=games
Mar 12 12:07:16 server sshd\[1571\]: Failed password for games from 88.157.229.58 port 60234 ssh2
Mar 12 12:20:46 server sshd\[4246\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.157.229.58  user=root
Mar 12 12:20:48 server sshd\[4246\]: Failed password for root from 88.157.229.58 port 44816 ssh2
Mar 12 12:24:45 server sshd\[4748\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=88.157.229.58  user=root
...

MARRE de ces ORDURES et autres FILS de PUTE genre SOUS MERDES capables de POLLUER STUPIDEMENT pour ne pas dire CONNEMENT la Planète par des POURRIELS INUTILES sur des listes VOLÉES on ne sait où et SANS notre accord !
X-Originating-IP: [213.171.216.60]
Received: from 10.200.77.176 (EHLO smtp.livemail.co.uk) (213.171.216.60) by mta1047.mail.ir2.yahoo.com with SMTPS;
Received: from mvtp (unknown [188.162.198.188]) (Authenticated sender: web@keepfitwithkelly.co.uk) by smtp.livemail.co.uk (Postfix) with ESMTPSA id EB0D52805CD;
Message-ID: <0d619dcec5ee3b3711a41241b573595531f1e6ff@keepfitwithkelly.co.uk>
Reply-To: Jennifer 
From: Jennifer 
keepfitwithkelly.co.uk (FALSE EMPTY Web Site to STOP to host and destroiy IP and access keys !)>fasthosts.co.uk
keepfitwithkelly.co.uk>88.208.252.239
88.208.252.239>fasthosts.co.uk
https://www.mywot.com/scorecard/keepfitwithkelly.co.uk
https://www.mywot.com/scorecard/fasthosts.co.uk
https://en.asytech.cn/check-ip/88.208.252.239
ortaggi.co.uk>one.com>joker.com 
one.com>195.47.247.9
joker.com>194.245.148.200
194.245.148.200>nrw.net which resend to csl.de
nrw.net>joker.com
csl.de>nrw.net
https://www.mywot.com/scorecard/one.com
https://www.mywot.com/scorecard/joker.com
https://www.mywot.com/scorecard/nrw.net
https://www.mywot.com/scorecard/csl.de
https://en.asytech.cn/check-ip/195.47.247.9
https://en.asytech.cn/check-ip/194.245.148.200
which send to :
https://honeychicksfinder.com/pnguakzjfkmgrtk%3Ft%3Dshh&sa=D&sntz=1&usg=AFQjCNGvyrBCDGwYkoLXFlDkbYHNh0OsYg
honeychicksfinder.com>gdpr-masked.com
honeychicksfinder.com>104.27.137.81
gdpr-masked.com>endurance.com AGAIN... 
https://www.mywot.com/scorecard/honeychicksfinder.com
https://www.mywot.com/scorecard/gdpr-masked.com
https://www.mywot.com/scorecard/endurance.com
https://en.asytech.cn/check-ip/104.27.137.81

Mar 12 10:48:26 mailserver postfix/smtps/smtpd[84946]: connect from unknown[45.133.99.130]
Mar 12 10:48:34 mailserver dovecot: auth-worker(84864): sql([hidden],45.133.99.130): unknown user
Mar 12 10:48:36 mailserver postfix/smtps/smtpd[84946]: warning: unknown[45.133.99.130]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Mar 12 10:48:36 mailserver postfix/smtps/smtpd[84946]: lost connection after AUTH from unknown[45.133.99.130]
Mar 12 10:48:36 mailserver postfix/smtps/smtpd[84946]: disconnect from unknown[45.133.99.130]
Mar 12 10:48:36 mailserver postfix/smtps/smtpd[84946]: connect from unknown[45.133.99.130]
Mar 12 10:48:46 mailserver postfix/smtps/smtpd[84946]: lost connection after AUTH from unknown[45.133.99.130]
Mar 12 10:48:46 mailserver postfix/smtps/smtpd[84946]: disconnect from unknown[45.133.99.130]
Mar 12 10:48:46 mailserver postfix/smtps/smtpd[84946]: connect from unknown[45.133.99.130]
Mar 12 10:48:53 mailserver dovecot: auth-worker(84864): sql([hidden],45.133.99.130): unknown user

Automatic report: SSH brute force attempt

DATE:2020-03-12 04:45:45, IP:180.251.0.45, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq)

Invalid user admin from 123.24.206.251 port 51780

pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.26.64.143  user=root
Failed password for root from 36.26.64.143 port 60837 ssh2
Invalid user postgres from 36.26.64.143 port 53617
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.26.64.143
Failed password for invalid user postgres from 36.26.64.143 port 53617 ssh2

Mar 12 10:48:30 webhost01 sshd[2441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.160.199.219
Mar 12 10:48:32 webhost01 sshd[2441]: Failed password for invalid user melis from 108.160.199.219 port 36952 ssh2
...