Oct 12 08:22:03 pl2server sshd[14942]: Invalid user ivanna from 104.236.182.223 port 34712
Oct 12 08:22:03 pl2server sshd[14942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.182.223
Oct 12 08:22:05 pl2server sshd[14942]: Failed password for invalid user ivanna from 104.236.182.223 port 34712 ssh2
Oct 12 08:22:05 pl2server sshd[14942]: Received disconnect from 104.236.182.223 port 34712:11: Bye Bye [preauth]
Oct 12 08:22:05 pl2server sshd[14942]: Disconnected from 104.236.182.223 port 34712 [preauth]
Oct 12 09:02:16 pl2server sshd[21874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.182.223  user=r.r
Oct 12 09:02:18 pl2server sshd[21874]: Failed password for r.r from 104.236.182.223 port 41620 ssh2
Oct 12 09:02:18 pl2server sshd[21874]: Received disconnect from 104.236.182.223 port 41620:11: Bye Bye [preauth]
Oct 12 09:02:18 pl2server sshd[21874]: Disconnected from 104.........
-------------------------------

Oct 12 08:22:03 pl2server sshd[14942]: Invalid user ivanna from 104.236.182.223 port 34712
Oct 12 08:22:03 pl2server sshd[14942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.182.223
Oct 12 08:22:05 pl2server sshd[14942]: Failed password for invalid user ivanna from 104.236.182.223 port 34712 ssh2
Oct 12 08:22:05 pl2server sshd[14942]: Received disconnect from 104.236.182.223 port 34712:11: Bye Bye [preauth]
Oct 12 08:22:05 pl2server sshd[14942]: Disconnected from 104.236.182.223 port 34712 [preauth]
Oct 12 09:02:16 pl2server sshd[21874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.182.223  user=r.r
Oct 12 09:02:18 pl2server sshd[21874]: Failed password for r.r from 104.236.182.223 port 41620 ssh2
Oct 12 09:02:18 pl2server sshd[21874]: Received disconnect from 104.236.182.223 port 41620:11: Bye Bye [preauth]
Oct 12 09:02:18 pl2server sshd[21874]: Disconnected from 104.........
-------------------------------

SSH Brute-Forcing (server1)

Oct 11 05:22:33 logopedia-1vcpu-1gb-nyc1-01 sshd[269234]: Failed password for root from 104.236.182.223 port 57770 ssh2
...

Oct  9 21:13:10 plex-server sshd[2928321]: Failed password for invalid user jakarta from 104.236.182.223 port 40490 ssh2
Oct  9 21:16:37 plex-server sshd[2931039]: Invalid user arun from 104.236.182.223 port 45106
Oct  9 21:16:37 plex-server sshd[2931039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.182.223 
Oct  9 21:16:37 plex-server sshd[2931039]: Invalid user arun from 104.236.182.223 port 45106
Oct  9 21:16:39 plex-server sshd[2931039]: Failed password for invalid user arun from 104.236.182.223 port 45106 ssh2
...

(sshd) Failed SSH login from 104.236.182.223 (US/United States/editoracip.sfo1): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  9 05:26:47 optimus sshd[20267]: Invalid user vnc from 104.236.182.223
Oct  9 05:26:47 optimus sshd[20267]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.182.223 
Oct  9 05:26:49 optimus sshd[20267]: Failed password for invalid user vnc from 104.236.182.223 port 36414 ssh2
Oct  9 05:30:26 optimus sshd[24165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.182.223  user=root
Oct  9 05:30:29 optimus sshd[24165]: Failed password for root from 104.236.182.223 port 41394 ssh2

Oct  8 18:19:57 pixelmemory sshd[1414975]: Failed password for invalid user student from 104.236.182.223 port 48600 ssh2
Oct  8 18:25:13 pixelmemory sshd[1423348]: Invalid user test from 104.236.182.223 port 54558
Oct  8 18:25:13 pixelmemory sshd[1423348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.182.223 
Oct  8 18:25:13 pixelmemory sshd[1423348]: Invalid user test from 104.236.182.223 port 54558
Oct  8 18:25:15 pixelmemory sshd[1423348]: Failed password for invalid user test from 104.236.182.223 port 54558 ssh2
...

php WP PHPmyadamin ABUSE blocked for 12h

Automatic report - XMLRPC Attack

Automatic report - XMLRPC Attack

Invalid user admin from 104.236.182.15 port 50888

May 15 14:25:11 vmd48417 sshd[7637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.182.15

May  6 09:19:07 ns382633 sshd\[26802\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.182.15  user=root
May  6 09:19:09 ns382633 sshd\[26802\]: Failed password for root from 104.236.182.15 port 37180 ssh2
May  6 09:24:54 ns382633 sshd\[27830\]: Invalid user shenjiakun from 104.236.182.15 port 55366
May  6 09:24:54 ns382633 sshd\[27830\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.182.15
May  6 09:24:56 ns382633 sshd\[27830\]: Failed password for invalid user shenjiakun from 104.236.182.15 port 55366 ssh2

invalid user

Apr 24 13:30:42 game-panel sshd[21627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.182.15
Apr 24 13:30:45 game-panel sshd[21627]: Failed password for invalid user Redistoor from 104.236.182.15 port 44970 ssh2
Apr 24 13:33:03 game-panel sshd[21680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.182.15

(From impressivedesignz4u@gmail.com) Hello,

I have run some diagnostic tools on your website and saw immediately that there is plenty of room for improvement. With a few upgrades on your existing platform, your website can start generating more sales, leads, and more business. Your website is your most important digital asset out on the Web, and it's time that it got the upgrade that it sorely needs. 

Search engines like Google have a way of accessing websites to look for certain keywords and elements that will highlight what your site is all about. I specialize in making sure that search algorithms find what they need on your website to put it on top of the search results.

I'll be glad to give you more detailed information about how you can make your website more profitable and what the results will be during a free consultation. Kindly reply to let me know when's the best time to give in touch with you if you're interested. I look forward to hearing back from you.

Kurt Caldwell

Nov 29 04:58:22 venus sshd\[11700\]: Invalid user jocelynn from 144.217.166.92 port 45622
Nov 29 04:58:22 venus sshd\[11700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.166.92
Nov 29 04:58:24 venus sshd\[11700\]: Failed password for invalid user jocelynn from 144.217.166.92 port 45622 ssh2
...

2019-11-25T07:48:34.151995ldap.arvenenaske.de sshd[10633]: Connection from 222.186.173.226 port 19676 on 5.199.128.55 port 22
2019-11-25T07:48:40.640545ldap.arvenenaske.de sshd[10633]: Failed none for r.r from 222.186.173.226 port 19676 ssh2
2019-11-25T07:48:40.858559ldap.arvenenaske.de sshd[10633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.226  user=r.r
2019-11-25T07:48:34.151995ldap.arvenenaske.de sshd[10633]: Connection from 222.186.173.226 port 19676 on 5.199.128.55 port 22
2019-11-25T07:48:40.640545ldap.arvenenaske.de sshd[10633]: Failed none for r.r from 222.186.173.226 port 19676 ssh2
2019-11-25T07:48:43.375687ldap.arvenenaske.de sshd[10633]: Failed password for r.r from 222.186.173.226 port 19676 ssh2
2019-11-25T07:48:40.858559ldap.arvenenaske.de sshd[10633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.226  user=r.r
2019-11-25T07:48:34.151995ldap.arve........
------------------------------

Nov 29 06:18:15 srv01 sshd[15458]: Invalid user year from 45.116.77.166 port 52988
Nov 29 06:18:15 srv01 sshd[15458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.116.77.166
Nov 29 06:18:15 srv01 sshd[15458]: Invalid user year from 45.116.77.166 port 52988
Nov 29 06:18:17 srv01 sshd[15458]: Failed password for invalid user year from 45.116.77.166 port 52988 ssh2
Nov 29 06:22:16 srv01 sshd[15878]: Invalid user lofthus from 45.116.77.166 port 44699
...

Nov 29 06:48:56 vps647732 sshd[29370]: Failed password for root from 51.77.140.111 port 59148 ssh2
...

Unauthorised access (Nov 29) SRC=125.21.173.242 LEN=52 TTL=116 ID=12139 DF TCP DPT=445 WINDOW=8192 SYN

1575003453 - 11/29/2019 05:57:33 Host: 123.205.134.163/123.205.134.163 Port: 6667 TCP Blocked

[FriNov2905:57:47.3549782019][:error][pid13622:tid47011299292928][client148.251.70.179:43734][client148.251.70.179]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"MJ12bot"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"376"][id"333515"][rev"4"][msg"Atomicorp.comWAFRules:MJ12Distributedbotdetected\(Disablethisruleifyouwanttoallowthisbot\)"][severity"WARNING"][tag"no_ar"][hostname"www.galardi.ch"][uri"/robots.txt"][unique_id"XeClSzK5czkRv4JFpcvgXQAAAQI"][FriNov2905:57:49.3284232019][:error][pid13752:tid47011409766144][client148.251.70.179:59044][client148.251.70.179]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"MJ12bot"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"376"][id"333515"][rev"4"][msg"Atomicorp.comWAFRules:MJ12Distributedbotdetected\(Disablethisruleifyouwanttoallowthisbot\)"][severity"WARNING"][tag"no_ar"][hostname"www.galardi

Automatic report - Banned IP Access

2019-11-29T04:58:14.905156abusebot-3.cloudsearch.cf sshd\[7090\]: Invalid user admin from 88.214.26.8 port 34680

Nov 28 19:27:12 hpm sshd\[1773\]: Invalid user piqueras from 162.252.103.50
Nov 28 19:27:12 hpm sshd\[1773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.252.103.50
Nov 28 19:27:15 hpm sshd\[1773\]: Failed password for invalid user piqueras from 162.252.103.50 port 48261 ssh2
Nov 28 19:33:54 hpm sshd\[2300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.252.103.50  user=root
Nov 28 19:33:56 hpm sshd\[2300\]: Failed password for root from 162.252.103.50 port 38402 ssh2

2019-11-29T05:31:13.996694abusebot-6.cloudsearch.cf sshd\[11898\]: Invalid user backup from 106.52.54.18 port 53102

Nov 29 05:58:22 lnxded63 sshd[27659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.99.101

3389BruteforceFW21

Nov 29 05:50:30 MK-Soft-VM8 sshd[2764]: Failed password for backup from 52.187.106.61 port 40700 ssh2
Nov 29 05:58:46 MK-Soft-VM8 sshd[2783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.187.106.61 
...