Tried sshing with brute force.

Sep  7 20:51:54 abendstille sshd\[27160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.12.119  user=root
Sep  7 20:51:56 abendstille sshd\[27160\]: Failed password for root from 14.161.12.119 port 59697 ssh2
Sep  7 20:55:25 abendstille sshd\[30570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.12.119  user=root
Sep  7 20:55:26 abendstille sshd\[30570\]: Failed password for root from 14.161.12.119 port 52367 ssh2
Sep  7 20:58:55 abendstille sshd\[1398\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.12.119  user=root
...

Sep  4 15:33:47 MainVPS sshd[32498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.12.119  user=root
Sep  4 15:33:50 MainVPS sshd[32498]: Failed password for root from 14.161.12.119 port 54309 ssh2
Sep  4 15:37:50 MainVPS sshd[9040]: Invalid user whc from 14.161.12.119 port 43505
Sep  4 15:37:50 MainVPS sshd[9040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.12.119
Sep  4 15:37:50 MainVPS sshd[9040]: Invalid user whc from 14.161.12.119 port 43505
Sep  4 15:37:52 MainVPS sshd[9040]: Failed password for invalid user whc from 14.161.12.119 port 43505 ssh2
...

Sep  4 12:15:24 itv-usvr-02 sshd[30676]: Invalid user admin from 14.161.12.119 port 43725
Sep  4 12:15:24 itv-usvr-02 sshd[30676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.12.119
Sep  4 12:15:24 itv-usvr-02 sshd[30676]: Invalid user admin from 14.161.12.119 port 43725
Sep  4 12:15:26 itv-usvr-02 sshd[30676]: Failed password for invalid user admin from 14.161.12.119 port 43725 ssh2
Sep  4 12:19:52 itv-usvr-02 sshd[30860]: Invalid user vinci from 14.161.12.119 port 43991

Unauthorized connection attempt from IP address 14.161.12.249 on Port 445(SMB)

SSH login attempts.

Invalid user jose from 14.161.12.119 port 55977

May 14 11:27:37 legacy sshd[14797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.12.119
May 14 11:27:39 legacy sshd[14797]: Failed password for invalid user diep from 14.161.12.119 port 59235 ssh2
May 14 11:32:53 legacy sshd[15116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.12.119
...

May 13 16:27:41 PorscheCustomer sshd[22447]: Failed password for invalid user rookie from 14.161.12.119 port 35919 ssh2
May 13 16:32:24 PorscheCustomer sshd[22557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.12.119
May 13 16:32:26 PorscheCustomer sshd[22557]: Failed password for invalid user taiwan from 14.161.12.119 port 36989 ssh2
...

Invalid user jose from 14.161.12.119 port 55977

2020-05-08T14:07:28.427546shield sshd\[27478\]: Invalid user ping from 14.161.12.119 port 63181
2020-05-08T14:07:28.432081shield sshd\[27478\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.12.119
2020-05-08T14:07:30.498698shield sshd\[27478\]: Failed password for invalid user ping from 14.161.12.119 port 63181 ssh2
2020-05-08T14:12:43.980402shield sshd\[28961\]: Invalid user testuser from 14.161.12.119 port 39297
2020-05-08T14:12:43.990364shield sshd\[28961\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.12.119

May  2 14:38:24 amit sshd\[4061\]: Invalid user vue from 14.161.12.119
May  2 14:38:24 amit sshd\[4061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.12.119
May  2 14:38:27 amit sshd\[4061\]: Failed password for invalid user vue from 14.161.12.119 port 50381 ssh2
...

Mar 11 06:39:00 josie sshd[16415]: Did not receive identification string from 14.161.12.238
Mar 11 06:39:00 josie sshd[16417]: Did not receive identification string from 14.161.12.238
Mar 11 06:39:00 josie sshd[16419]: Did not receive identification string from 14.161.12.238
Mar 11 06:39:00 josie sshd[16418]: Did not receive identification string from 14.161.12.238
Mar 11 06:39:05 josie sshd[16459]: Invalid user system from 14.161.12.238
Mar 11 06:39:05 josie sshd[16460]: Invalid user system from 14.161.12.238
Mar 11 06:39:05 josie sshd[16464]: Invalid user system from 14.161.12.238
Mar 11 06:39:05 josie sshd[16463]: Invalid user system from 14.161.12.238
Mar 11 06:39:05 josie sshd[16459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.12.238 
Mar 11 06:39:05 josie sshd[16460]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.12.238 
Mar 11 06:39:05 josie sshd[16464]: pam_unix(........
-------------------------------

Unauthorized connection attempt detected from IP address 14.161.12.154 to port 445

Nov 24 15:31:46 mxgate1 postfix/postscreen[31810]: CONNECT from [14.161.123.103]:34604 to [176.31.12.44]:25
Nov 24 15:31:47 mxgate1 postfix/dnsblog[31995]: addr 14.161.123.103 listed by domain cbl.abuseat.org as 127.0.0.2
Nov 24 15:31:47 mxgate1 postfix/dnsblog[31994]: addr 14.161.123.103 listed by domain zen.spamhaus.org as 127.0.0.11
Nov 24 15:31:47 mxgate1 postfix/dnsblog[31994]: addr 14.161.123.103 listed by domain zen.spamhaus.org as 127.0.0.4
Nov 24 15:31:47 mxgate1 postfix/dnsblog[31996]: addr 14.161.123.103 listed by domain b.barracudacentral.org as 127.0.0.2
Nov 24 15:31:52 mxgate1 postfix/postscreen[31810]: DNSBL rank 4 for [14.161.123.103]:34604
Nov x@x
Nov 24 15:31:53 mxgate1 postfix/postscreen[31810]: HANGUP after 1.3 from [14.161.123.103]:34604 in tests after SMTP handshake
Nov 24 15:31:53 mxgate1 postfix/postscreen[31810]: DISCONNECT [14.161.123.103]:34604


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=14.161.123.103

Nov  8 05:54:05 php1 sshd\[530\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.115  user=root
Nov  8 05:54:06 php1 sshd\[530\]: Failed password for root from 49.88.112.115 port 34291 ssh2
Nov  8 05:54:08 php1 sshd\[530\]: Failed password for root from 49.88.112.115 port 34291 ssh2
Nov  8 05:54:11 php1 sshd\[530\]: Failed password for root from 49.88.112.115 port 34291 ssh2
Nov  8 05:55:05 php1 sshd\[611\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.115  user=root

2019-11-08T17:29:30.136958scmdmz1 sshd\[15094\]: Invalid user appldev from 210.21.226.2 port 33922
2019-11-08T17:29:30.139440scmdmz1 sshd\[15094\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.21.226.2
2019-11-08T17:29:31.628179scmdmz1 sshd\[15094\]: Failed password for invalid user appldev from 210.21.226.2 port 33922 ssh2
...

Nov  8 16:56:11 vps691689 sshd[13789]: Failed password for root from 103.228.112.45 port 38628 ssh2
Nov  8 17:01:29 vps691689 sshd[13819]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.228.112.45
...

Brute force attempt

2019-11-08 08:39:38 H=ec2-54-213-233-46.us-west-2.compute.amazonaws.com (phylobago.mysecuritycamera.org) [54.213.233.46]:49731 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address
2019-11-08 08:39:38 H=ec2-54-213-233-46.us-west-2.compute.amazonaws.com (phylobago.mysecuritycamera.org) [54.213.233.46]:49731 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed
2019-11-08 08:39:38 H=ec2-54-213-233-46.us-west-2.compute.amazonaws.com (phylobago.mysecuritycamera.org) [54.213.233.46]:49731 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address
2019-11-08 08:39:38 H=ec2-54-213-233-46.us-west-2.compute.amazonaws.com (phylobago.mysecuritycamera.org) [54.213.233.46]:49731 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed
...

Nov  8 17:08:41 localhost sshd\[12857\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.46.16.95  user=root
Nov  8 17:08:43 localhost sshd\[12857\]: Failed password for root from 31.46.16.95 port 43030 ssh2
Nov  8 17:12:44 localhost sshd\[13459\]: Invalid user vinicius from 31.46.16.95 port 52588
Nov  8 17:12:44 localhost sshd\[13459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.46.16.95

Nov  8 04:33:57 web1 sshd\[21971\]: Invalid user wiscom from 221.214.74.10
Nov  8 04:33:57 web1 sshd\[21971\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.214.74.10
Nov  8 04:34:00 web1 sshd\[21971\]: Failed password for invalid user wiscom from 221.214.74.10 port 2094 ssh2
Nov  8 04:39:42 web1 sshd\[22554\]: Invalid user sbdfffitxit110110jsnet from 221.214.74.10
Nov  8 04:39:42 web1 sshd\[22554\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.214.74.10

(From eric@talkwithcustomer.com) Hi,

My name is Eric and I was looking at a few different sites online and came across your site decubellisfamilychiropractic.com.  I must say - your website is very impressive.  I am seeing your website on the first page of the Search Engine. 

Have you noticed that 70 percent of visitors who leave your website will never return?  In most cases, this means that 95 percent to 98 percent of your marketing efforts are going to waste, not to mention that you are losing more money in customer acquisition costs than you need to.
 
As a business person, the time and money you put into your marketing efforts is extremely valuable.  So why let it go to waste?  Our users have seen staggering improvements in conversions with insane growths of 150 percent going upwards of 785 percent. Are you ready to unlock the highest conversion revenue from each of your website visitors?  

TalkWithCustomer is a widget which captures a website visitor’s Name, Email address and Phone Number and

RDP Brute-Force (Grieskirchen RZ2)

2019-11-08T15:13:52.369429abusebot-8.cloudsearch.cf sshd\[8048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.172.147.34  user=root

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/202.72.215.59/ 
 
 ID - 1H : (24)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : ID 
 NAME ASN : ASN23953 
 
 IP : 202.72.215.59 
 
 CIDR : 202.72.215.0/24 
 
 PREFIX COUNT : 45 
 
 UNIQUE IP COUNT : 11520 
 
 
 ATTACKS DETECTED ASN23953 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-11-08 15:39:30 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

Nov  8 16:42:26 vmanager6029 sshd\[15450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.122.76  user=root
Nov  8 16:42:28 vmanager6029 sshd\[15450\]: Failed password for root from 139.198.122.76 port 32850 ssh2
Nov  8 16:48:29 vmanager6029 sshd\[15539\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.122.76  user=root

DATE:2019-11-08 15:39:04, IP:31.163.145.221, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc-bis)

web-1 [ssh_2] SSH Attack

Nov  8 17:14:12 legacy sshd[22287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.162.66.249
Nov  8 17:14:14 legacy sshd[22287]: Failed password for invalid user @wsxcvbnm from 130.162.66.249 port 41595 ssh2
Nov  8 17:18:49 legacy sshd[22386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.162.66.249
...