Repeated brute force against a port

Jun  3 13:40:13 mail.srvfarm.net postfix/smtpd[1849957]: NOQUEUE: reject: RCPT from unknown[185.246.187.34]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  3 13:42:14 mail.srvfarm.net postfix/smtpd[1851099]: NOQUEUE: reject: RCPT from unknown[185.246.187.34]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  3 13:42:14 mail.srvfarm.net postfix/smtpd[1851099]: NOQUEUE: reject: RCPT from unknown[185.246.187.34]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  3 13:44:07 mail.srvfarm.net postfix/smtpd[1850732]: NOQUEUE: reject: RCPT from unknown[185.246.187.34]: 450 4.1.8 <

langenachtfulda.de 94.130.107.108 [03/Jun/2020:20:19:06 +0200] "POST /wp-login.php HTTP/1.1" 200 6288 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
langenachtfulda.de 94.130.107.108 [03/Jun/2020:20:19:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4066 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

Jun  3 13:36:27 ns382633 sshd\[20422\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.23.211.102  user=root
Jun  3 13:36:30 ns382633 sshd\[20422\]: Failed password for root from 1.23.211.102 port 36766 ssh2
Jun  3 13:44:58 ns382633 sshd\[21823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.23.211.102  user=root
Jun  3 13:45:00 ns382633 sshd\[21823\]: Failed password for root from 1.23.211.102 port 43526 ssh2
Jun  3 13:47:23 ns382633 sshd\[22552\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.23.211.102  user=root

SSH brute force attempt

firewall-block, port(s): 1054/udp

Jun  1 19:11:55 our-server-hostname sshd[17594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.17.94.69  user=r.r
Jun  1 19:11:58 our-server-hostname sshd[17594]: Failed password for r.r from 134.17.94.69 port 4938 ssh2
Jun  1 19:28:11 our-server-hostname sshd[20978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.17.94.69  user=r.r
Jun  1 19:28:12 our-server-hostname sshd[20978]: Failed password for r.r from 134.17.94.69 port 4939 ssh2
Jun  1 19:31:31 our-server-hostname sshd[21729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.17.94.69  user=r.r
Jun  1 19:31:33 our-server-hostname sshd[21729]: Failed password for r.r from 134.17.94.69 port 4940 ssh2
Jun  1 19:34:56 our-server-hostname sshd[22329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.17.94.69  user=r.r
Jun  1 19:34:58 our-server........
-------------------------------

 UDP 129.250.206.86:4646 -> port 53, len 75

2020-06-03T20:08:48.243416ns386461 sshd\[10621\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.81.78.180  user=root
2020-06-03T20:08:50.424435ns386461 sshd\[10621\]: Failed password for root from 203.81.78.180 port 42708 ssh2
2020-06-03T20:11:09.359142ns386461 sshd\[12722\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.81.78.180  user=root
2020-06-03T20:11:11.229234ns386461 sshd\[12722\]: Failed password for root from 203.81.78.180 port 60408 ssh2
2020-06-03T20:12:31.527976ns386461 sshd\[13933\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.81.78.180  user=root
...

Jun  2 11:05:55 mailrelay sshd[5896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.25.198  user=r.r
Jun  2 11:05:56 mailrelay sshd[5896]: Failed password for r.r from 106.13.25.198 port 49778 ssh2
Jun  2 11:05:56 mailrelay sshd[5896]: Received disconnect from 106.13.25.198 port 49778:11: Bye Bye [preauth]
Jun  2 11:05:56 mailrelay sshd[5896]: Disconnected from 106.13.25.198 port 49778 [preauth]
Jun  2 14:13:42 mailrelay sshd[8556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.25.198  user=r.r
Jun  2 14:13:44 mailrelay sshd[8556]: Failed password for r.r from 106.13.25.198 port 40914 ssh2
Jun  2 14:13:44 mailrelay sshd[8556]: Received disconnect from 106.13.25.198 port 40914:11: Bye Bye [preauth]
Jun  2 14:13:44 mailrelay sshd[8556]: Disconnected from 106.13.25.198 port 40914 [preauth]
Jun  2 14:22:33 mailrelay sshd[8605]: pam_unix(sshd:auth): authentication failure; logna........
-------------------------------

Jun  1 05:41:30 host2 sshd[7911]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-209-68-44.ap-northeast-2.compute.amazonaws.com  user=r.r
Jun  1 05:41:32 host2 sshd[7911]: Failed password for r.r from 13.209.68.44 port 54332 ssh2
Jun  1 05:41:32 host2 sshd[7911]: Received disconnect from 13.209.68.44: 11: Bye Bye [preauth]
Jun  1 06:20:00 host2 sshd[27410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-209-68-44.ap-northeast-2.compute.amazonaws.com  user=r.r
Jun  1 06:20:03 host2 sshd[27410]: Failed password for r.r from 13.209.68.44 port 47168 ssh2
Jun  1 06:20:03 host2 sshd[27410]: Received disconnect from 13.209.68.44: 11: Bye Bye [preauth]
Jun  1 06:27:06 host2 sshd[23221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=em3-13-209-68-44.ap-northeast-2.compute.amazonaws.com  user=r.r
Jun  1 06:27:09 host2 sshd[23221]: Failed passwo........
-------------------------------

Automatic report - Banned IP Access

(From eric@talkwithwebvisitor.com) Good day, 

My name is Eric and unlike a lot of emails you might get, I wanted to instead provide you with a word of encouragement – Congratulations

What for?  

Part of my job is to check out websites and the work you’ve done with advancedchirosolutions.com definitely stands out. 

It’s clear you took building a website seriously and made a real investment of time and resources into making it top quality.

There is, however, a catch… more accurately, a question…

So when someone like me happens to find your site – maybe at the top of the search results (nice job BTW) or just through a random link, how do you know? 

More importantly, how do you make a connection with that person?

Studies show that 7 out of 10 visitors don’t stick around – they’re there one second and then gone with the wind.

Here’s a way to create INSTANT engagement that you may not have known about… 

Talk With Web Visitor is a software widget that’s works on your site, ready to capt

(From eric@talkwithwebvisitor.com) Good day, 

My name is Eric and unlike a lot of emails you might get, I wanted to instead provide you with a word of encouragement – Congratulations

What for?  

Part of my job is to check out websites and the work you’ve done with advancedchirosolutions.com definitely stands out. 

It’s clear you took building a website seriously and made a real investment of time and resources into making it top quality.

There is, however, a catch… more accurately, a question…

So when someone like me happens to find your site – maybe at the top of the search results (nice job BTW) or just through a random link, how do you know? 

More importantly, how do you make a connection with that person?

Studies show that 7 out of 10 visitors don’t stick around – they’re there one second and then gone with the wind.

Here’s a way to create INSTANT engagement that you may not have known about… 

Talk With Web Visitor is a software widget that’s works on your site, ready to capt

Jun  3 18:42:21 [host] sshd[9223]: pam_unix(sshd:a
Jun  3 18:42:23 [host] sshd[9223]: Failed password
Jun  3 18:47:34 [host] sshd[9346]: pam_unix(sshd:a