2019-10-25T05:44:59.445943stark.klein-stark.info sshd\[10268\]: Invalid user rodrigo from 59.25.197.158 port 48930
2019-10-25T05:44:59.453259stark.klein-stark.info sshd\[10268\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.25.197.158
2019-10-25T05:45:00.975416stark.klein-stark.info sshd\[10268\]: Failed password for invalid user rodrigo from 59.25.197.158 port 48930 ssh2
...

2019-10-25T03:44:58.133893homeassistant sshd[9080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.111.206.154  user=root
2019-10-25T03:44:59.856266homeassistant sshd[9080]: Failed password for root from 179.111.206.154 port 63499 ssh2
...

2019-10-25T12:11:49.320199abusebot.cloudsearch.cf sshd\[6627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=248.ip-79-137-34.eu  user=root

(From aaron@sked.life) Hi Dr. Anderson!

I’m Aaron, a customer success advocate at SKED!  Did you know that you can now automate your office’s scheduling, send appointment reminders via SMS, and encourage care plans via an app that integrates with your EHR system?  

If you are interested in learning how you can significantly reduce no-show and missed appointments with friendly, customizable appointment reminders via SMS, push, or email, check out our SKED scheduling app here: http://go.sked.life/automate-my-office 

If you are not the correct person, would you mind passing this message on to the correct person? 

Thanks and I look forward to hearing back from you!

Aaron Van Duinen
Customer Success Advocate
SKED, Inc.
Phone: 616-258-2201
https://sked.life

Unauthorised access (Oct 25) SRC=69.80.72.9 LEN=40 TOS=0x10 PREC=0x40 TTL=239 ID=19193 TCP DPT=445 WINDOW=1024 SYN 
Unauthorised access (Oct 24) SRC=69.80.72.9 LEN=40 TOS=0x10 PREC=0x40 TTL=239 ID=37698 TCP DPT=445 WINDOW=1024 SYN

Automatic report - Banned IP Access

WordPress wp-login brute force :: 95.173.179.118 0.220 BYPASS [25/Oct/2019:14:44:56  1100] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

2019-10-25T12:06:30.056235shield sshd\[25065\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.82  user=root
2019-10-25T12:06:32.212401shield sshd\[25065\]: Failed password for root from 211.159.153.82 port 58718 ssh2
2019-10-25T12:11:46.630705shield sshd\[26076\]: Invalid user marcilia from 211.159.153.82 port 36202
2019-10-25T12:11:46.641363shield sshd\[26076\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.153.82
2019-10-25T12:11:48.511468shield sshd\[26076\]: Failed password for invalid user marcilia from 211.159.153.82 port 36202 ssh2

2019-10-25T12:11:10.345573hub.schaetter.us sshd\[23613\]: Invalid user lovery from 134.175.141.29 port 58592
2019-10-25T12:11:10.356680hub.schaetter.us sshd\[23613\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.141.29
2019-10-25T12:11:12.286937hub.schaetter.us sshd\[23613\]: Failed password for invalid user lovery from 134.175.141.29 port 58592 ssh2
2019-10-25T12:16:13.475082hub.schaetter.us sshd\[23652\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.141.29  user=root
2019-10-25T12:16:15.666562hub.schaetter.us sshd\[23652\]: Failed password for root from 134.175.141.29 port 39298 ssh2
...

2019-10-25T12:08:24.793234shield sshd\[25447\]: Invalid user harkonnen from 89.46.196.10 port 41712
2019-10-25T12:08:24.798303shield sshd\[25447\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.46.196.10
2019-10-25T12:08:26.939060shield sshd\[25447\]: Failed password for invalid user harkonnen from 89.46.196.10 port 41712 ssh2
2019-10-25T12:12:01.208397shield sshd\[26156\]: Invalid user +++ from 89.46.196.10 port 52340
2019-10-25T12:12:01.216906shield sshd\[26156\]: Failed password for invalid user +++ from 89.46.196.10 port 52340 ssh2

WordPress login Brute force / Web App Attack on client site.

Oct 25 14:11:30 host proftpd[17926]: 0.0.0.0 (92.246.3.24[92.246.3.24]) - USER plesk: no such user found from 92.246.3.24 [92.246.3.24] to 62.210.146.38:21
...

\[2019-10-25 07:55:49\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '45.143.220.13:54328' - Wrong password
\[2019-10-25 07:55:49\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-25T07:55:49.199-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7fdf2c160cc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.13/54328",Challenge="7f67bb83",ReceivedChallenge="7f67bb83",ReceivedHash="f7161b98dca3ef641677f229c5faf8d2"
\[2019-10-25 07:56:05\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '45.143.220.13:65024' - Wrong password
\[2019-10-25 07:56:05\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-25T07:56:05.788-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1001",SessionID="0x7fdf2c5fc4c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.22

pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216  user=root
Failed password for root from 222.186.175.216 port 33576 ssh2
Failed password for root from 222.186.175.216 port 33576 ssh2
Failed password for root from 222.186.175.216 port 33576 ssh2
Failed password for root from 222.186.175.216 port 33576 ssh2

Lines containing failures of 45.35.198.44
Oct 25 05:41:14 server01 postfix/smtpd[7545]: warning: hostname unassigned.psychz.net does not resolve to address 45.35.198.44
Oct 25 05:41:14 server01 postfix/smtpd[7545]: connect from unknown[45.35.198.44]
Oct x@x
Oct x@x
Oct x@x
Oct x@x
Oct 25 05:41:16 server01 postfix/smtpd[7545]: disconnect from unknown[45.35.198.44]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.35.198.44