Unauthorized SSH login attempts

(From eric@talkwithwebvisitor.com) Cool website!

My name’s Eric, and I just found your site - performancechiroofga.com - while surfing the net. You showed up at the top of the search results, so I checked you out. Looks like what you’re doing is pretty cool.
 
But if you don’t mind me asking – after someone like me stumbles across performancechiroofga.com, what usually happens?

Is your site generating leads for your business? 
 
I’m guessing some, but I also bet you’d like more… studies show that 7 out 10 who land on a site wind up leaving without a trace.

Not good.

Here’s a thought – what if there was an easy way for every visitor to “raise their hand” to get a phone call from you INSTANTLY… the second they hit your site and said, “call me now.”

You can –
  
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It lets you know IMMEDIATELY – so that you can talk to that lead while they’re literally look

Apr 23 06:13:49 emma postfix/smtpd[32477]: connect from 195-154-243-192.rev.poneytelecom.eu[195.154.243.192]
Apr 23 06:13:49 emma postfix/smtpd[32477]: setting up TLS connection from 195-154-243-192.rev.poneytelecom.eu[195.154.243.192]
Apr 23 06:13:50 emma postfix/smtpd[32477]: TLS connection established from 195-154-243-192.rev.poneytelecom.eu[195.154.243.192]: TLSv1 whostnameh cipher ADH-AES256-SHA (256/256 bhostnames)
Apr x@x
Apr 23 06:14:05 emma postfix/smtpd[32477]: disconnect from 195-154-243-192.rev.poneytelecom.eu[195.154.243.192]
Apr 23 06:20:05 emma postfix/smtpd[754]: connect from 195-154-243-192.rev.poneytelecom.eu[195.154.243.192]
Apr 23 06:20:05 emma postfix/smtpd[754]: setting up TLS connection from 195-154-243-192.rev.poneytelecom.eu[195.154.243.192]
Apr 23 06:20:05 emma postfix/smtpd[754]: TLS connection established from 195-154-243-192.rev.poneytelecom.eu[195.154.243.192]: TLSv1 whostnameh cipher ADH-AES256-SHA (256/256 bhostnames)
Apr x@x
Apr 23 06:20........
-------------------------------

Apr 24 14:04:48 minden010 sshd[11087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.227.104
Apr 24 14:04:50 minden010 sshd[11087]: Failed password for invalid user lb from 106.13.227.104 port 50372 ssh2
Apr 24 14:06:58 minden010 sshd[11358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.227.104
...

Apr 24 17:16:39 eventyay sshd[7367]: Failed password for root from 218.92.0.207 port 56432 ssh2
Apr 24 17:18:14 eventyay sshd[7378]: Failed password for root from 218.92.0.207 port 20705 ssh2
Apr 24 17:18:19 eventyay sshd[7378]: Failed password for root from 218.92.0.207 port 20705 ssh2
...

Apr 24 14:54:31 debian-2gb-nbg1-2 kernel: \[9991816.130634\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=223.18.228.26 DST=195.201.40.59 LEN=40 TOS=0x14 PREC=0x00 TTL=47 ID=54383 PROTO=TCP SPT=59062 DPT=23 WINDOW=10391 RES=0x00 SYN URGP=0

2020-04-2414:05:541jRx5d-0005n2-9S\<=info@whatsup2013.chH=\(localhost\)[123.21.82.116]:47131P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3055id=20db6d3e351e343ca0a513bf58ac869a85767d@whatsup2013.chT="Gooddaycharmingstranger"forjdnichols3595@hotmail.compauledis78@gmail.com2020-04-2414:06:301jRx6D-0005pY-DJ\<=info@whatsup2013.chH=\(localhost\)[220.179.231.166]:56756P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3176id=28e452010a210b039f9a2c806793b9a53d5d85@whatsup2013.chT="Areyoureallyalone\?"forglenarogets1970@gmail.comgregoriovasquezhuinil@gmail.com2020-04-2414:04:341jRx4J-0005XK-HI\<=info@whatsup2013.chH=\(localhost\)[41.72.3.78]:36440P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3181id=0ce3f1aba08b5ead8e7086d5de0a331f3cd6db6257@whatsup2013.chT="Icouldbeyourfriend"forsmithgary357@gmail.comdmhegel@charter.net2020-04-2414:05:461jRx5V-0005ab-2q\<=info@whatsup2013.chH=\(loc

Apr 23 01:46:26 vl01 sshd[1214]: Invalid user sr from 94.191.64.14 port 10132
Apr 23 01:46:26 vl01 sshd[1214]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.64.14
Apr 23 01:46:28 vl01 sshd[1214]: Failed password for invalid user sr from 94.191.64.14 port 10132 ssh2
Apr 23 01:46:28 vl01 sshd[1214]: Received disconnect from 94.191.64.14 port 10132:11: Bye Bye [preauth]
Apr 23 01:46:28 vl01 sshd[1214]: Disconnected from 94.191.64.14 port 10132 [preauth]
Apr 23 01:51:25 vl01 sshd[1741]: Invalid user user from 94.191.64.14 port 55526
Apr 23 01:51:25 vl01 sshd[1741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.191.64.14
Apr 23 01:51:28 vl01 sshd[1741]: Failed password for invalid user user from 94.191.64.14 port 55526 ssh2
Apr 23 01:51:28 vl01 sshd[1741]: Received disconnect from 94.191.64.14 port 55526:11: Bye Bye [preauth]
Apr 23 01:51:28 vl01 sshd[1741]: Disconnected from 94.191........
-------------------------------

Apr 24 14:48:09 mail sshd\[11441\]: Invalid user apache from 193.248.33.189
Apr 24 14:48:09 mail sshd\[11441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.248.33.189
Apr 24 14:48:10 mail sshd\[11441\]: Failed password for invalid user apache from 193.248.33.189 port 55308 ssh2
...

Apr 24 11:18:03 firewall sshd[26937]: Invalid user shop\r from 210.74.15.234
Apr 24 11:18:05 firewall sshd[26937]: Failed password for invalid user shop\r from 210.74.15.234 port 55572 ssh2
Apr 24 11:23:27 firewall sshd[27121]: Invalid user stacy123\r from 210.74.15.234
...

US Federal Reserve Bank Corporate Office
20th St. and Constitution Ave. N.W
Mail Stop K300 Washington, D.C. 20551
Our Ref:USFRB/IRU/SFE/15.5/NY/011
United States of America
Monday-Friday
8 a.m.-9 p.m. Eastern Daylight Time(EDT)
Saturday and Sunday
8 a.m.-4 p.m. Eastern Daylight Time(EDT)

  Federal Reserve Bank Notification Of Your Compensation Funds 2020

Please read carefully before replying because i cant explain any thing
else
apart from these mail sent to you.

Your payment files from three (3) different banks, Natwest Bank of
London,
Central Bank of Nigeria and Bank of America was compiled and submitted.................

Apr 24 03:25:30 web1 sshd\[9987\]: Invalid user lz from 122.51.82.22
Apr 24 03:25:30 web1 sshd\[9987\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.82.22
Apr 24 03:25:33 web1 sshd\[9987\]: Failed password for invalid user lz from 122.51.82.22 port 54398 ssh2
Apr 24 03:30:49 web1 sshd\[10477\]: Invalid user matt from 122.51.82.22
Apr 24 03:30:49 web1 sshd\[10477\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.82.22

155.94.134.42 has been banned for [spam]
...

Apr 24 14:02:32 dev0-dcde-rnet sshd[7987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.225.211.193
Apr 24 14:02:34 dev0-dcde-rnet sshd[7987]: Failed password for invalid user dms from 106.225.211.193 port 36469 ssh2
Apr 24 14:05:59 dev0-dcde-rnet sshd[8070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.225.211.193

Apr 24 17:30:24 gw1 sshd[28420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.78.99.233
Apr 24 17:30:26 gw1 sshd[28420]: Failed password for invalid user pm from 218.78.99.233 port 36586 ssh2
...