Jun  8 06:11:08 web1 sshd[21783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.236.130  user=root
Jun  8 06:11:10 web1 sshd[21783]: Failed password for root from 122.51.236.130 port 50443 ssh2
Jun  8 06:22:25 web1 sshd[24466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.236.130  user=root
Jun  8 06:22:28 web1 sshd[24466]: Failed password for root from 122.51.236.130 port 56109 ssh2
Jun  8 06:25:52 web1 sshd[25319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.236.130  user=root
Jun  8 06:25:54 web1 sshd[25319]: Failed password for root from 122.51.236.130 port 53974 ssh2
Jun  8 06:29:15 web1 sshd[26075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.236.130  user=root
Jun  8 06:29:17 web1 sshd[26075]: Failed password for root from 122.51.236.130 port 51845 ssh2
Jun  8 06:32:28 web1 sshd[26
...

Jun  7 22:40:03 abendstille sshd\[25463\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.68.194  user=root
Jun  7 22:40:05 abendstille sshd\[25463\]: Failed password for root from 106.53.68.194 port 50744 ssh2
Jun  7 22:44:05 abendstille sshd\[29217\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.68.194  user=root
Jun  7 22:44:07 abendstille sshd\[29217\]: Failed password for root from 106.53.68.194 port 39954 ssh2
Jun  7 22:48:07 abendstille sshd\[647\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.68.194  user=root
...

Port probing on unauthorized port 3389

Jun  7 23:14:20 * sshd[14394]: Failed password for root from 222.186.42.136 port 31107 ssh2
Jun  7 23:14:22 * sshd[14394]: Failed password for root from 222.186.42.136 port 31107 ssh2

$f2bV_matches

xmlrpc attack

Jun  7 22:40:09 vps647732 sshd[1240]: Failed password for root from 118.24.6.69 port 48415 ssh2
...

prod11
...

[Sun Jun 07 14:07:17.542111 2020] [:error] [pid 19185] [client 195.37.190.77:44924] [client 195.37.190.77] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "170.249.239.98"] [uri "/dns-query"] [unique_id "Xt0s1XZAH6Ffb1GN3yeaegAAAAQ"]

(From nanvij@hotmail.com) Get tо know, fucк. SEX dating nеarby: https://radyo.ir/622x6

Jun  7 22:38:52 piServer sshd[27289]: Failed password for root from 51.91.97.153 port 37688 ssh2
Jun  7 22:42:20 piServer sshd[27724]: Failed password for root from 51.91.97.153 port 40766 ssh2
...

Jun  7 13:24:22 pixelmemory sshd[2615850]: Failed password for root from 219.92.6.185 port 33684 ssh2
Jun  7 13:28:19 pixelmemory sshd[2626256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.6.185  user=root
Jun  7 13:28:21 pixelmemory sshd[2626256]: Failed password for root from 219.92.6.185 port 35684 ssh2
Jun  7 13:32:22 pixelmemory sshd[2636808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.92.6.185  user=root
Jun  7 13:32:23 pixelmemory sshd[2636808]: Failed password for root from 219.92.6.185 port 37860 ssh2
...

Jun  7 22:19:27 sip sshd[19915]: Failed password for root from 51.255.30.7 port 45426 ssh2
Jun  7 22:41:00 sip sshd[27885]: Failed password for root from 51.255.30.7 port 45686 ssh2

Bruteforce detected by fail2ban

(From bellm1233@gmail.com) Hi there!

I'm a freelance online marketer who's seeking new clients interested in getting more traffic to their websites. Can you please help me out a bit? I'd like to speak to the person in your company who is in charge on managing the website, and I would really appreciate it if you could forward this message to them and have them respond to me. 

If you're in need of SEO, I can assist you for a cheap cost. I've been a freelance search engine optimization specialist for 10 years and can get your site up where you need it to be. Boosting your ranking in search engines can progressively increase the amount of traffic you get in your site. Even just having high placements on Google alone for specific keywords relating to your business can really boost your sales. I'd like to help your company progress to the next level. 

Please write back to let me know if you're interested and I'll provide you with a free consultation and pricing on my services. I hope to speak with you soon