LAMP,DEF GET http://meyer-pants.com/magmi/web/magmi.php

SpamScore above: 10.0

[Thu Dec 26 19:14:39.625146 2019] [access_compat:error] [pid 21411] [client 109.193.157.68:44020] AH01797: client denied by server configuration: /var/www/html/josh/wp-login.php
...

Mar  3 05:33:00 web9 sshd\[23871\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182  user=root
Mar  3 05:33:02 web9 sshd\[23871\]: Failed password for root from 222.186.175.182 port 12438 ssh2
Mar  3 05:33:05 web9 sshd\[23871\]: Failed password for root from 222.186.175.182 port 12438 ssh2
Mar  3 05:33:08 web9 sshd\[23871\]: Failed password for root from 222.186.175.182 port 12438 ssh2
Mar  3 05:33:11 web9 sshd\[23871\]: Failed password for root from 222.186.175.182 port 12438 ssh2

Jan 11 19:58:58 mercury smtpd[1181]: 7f9514775d98005d smtp event=failed-command address=178.132.220.241 host=178.132.220.241 command="RCPT to:" result="550 Invalid recipient"
...

Dec 26 15:20:42 mercury wordpress(www.learnargentinianspanish.com)[21303]: XML-RPC authentication attempt for unknown user silvina from 103.82.43.118
...

Mar  3 19:26:13 gw1 sshd[16790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.4.204.122
Mar  3 19:26:15 gw1 sshd[16790]: Failed password for invalid user radio from 142.4.204.122 port 34449 ssh2
...

Mar  3 14:58:44 dedicated sshd[17644]: Failed password for root from 79.143.30.190 port 57654 ssh2
Mar  3 14:59:11 dedicated sshd[17707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.143.30.190  user=root
Mar  3 14:59:13 dedicated sshd[17707]: Failed password for root from 79.143.30.190 port 56448 ssh2
Mar  3 14:59:11 dedicated sshd[17707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.143.30.190  user=root
Mar  3 14:59:13 dedicated sshd[17707]: Failed password for root from 79.143.30.190 port 56448 ssh2

Mar  3 22:42:49 bacztwo sshd[20406]: error: PAM: Authentication failure for root from 222.186.180.17
Mar  3 22:42:52 bacztwo sshd[20406]: error: PAM: Authentication failure for root from 222.186.180.17
Mar  3 22:42:55 bacztwo sshd[20406]: error: PAM: Authentication failure for root from 222.186.180.17
Mar  3 22:42:55 bacztwo sshd[20406]: Failed keyboard-interactive/pam for root from 222.186.180.17 port 47220 ssh2
Mar  3 22:42:40 bacztwo sshd[20406]: error: PAM: Authentication failure for root from 222.186.180.17
Mar  3 22:42:49 bacztwo sshd[20406]: error: PAM: Authentication failure for root from 222.186.180.17
Mar  3 22:42:52 bacztwo sshd[20406]: error: PAM: Authentication failure for root from 222.186.180.17
Mar  3 22:42:55 bacztwo sshd[20406]: error: PAM: Authentication failure for root from 222.186.180.17
Mar  3 22:42:55 bacztwo sshd[20406]: Failed keyboard-interactive/pam for root from 222.186.180.17 port 47220 ssh2
Mar  3 22:42:59 bacztwo sshd[20406]: error: PAM: Authentication f
...

2020-01-09T07:43:49.361Z CLOSE host=103.44.144.53 port=48564 fd=4 time=20.018 bytes=21
...

Dec  3 13:55:42 mercury smtpd[1197]: 239b439b90690e73 smtp event=failed-command address=180.183.99.137 host=mx-ll-180.183.99-137.dynamic.3bb.co.th command="AUTH PLAIN (...)" result="535 Authentication failed"
...

Automatic report - Port Scan Attack

SSH invalid-user multiple login try

Dec 11 16:35:53 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:5a:1a:41:08:00 SRC=106.107.223.203 DST=109.74.200.221 LEN=32 TOS=0x00 PREC=0x00 TTL=45 ID=0 DF PROTO=UDP SPT=123 DPT=123 LEN=12 
...

Feb 11 10:53:10 mercury wordpress(www.learnargentinianspanish.com)[6367]: XML-RPC authentication attempt for unknown user chris from 105.212.11.128
...