Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:55:14.

Dec 20 16:16:16 mc1 kernel: \[1013789.785658\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.250 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=50707 PROTO=TCP SPT=57664 DPT=6129 WINDOW=1024 RES=0x00 SYN URGP=0 
Dec 20 16:18:28 mc1 kernel: \[1013921.619036\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.250 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=16706 PROTO=TCP SPT=57664 DPT=16000 WINDOW=1024 RES=0x00 SYN URGP=0 
Dec 20 16:25:44 mc1 kernel: \[1014357.686044\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.250 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=42138 PROTO=TCP SPT=57664 DPT=6636 WINDOW=1024 RES=0x00 SYN URGP=0 
...

Attempt to attack host OS, exploiting network vulnerabilities, on 20-12-2019 14:55:14.

2019-12-20T15:47:05.515122centos sshd\[14271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.144.147  user=root
2019-12-20T15:47:07.774856centos sshd\[14271\]: Failed password for root from 165.22.144.147 port 49656 ssh2
2019-12-20T15:55:20.236551centos sshd\[14478\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.144.147  user=root

*Port Scan* detected from 159.203.197.172 (US/United States/zg-0911a-8.stretchoid.com). 4 hits in the last 255 seconds

Dec 20 15:55:01 grey postfix/smtpd\[16278\]: NOQUEUE: reject: RCPT from unknown\[177.139.130.157\]: 554 5.7.1 Service unavailable\; Client host \[177.139.130.157\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?177.139.130.157\; from=\ to=\ proto=ESMTP helo=\<177-139-130-157.dsl.telesp.net.br\>
...

Unauthorized IMAP connection attempt

1576853700 - 12/20/2019 15:55:00 Host: 118.140.9.82/118.140.9.82 Port: 445 TCP Blocked

firewall-block, port(s): 445/tcp

(From eric@talkwithcustomer.com) Hi,

You know it’s true…

Your competition just can’t hold a candle to the way you DELIVER real solutions to your customers on your website naturalhealthdcs.com.

But it’s a shame when good people who need what you have to offer wind up settling for second best or even worse.

Not only do they deserve better, you deserve to be at the top of their list.
 
TalkWithCustomer can reliably turn your website naturalhealthdcs.com into a serious, lead generating machine.

With TalkWithCustomer installed on your site, visitors can either call you immediately or schedule a call for you in the future.
 
And the difference to your business can be staggering – up to 100X more leads could be yours, just by giving TalkWithCustomer a FREE 14 Day Test Drive.
 
There’s absolutely NO risk to you, so CLICK HERE http://www.talkwithcustomer.com to sign up for this free test drive now.  

Tons more leads? You deserve it.

Sincerely,
Eric
PS:  Odds are, you won’t have long to wai

Dec 20 16:08:15 vps691689 sshd[6537]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.64.9
Dec 20 16:08:17 vps691689 sshd[6537]: Failed password for invalid user cindelyn from 158.69.64.9 port 43564 ssh2
...

2019-12-20T15:47:24.002669scmdmz1 sshd[4218]: Invalid user prasolov from 107.170.113.190 port 42730
2019-12-20T15:47:24.005269scmdmz1 sshd[4218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.113.190
2019-12-20T15:47:24.002669scmdmz1 sshd[4218]: Invalid user prasolov from 107.170.113.190 port 42730
2019-12-20T15:47:25.872949scmdmz1 sshd[4218]: Failed password for invalid user prasolov from 107.170.113.190 port 42730 ssh2
2019-12-20T15:55:19.044665scmdmz1 sshd[4918]: Invalid user marjorie from 107.170.113.190 port 46891
...

Dec 17 11:46:18 lamijardin sshd[6815]: Invalid user server from 51.254.140.235
Dec 17 11:46:18 lamijardin sshd[6815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.140.235
Dec 17 11:46:20 lamijardin sshd[6815]: Failed password for invalid user server from 51.254.140.235 port 53010 ssh2
Dec 17 11:46:20 lamijardin sshd[6815]: Received disconnect from 51.254.140.235 port 53010:11: Bye Bye [preauth]
Dec 17 11:46:20 lamijardin sshd[6815]: Disconnected from 51.254.140.235 port 53010 [preauth]
Dec 17 11:54:56 lamijardin sshd[6833]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.140.235  user=r.r
Dec 17 11:54:59 lamijardin sshd[6833]: Failed password for r.r from 51.254.140.235 port 47732 ssh2
Dec 17 11:54:59 lamijardin sshd[6833]: Received disconnect from 51.254.140.235 port 47732:11: Bye Bye [preauth]
Dec 17 11:54:59 lamijardin sshd[6833]: Disconnected from 51.254.140.235 port 477........
-------------------------------

Dec 20 16:30:05 ns41 sshd[20350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.152.159.31
Dec 20 16:30:05 ns41 sshd[20350]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.152.159.31

Dec 20 15:36:05 Ubuntu-1404-trusty-64-minimal sshd\[32272\]: Invalid user guest from 118.126.112.72
Dec 20 15:36:05 Ubuntu-1404-trusty-64-minimal sshd\[32272\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.126.112.72
Dec 20 15:36:07 Ubuntu-1404-trusty-64-minimal sshd\[32272\]: Failed password for invalid user guest from 118.126.112.72 port 56928 ssh2
Dec 20 16:00:16 Ubuntu-1404-trusty-64-minimal sshd\[16255\]: Invalid user tq from 118.126.112.72
Dec 20 16:00:16 Ubuntu-1404-trusty-64-minimal sshd\[16255\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.126.112.72