Honeypot attack, port: 5555, PTR: static.vnpt.vn.

2020-09-05T02:59:58.124541paragon sshd[134037]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.133.91
2020-09-05T02:59:58.120819paragon sshd[134037]: Invalid user vitor from 54.39.133.91 port 54350
2020-09-05T02:59:59.977600paragon sshd[134037]: Failed password for invalid user vitor from 54.39.133.91 port 54350 ssh2
2020-09-05T03:02:14.344829paragon sshd[134076]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.133.91  user=root
2020-09-05T03:02:16.537739paragon sshd[134076]: Failed password for root from 54.39.133.91 port 39312 ssh2
...

firewall-block, port(s): 14087/tcp

Sep  5 01:28:42 server sshd[28865]: Failed none for root from 222.186.175.148 port 30158 ssh2
Sep  5 01:28:45 server sshd[28865]: Failed password for root from 222.186.175.148 port 30158 ssh2
Sep  5 01:28:49 server sshd[28865]: Failed password for root from 222.186.175.148 port 30158 ssh2

bruteforce detected

Brute-force attempt banned

(From eric@talkwithwebvisitor.com) Cool website!

My name’s Eric, and I just found your site - myvenicechiropractor.com - while surfing the net. You showed up at the top of the search results, so I checked you out. Looks like what you’re doing is pretty cool.
 
But if you don’t mind me asking – after someone like me stumbles across myvenicechiropractor.com, what usually happens?

Is your site generating leads for your business? 
 
I’m guessing some, but I also bet you’d like more… studies show that 7 out 10 who land on a site wind up leaving without a trace.

Not good.

Here’s a thought – what if there was an easy way for every visitor to “raise their hand” to get a phone call from you INSTANTLY… the second they hit your site and said, “call me now.”

You can –
  
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It lets you know IMMEDIATELY – so that you can talk to that lead while they’re literally look

Dovecot Invalid User Login Attempt.

2020-09-05T01:22:22+0200 Failed SSH Authentication/Brute Force Attack. (Server 5)

Invalid user admin from 194.180.224.130 port 43700

2020-09-05 02:00:28 dovecot_login authenticator failed for \(User\) \[45.142.120.89\]: 535 Incorrect authentication data \(set_id=attached@org.ua\)2020-09-05 02:01:04 dovecot_login authenticator failed for \(User\) \[45.142.120.89\]: 535 Incorrect authentication data \(set_id=watcher@org.ua\)2020-09-05 02:01:40 dovecot_login authenticator failed for \(User\) \[45.142.120.89\]: 535 Incorrect authentication data \(set_id=s219@org.ua\)
...

Sep  5 00:08:16 rocket sshd[20235]: Failed password for root from 112.85.42.172 port 50330 ssh2
Sep  5 00:08:26 rocket sshd[20235]: Failed password for root from 112.85.42.172 port 50330 ssh2
Sep  5 00:08:29 rocket sshd[20235]: Failed password for root from 112.85.42.172 port 50330 ssh2
Sep  5 00:08:29 rocket sshd[20235]: error: maximum authentication attempts exceeded for root from 112.85.42.172 port 50330 ssh2 [preauth]
...

Sep  5 01:04:04 marvibiene sshd[645]: Failed password for root from 222.186.175.215 port 64178 ssh2
Sep  5 01:04:09 marvibiene sshd[645]: Failed password for root from 222.186.175.215 port 64178 ssh2

TCP Port: 443     invalid blocked  Listed on   zen-spamhaus      Client xx.xx.6.14     (164)

Sep  5 01:19:43 srv01 postfix/smtpd\[17266\]: warning: unknown\[45.142.120.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  5 01:19:58 srv01 postfix/smtpd\[19045\]: warning: unknown\[45.142.120.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  5 01:20:15 srv01 postfix/smtpd\[12712\]: warning: unknown\[45.142.120.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  5 01:20:20 srv01 postfix/smtpd\[18976\]: warning: unknown\[45.142.120.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep  5 01:20:24 srv01 postfix/smtpd\[19045\]: warning: unknown\[45.142.120.117\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...