Nov  3 12:08:55 MK-Soft-VM4 sshd[17804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.87.80.26 
Nov  3 12:08:56 MK-Soft-VM4 sshd[17804]: Failed password for invalid user service from 41.87.80.26 port 11920 ssh2
...

Nov  3 11:32:58 v22018076622670303 sshd\[27056\]: Invalid user pass from 51.38.153.207 port 49454
Nov  3 11:32:58 v22018076622670303 sshd\[27056\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.153.207
Nov  3 11:33:00 v22018076622670303 sshd\[27056\]: Failed password for invalid user pass from 51.38.153.207 port 49454 ssh2
...

2019-11-03T07:45:17.844462shield sshd\[22234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns529890.ip-149-56-23.net  user=root
2019-11-03T07:45:19.647457shield sshd\[22234\]: Failed password for root from 149.56.23.154 port 53854 ssh2
2019-11-03T07:48:59.492527shield sshd\[23418\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns529890.ip-149-56-23.net  user=root
2019-11-03T07:49:01.442007shield sshd\[23418\]: Failed password for root from 149.56.23.154 port 35366 ssh2
2019-11-03T07:52:41.381419shield sshd\[24760\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns529890.ip-149-56-23.net  user=root

xmlrpc attack

(From francoedward98@gmail.com) Hi!

Did you know that the first page of Goggle search results is where all potential clients will be looking at if they're searching for products/services? Does your website appear on the first page of Google search results when you try searching for your products/services? Most of the time, they would just ignore page 2 and so on since the results listed on the first page seem more relevant and are more credible.

I'm very familiar with all the algorithms and methods that search engines use and I am an expert on how to get the most out of it. I'm a freelance online marketing specialist, and I have helped my clients bring their websites to the first page of web searches for more than 10 years now. Also, the cost of my services is something that small businesses can afford.

I can give you a free consultation so you can be better informed of how your website is doing right now, what can be done and what to expect after if this is something that interests you. Kindly write

Chat Spam

port scan and connect, tcp 22 (ssh)

fail2ban honeypot

Unauthorised access (Nov  3) SRC=180.167.201.243 LEN=40 PREC=0x20 TTL=231 ID=55542 TCP DPT=1433 WINDOW=1024 SYN

Nov  3 02:51:01 ny01 sshd[8183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.126.207
Nov  3 02:51:03 ny01 sshd[8183]: Failed password for invalid user abc!QAZXSW from 51.158.126.207 port 38566 ssh2
Nov  3 02:54:48 ny01 sshd[8549]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.126.207

Automatic report - Banned IP Access

Nov  3 04:19:51 ny01 sshd[18160]: Failed password for root from 51.38.129.120 port 60354 ssh2
Nov  3 04:23:14 ny01 sshd[18476]: Failed password for root from 51.38.129.120 port 39646 ssh2

191103  8:52:04 \[Warning\] Access denied for user 'root'@'85.93.20.85' \(using password: YES\)
191103  8:57:12 \[Warning\] Access denied for user 'root'@'85.93.20.85' \(using password: YES\)
191103  9:02:20 \[Warning\] Access denied for user 'root'@'85.93.20.85' \(using password: YES\)
...

Nov  3 05:06:26 debian sshd\[2428\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.76  user=root
Nov  3 05:06:28 debian sshd\[2428\]: Failed password for root from 49.88.112.76 port 45868 ssh2
Nov  3 05:06:30 debian sshd\[2428\]: Failed password for root from 49.88.112.76 port 45868 ssh2
...

Nov  3 06:47:39 server1 dovecot: imap-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=93.131.70.79, lip=185.151.203.50, session=\\
Nov  3 06:47:39 server1 dovecot: imap-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=93.131.70.79, lip=185.151.203.50, session=\\
Nov  3 06:47:39 server1 dovecot: imap-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=93.131.70.79, lip=185.151.203.50, session=\\
Nov  3 06:47:39 server1 dovecot: imap-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=93.131.70.79, lip=185.151.203.50, session=\\
Nov  3 06:47:45 server1 dovecot: imap-login: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=93.131.70.79, lip=185.151.203.50, ses