Automatic report - Port Scan Attack

Dec  9 06:20:24 localhost sshd\[27561\]: Invalid user work from 159.65.149.114
Dec  9 06:20:24 localhost sshd\[27561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.149.114
Dec  9 06:20:26 localhost sshd\[27561\]: Failed password for invalid user work from 159.65.149.114 port 41136 ssh2
Dec  9 06:26:47 localhost sshd\[28204\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.149.114  user=root
Dec  9 06:26:49 localhost sshd\[28204\]: Failed password for root from 159.65.149.114 port 51024 ssh2
...

Dec  9 06:23:17 vps691689 sshd[2793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.107
Dec  9 06:23:19 vps691689 sshd[2793]: Failed password for invalid user cott from 51.75.123.107 port 38438 ssh2
Dec  9 06:28:43 vps691689 sshd[3378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.123.107
...

Dec  9 06:29:02 srv206 sshd[26423]: Invalid user ching from 118.143.198.3
Dec  9 06:29:02 srv206 sshd[26423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.143.198.3
Dec  9 06:29:02 srv206 sshd[26423]: Invalid user ching from 118.143.198.3
Dec  9 06:29:04 srv206 sshd[26423]: Failed password for invalid user ching from 118.143.198.3 port 41832 ssh2
...

Unauthorized connection attempt detected from IP address 78.183.151.209 to port 2323

Fail2Ban - SSH Bruteforce Attempt

Dec  9 00:13:57 mail sshd\[46373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.135  user=root
...

Dec  9 15:11:24 our-server-hostname postfix/smtpd[24507]: connect from unknown[193.17.4.148]
Dec x@x
Dec  9 15:11:27 our-server-hostname postfix/smtpd[24507]: 63B05A4007E: client=unknown[193.17.4.148]
Dec  9 15:11:28 our-server-hostname postfix/smtpd[12456]: 397CAA401F0: client=unknown[127.0.0.1], orig_client=unknown[193.17.4.148]
Dec  9 15:11:28 our-server-hostname amavis[14449]: (14449-09) Passed CLEAN, [193.17.4.148] [193.17.4.148] , mail_id: R-FFHbJkyFL7, Hhostnames: -, size: 19073, queued_as: 397CAA401F0, 138 ms
Dec  9 15:11:28 our-server-hostname postfix/smtpd[24507]: disconnect from unknown[193.17.4.148]
Dec  9 15:11:30 our-server-hostname postfix/smtpd[3899]: connect from unknown[193.17.4.148]
Dec x@x
Dec  9 15:11:31 our-server-hostname postfix/smtpd[3899]: CA953A401F3: client=unknown[193.17.4.148]
Dec  9 15:11:32 our-server-hostname postfix/smtpd[12456]: B2E8AA4007E: client=unknown[127.0.0.1], orig_client=unknown[193.17.4.148]
Dec  9 15:11:32 our-server-ho........
-------------------------------

185.81.157.140 was recorded 6 times by 6 hosts attempting to connect to the following ports: 11211. Incident counter (4h, 24h, all-time): 6, 6, 125

Dec  9 06:10:00 h2177944 sshd\[12829\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.220.228  user=root
Dec  9 06:10:02 h2177944 sshd\[12829\]: Failed password for root from 192.241.220.228 port 59784 ssh2
Dec  9 06:17:26 h2177944 sshd\[13120\]: Invalid user rrogozinski from 192.241.220.228 port 40434
Dec  9 06:17:26 h2177944 sshd\[13120\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.220.228
...

Dec  9 06:47:48 dedicated sshd[7172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.64  user=root
Dec  9 06:47:50 dedicated sshd[7172]: Failed password for root from 49.88.112.64 port 17665 ssh2

Dec  8 19:12:38 sachi sshd\[2510\]: Invalid user lawrenc from 82.196.15.195
Dec  8 19:12:38 sachi sshd\[2510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.196.15.195
Dec  8 19:12:40 sachi sshd\[2510\]: Failed password for invalid user lawrenc from 82.196.15.195 port 34910 ssh2
Dec  8 19:20:54 sachi sshd\[3397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.196.15.195  user=root
Dec  8 19:20:56 sachi sshd\[3397\]: Failed password for root from 82.196.15.195 port 42862 ssh2

(From lawlorsanabria76@gmail.com) Hi!

Have you tried searching on Google for the products/services your website offers? Does your business site appear on the first page? I'm an expert Online marketing analyst, and I know exactly how to improve your website's rank in search engines. If you're not appearing on the top of search results, you're inevitably missing out on a lot of opportunities. This is because your potential clients are having a difficult time finding you online since they can't find you on the first page of search results. 

I've been in the field of SEO for over a decade now and I can help you fix that. I'm offering you a free consultation, so I can show you how the optimization can make your website rank higher on Google and other search engines. Kindly let me know if you're interested, so I can give you a call at a time that works best for you. I hope to speak with you soon. 

 
Bria

2019-12-08T23:52:23.283192homeassistant sshd[22344]: Failed password for invalid user wehnnetta from 193.112.4.12 port 37390 ssh2
2019-12-09T04:56:40.626877homeassistant sshd[31157]: Invalid user mnbvcxz from 193.112.4.12 port 43502
2019-12-09T04:56:40.633665homeassistant sshd[31157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.4.12
...

Dec  8 19:30:47 web9 sshd\[24522\]: Invalid user desktop from 115.114.111.94
Dec  8 19:30:47 web9 sshd\[24522\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.114.111.94
Dec  8 19:30:49 web9 sshd\[24522\]: Failed password for invalid user desktop from 115.114.111.94 port 47962 ssh2
Dec  8 19:37:45 web9 sshd\[25627\]: Invalid user guest from 115.114.111.94
Dec  8 19:37:45 web9 sshd\[25627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.114.111.94