Spamvertised Website

http://i9q.cn/4HpseC
203.195.186.176
server_redirect	temporary

http://k7njjrcwnhi4vyc.ru/
104.27.191.83
104.27.190.83
2606:4700:3034::681b:be53
2606:4700:3030::681b:bf53
server_redirect	temporary

http://k7njjrcwnhi4vyc.ru/uNzu2C/

Received: from 217.78.61.143  (HELO 182.22.12.247) (217.78.61.143)
Return-Path: 
From: "vohrals@gxususwhtbucgoyfu.jp" 
Subject: 本物を確認したいあなたにお届けします
X-Mailer: Microsoft Outlook, Build 10.0.2616

Jul 17 23:34:03 haigwepa sshd[8959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.89.157 
Jul 17 23:34:05 haigwepa sshd[8959]: Failed password for invalid user scp from 139.199.89.157 port 52880 ssh2
...

Invalid user sp from 158.69.110.31 port 36304

Tried sshing with brute force.

Jul 17 21:51:17 localhost sshd\[30727\]: Invalid user admin from 40.124.15.44 port 36510
Jul 17 21:51:17 localhost sshd\[30727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.124.15.44
Jul 17 21:51:18 localhost sshd\[30727\]: Failed password for invalid user admin from 40.124.15.44 port 36510 ssh2
...

2020-07-17T21:27:09.648349shield sshd\[16237\]: Invalid user neo from 51.38.129.120 port 38864
2020-07-17T21:27:09.657972shield sshd\[16237\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.ip-51-38-129.eu
2020-07-17T21:27:11.113985shield sshd\[16237\]: Failed password for invalid user neo from 51.38.129.120 port 38864 ssh2
2020-07-17T21:31:37.262030shield sshd\[16512\]: Invalid user kobayashi from 51.38.129.120 port 55446
2020-07-17T21:31:37.272005shield sshd\[16512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.ip-51-38-129.eu

invalid user

Invalid user omega from 91.134.143.172 port 46090

Jul 17 23:34:33 dev0-dcde-rnet sshd[29320]: Failed password for root from 112.85.42.173 port 11671 ssh2
Jul 17 23:34:36 dev0-dcde-rnet sshd[29320]: Failed password for root from 112.85.42.173 port 11671 ssh2
Jul 17 23:34:39 dev0-dcde-rnet sshd[29320]: Failed password for root from 112.85.42.173 port 11671 ssh2
Jul 17 23:34:46 dev0-dcde-rnet sshd[29320]: error: maximum authentication attempts exceeded for root from 112.85.42.173 port 11671 ssh2 [preauth]

2020-07-17T21:58:58.287394shield sshd\[23808\]: Invalid user fedora from 49.234.43.39 port 42220
2020-07-17T21:58:58.296984shield sshd\[23808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.43.39
2020-07-17T21:59:00.151320shield sshd\[23808\]: Failed password for invalid user fedora from 49.234.43.39 port 42220 ssh2
2020-07-17T22:01:04.758870shield sshd\[24153\]: Invalid user julien from 49.234.43.39 port 46770
2020-07-17T22:01:04.769554shield sshd\[24153\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.234.43.39

fail2ban - Attack against WordPress

2020-07-17T21:27:29.190985shield sshd\[16265\]: Invalid user kush from 122.51.202.157 port 39072
2020-07-17T21:27:29.200296shield sshd\[16265\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.202.157
2020-07-17T21:27:31.395774shield sshd\[16265\]: Failed password for invalid user kush from 122.51.202.157 port 39072 ssh2
2020-07-17T21:31:28.953510shield sshd\[16494\]: Invalid user testuser from 122.51.202.157 port 52482
2020-07-17T21:31:28.962958shield sshd\[16494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.202.157

419. On Jul 17 2020 experienced a Brute Force SSH login attempt -> 1 unique times by 159.65.245.182.

Jul 18 00:03:19 vps639187 sshd\[7425\]: Invalid user admin from 23.102.232.247 port 31908
Jul 18 00:03:19 vps639187 sshd\[7425\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.102.232.247
Jul 18 00:03:21 vps639187 sshd\[7425\]: Failed password for invalid user admin from 23.102.232.247 port 31908 ssh2
...

2020-07-17T21:23:22.876928shield sshd\[16030\]: Invalid user admin from 97.64.120.166 port 38040
2020-07-17T21:23:22.886090shield sshd\[16030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=97.64.120.166.16clouds.com
2020-07-17T21:23:27.186424shield sshd\[16030\]: Failed password for invalid user admin from 97.64.120.166 port 38040 ssh2
2020-07-17T21:31:16.852602shield sshd\[16490\]: Invalid user tech from 97.64.120.166 port 54182
2020-07-17T21:31:16.859942shield sshd\[16490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=97.64.120.166.16clouds.com

mue-0 : Trying access unauthorized files=>/images/jdownloads/screenshots/update.php()