2019-07-09T21:47:32.022614scmdmz1 sshd\[27638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.74.27  user=root
2019-07-09T21:47:33.978797scmdmz1 sshd\[27638\]: Failed password for root from 162.247.74.27 port 44670 ssh2
2019-07-09T21:47:36.845922scmdmz1 sshd\[27638\]: Failed password for root from 162.247.74.27 port 44670 ssh2
...

Jul  8 16:36:47 twattle sshd[10549]: Received disconnect from 165.22.92=
.182: 11: Bye Bye [preauth]
Jul  8 16:36:53 twattle sshd[10551]: Invalid user admin from 165.22.92.=
182
Jul  8 16:36:53 twattle sshd[10551]: Received disconnect from 165.22.92=
.182: 11: Bye Bye [preauth]
Jul  8 16:36:58 twattle sshd[10553]: Invalid user admin from 165.22.92.=
182
Jul  8 16:36:58 twattle sshd[10553]: Received disconnect from 165.22.92=
.182: 11: Bye Bye [preauth]
Jul  8 16:37:03 twattle sshd[10555]: Invalid user user from 165.22.92.1=
82
Jul  8 16:37:03 twattle sshd[10555]: Received disconnect from 165.22.92=
.182: 11: Bye Bye [preauth]
Jul  8 16:37:08 twattle sshd[10557]: Invalid user ubnt from 165.22.92.1=
82
Jul  8 16:37:08 twattle sshd[10557]: Received disconnect from 165.22.92=
.182: 11: Bye Bye [preauth]
Jul  8 16:37:13 twattle sshd[10559]: Invalid user admin from 165.22.92.=
182
Jul  8 16:37:13 twattle sshd[10559]: Received disconnect from 165.22.92=
.182: 11: Bye Bye [prea........
-------------------------------

[TueJul0916:56:58.3630442019][:error][pid16162:tid47246338987776][client122.114.157.137:17797][client122.114.157.137]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"/wp-config.php"atREQUEST_FILENAME.[file"/etc/apache2/conf.d/modsec_rules/99_asl_jitp.conf"][line"3440"][id"381206"][rev"1"][msg"Atomicorp.comWAFRules-VirtualJustInTimePatch:AccesstoWordPressconfigurationfileblocked"][data"/wp-config.php"][severity"CRITICAL"][hostname"136.243.224.57"][uri"/wp-config.php"][unique_id"XSSrOm7J6M9A46BoN7KWTwAAAIs"][TueJul0916:58:24.0178372019][:error][pid16162:tid47246338987776][client122.114.157.137:17797][client122.114.157.137]ModSecurity:Accessdeniedwithcode404\(phase2\).Patternmatch"\(\?:/images/stories/\|/components/com_smartformer/files/\|/uploaded_files/user/\|uploads/job-manager-uploads/\).\*\\\\\\\\.php"atREQUEST_URI.[file"/etc/apache2/conf.d/modsec_rules/50_asl_rootkits.conf"][line"71"][id"318812"][rev"2"][msg"Atomicorp.comWAFRules:PossibleAttempttoAccessunauthorize

Sex denně-Rusko
https://telegra.ph/9t11-07-09
Received: from likeline.org (likeline.org [188.225.35.76])
	by email-smtpd.seznam.cz (Seznam SMTPD 1.3.106) with ESMTP; 
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=key1; d=likeline.org;
 h=Message-ID:From:To:Subject:Date:MIME-Version:Content-Type;
 i=info@likeline.org;
From: "Hallie Thompson" 
I just wanted to catch up and let you know that I’ve found and awesome site for you!
It’s a trading site that lets you start trading in under 5 mins!

Port scan: Attack repeated for 24 hours

SSH Brute Force, server-1 sshd[28205]: Failed password for invalid user ts from 27.254.137.144 port 48198 ssh2

port scan/probe/communication attempt

Jul  9 19:58:00 www sshd\[31497\]: Invalid user www from 41.89.160.13 port 55372
...

Unauthorized connection attempt from IP address 218.255.135.38 on Port 445(SMB)

Unauthorized connection attempt from IP address 113.160.172.29 on Port 445(SMB)

Unauthorized connection attempt from IP address 177.96.18.174 on Port 445(SMB)

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-09 16:56:53,051 INFO [amun_request_handler] PortScan Detected on Port: 445 (58.71.62.18)

Unauthorized connection attempt from IP address 117.4.51.8 on Port 445(SMB)

2019-07-09T19:13:52.787887abusebot-2.cloudsearch.cf sshd\[13205\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.251.129  user=root

firewall-block, port(s): 445/tcp