Feb  2 20:10:57 hpm sshd\[23000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.ip-54-38-55.eu  user=root
Feb  2 20:10:59 hpm sshd\[23000\]: Failed password for root from 54.38.55.151 port 36260 ssh2
Feb  2 20:14:25 hpm sshd\[23134\]: Invalid user daniel from 54.38.55.151
Feb  2 20:14:25 hpm sshd\[23134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.ip-54-38-55.eu
Feb  2 20:14:27 hpm sshd\[23134\]: Failed password for invalid user daniel from 54.38.55.151 port 55788 ssh2

Received: from p-mtain009.msg.pkvw.co.charter.net ([107.14.174.244])
          by cdptpa-fep09.email.rr.com
          (InterMail vM.8.04.03.24 201-2389-100-172-20151028) with ESMTP
          id <20200202195213.ZYQT15580.cdptpa-fep09.email.rr.com@p-mtain009.msg.pkvw.co.charter.net>
          for ; Sun, 2 Feb 2020 19:52:13 +0000
Received: from p-impin020.msg.pkvw.co.charter.net ([47.43.26.179])
          by p-mtain009.msg.pkvw.co.charter.net
          (InterMail vM.9.01.00.037.1 201-2473-137-122-172) with ESMTP
          id <20200202195212.YMCZ29913.p-mtain009.msg.pkvw.co.charter.net@p-impin020.msg.pkvw.co.charter.net>
          for ; Sun, 2 Feb 2020 19:52:12 +0000
Received: from mde-web-02.ig-1.net ([158.58.178.109])
	by cmsmtp with ESMTP
	id yLHvie4TkFQaHyLHwiC3hu; Sun, 02 Feb 2020 19:52:12 +000

Feb  3 01:28:22 plusreed sshd[18599]: Invalid user Change_123 from 35.192.174.234
...

Feb  3 07:05:00 markkoudstaal sshd[30962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.187
Feb  3 07:05:02 markkoudstaal sshd[30962]: Failed password for invalid user saunder from 106.12.132.187 port 47692 ssh2
Feb  3 07:06:19 markkoudstaal sshd[31211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.132.187

POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1 404 10161 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36

Unauthorized connection attempt detected from IP address 185.183.120.29 to port 2220 [J]

(sshd) Failed SSH login from 122.51.247.107 (CN/China/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Feb  3 04:40:01 andromeda sshd[912]: Invalid user ts from 122.51.247.107 port 55118
Feb  3 04:40:03 andromeda sshd[912]: Failed password for invalid user ts from 122.51.247.107 port 55118 ssh2
Feb  3 04:53:00 andromeda sshd[1562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.247.107  user=root

Automatic report - XMLRPC Attack

Brute forcing email accounts

2020-02-02T23:40:20.3851281495-001 sshd[16604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.206.12
2020-02-02T23:40:20.3742541495-001 sshd[16604]: Invalid user test from 62.234.206.12 port 45956
2020-02-02T23:40:22.5588571495-001 sshd[16604]: Failed password for invalid user test from 62.234.206.12 port 45956 ssh2
2020-02-03T00:41:26.1811551495-001 sshd[19596]: Invalid user usuario from 62.234.206.12 port 55708
2020-02-03T00:41:26.1842501495-001 sshd[19596]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.206.12
2020-02-03T00:41:26.1811551495-001 sshd[19596]: Invalid user usuario from 62.234.206.12 port 55708
2020-02-03T00:41:28.6333971495-001 sshd[19596]: Failed password for invalid user usuario from 62.234.206.12 port 55708 ssh2
2020-02-03T00:44:10.8941451495-001 sshd[19775]: Invalid user endo from 62.234.206.12 port 45884
2020-02-03T00:44:10.9012421495-001 sshd[19775]: pam_unix(sshd:aut
...

POST /9678.php HTTP/1.1 404 10064 Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0)

Unauthorized connection attempt detected from IP address 193.57.40.38 to port 2375 [J]

Feb  3 06:10:47 zulu412 sshd\[21475\]: Invalid user constructor from 82.64.192.161 port 36716
Feb  3 06:10:47 zulu412 sshd\[21475\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.192.161
Feb  3 06:10:49 zulu412 sshd\[21475\]: Failed password for invalid user constructor from 82.64.192.161 port 36716 ssh2
...

Feb  3 07:23:43 debian-2gb-nbg1-2 kernel: \[2970275.939911\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=93.174.95.110 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=44949 PROTO=TCP SPT=51323 DPT=4706 WINDOW=1024 RES=0x00 SYN URGP=0

POST /index.php HTTP/1.1 404 10057 index.php?contactMozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)