May 16 21:54:16 srv01 sshd[6333]: Invalid user imc from 95.85.9.94 port 39528
May 16 21:54:16 srv01 sshd[6333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.9.94
May 16 21:54:16 srv01 sshd[6333]: Invalid user imc from 95.85.9.94 port 39528
May 16 21:54:19 srv01 sshd[6333]: Failed password for invalid user imc from 95.85.9.94 port 39528 ssh2
May 16 22:01:51 srv01 sshd[6507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.85.9.94  user=root
May 16 22:01:53 srv01 sshd[6507]: Failed password for root from 95.85.9.94 port 44066 ssh2
...

2020-05-16T22:34:48.090303rocketchat.forhosting.nl sshd[25960]: Failed password for root from 106.13.173.161 port 58556 ssh2
2020-05-16T22:37:52.702521rocketchat.forhosting.nl sshd[26001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.173.161  user=root
2020-05-16T22:37:54.530965rocketchat.forhosting.nl sshd[26001]: Failed password for root from 106.13.173.161 port 42854 ssh2
...

May 16 22:18:25 web01.agentur-b-2.de postfix/smtpd[2206232]: warning: unknown[185.234.217.48]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 16 22:18:25 web01.agentur-b-2.de postfix/smtpd[2206232]: lost connection after AUTH from unknown[185.234.217.48]
May 16 22:21:22 web01.agentur-b-2.de postfix/smtpd[2206232]: warning: unknown[185.234.217.48]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 16 22:21:22 web01.agentur-b-2.de postfix/smtpd[2206232]: lost connection after AUTH from unknown[185.234.217.48]
May 16 22:23:36 web01.agentur-b-2.de postfix/smtpd[2205757]: warning: unknown[185.234.217.48]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 16 22:23:36 web01.agentur-b-2.de postfix/smtpd[2205757]: lost connection after AUTH from unknown[185.234.217.48]

Attempt to hack Wordpress Login, XMLRPC or other login

(From eric@talkwithwebvisitor.com) Cool website!

My name’s Eric, and I just found your site - ringgoldchiropractic.com - while surfing the net. You showed up at the top of the search results, so I checked you out. Looks like what you’re doing is pretty cool.
 
But if you don’t mind me asking – after someone like me stumbles across ringgoldchiropractic.com, what usually happens?

Is your site generating leads for your business? 
 
I’m guessing some, but I also bet you’d like more… studies show that 7 out 10 who land on a site wind up leaving without a trace.

Not good.

Here’s a thought – what if there was an easy way for every visitor to “raise their hand” to get a phone call from you INSTANTLY… the second they hit your site and said, “call me now.”

You can –
  
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It lets you know IMMEDIATELY – so that you can talk to that lead while they’re literally look

May 16 22:55:09 ns381471 sshd[26389]: Failed password for root from 49.233.202.62 port 53196 ssh2

May 16 22:34:35 santamaria sshd\[29685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.9.210.52  user=root
May 16 22:34:38 santamaria sshd\[29685\]: Failed password for root from 59.9.210.52 port 48946 ssh2
May 16 22:37:53 santamaria sshd\[29710\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.9.210.52  user=root
...

May 16 22:16:33 mail.srvfarm.net postfix/smtpd[2812805]: NOQUEUE: reject: RCPT from unknown[69.94.135.194]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
May 16 22:17:19 mail.srvfarm.net postfix/smtpd[2812174]: NOQUEUE: reject: RCPT from unknown[69.94.135.194]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
May 16 22:17:19 mail.srvfarm.net postfix/smtpd[2812804]: NOQUEUE: reject: RCPT from unknown[69.94.135.194]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
May 16 22:17:19 mail.srvfarm.net postfix/smtpd[2812792]: NOQUEUE: reject: RCPT from unknown[69.94.135.194]: 450 4.

May 16 17:44:43 firewall sshd[7133]: Failed password for root from 222.186.15.158 port 37293 ssh2
May 16 17:44:45 firewall sshd[7133]: Failed password for root from 222.186.15.158 port 37293 ssh2
May 16 17:44:47 firewall sshd[7133]: Failed password for root from 222.186.15.158 port 37293 ssh2
...

Unauthorized SSH login attempts

May 16 22:32:35 mail postfix/smtpd\[17229\]: warning: unknown\[45.142.195.13\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
May 16 22:33:44 mail postfix/smtpd\[17232\]: warning: unknown\[45.142.195.13\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
May 16 23:04:33 mail postfix/smtpd\[17628\]: warning: unknown\[45.142.195.13\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
May 16 23:05:37 mail postfix/smtpd\[17628\]: warning: unknown\[45.142.195.13\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\

detected by Fail2Ban

2020-05-16T23:34:13.671530afi-git.jinr.ru sshd[17405]: Failed password for invalid user hadoop from 51.83.77.224 port 39586 ssh2
2020-05-16T23:37:59.049895afi-git.jinr.ru sshd[18582]: Invalid user mysql from 51.83.77.224 port 47122
2020-05-16T23:37:59.053082afi-git.jinr.ru sshd[18582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=224.ip-51-83-77.eu
2020-05-16T23:37:59.049895afi-git.jinr.ru sshd[18582]: Invalid user mysql from 51.83.77.224 port 47122
2020-05-16T23:38:00.842023afi-git.jinr.ru sshd[18582]: Failed password for invalid user mysql from 51.83.77.224 port 47122 ssh2
...

frenzy