Unauthorised access (Jul 17) SRC=159.89.136.78 LEN=40 TTL=238 ID=11577 TCP DPT=3389 WINDOW=1024 SYN 
Unauthorised access (Jul 12) SRC=159.89.136.78 LEN=40 TTL=238 ID=1462 TCP DPT=3389 WINDOW=1024 SYN

[FriJul1714:08:56.4393522020][:error][pid23169:tid47244880406272][client173.203.70.234:59164][client173.203.70.234]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\$mozilla\^\|mozilla/[45]\\\\\\\\.[1-9]\|\^mozilla/4\\\\\\\\.0\$\)"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"426"][id"330131"][rev"3"][msg"Atomicorp.comWAFRules:MaliciousBotBlocked\(FakeMozillaUserAgentStringDetected\)"][severity"CRITICAL"][hostname"www.photo-events.ch"][uri"/index.php"][unique_id"XxGU2FJGlvUOex5zyHbiTgAAAI0"]\,referer:www.photo-events.ch[FriJul1714:09:20.2304052020][:error][pid22997:tid47244895115008][client173.203.70.234:46223][client173.203.70.234]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"\(\?:\$mozilla\^\|mozilla/[45]\\\\\\\\.[1-9]\|\^mozilla/4\\\\\\\\.0\$\)"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"426"][id"330131"][rev"3"][msg"Atomicorp.com

Automatic report - Port Scan Attack

Brute force attempt

(From ericajacksonmi0@yahoo.com) Hi, 

We're wondering if you'd be interested in a 'dofollow' backlink to kestenchiro.com from our DA52 website?

Our website is dedicated to facts/education, and so can host articles on pretty much any topic.

If you wish us to write the article then it's just $70. This is a one-time fee, there are no extra charges and this is due prior to the order starting.

If you wish to write the article yourself, then it's $50 and you can pay once the article has been published.

Also: Once the article has been published, and your backlink has been added, it will be shared out to over 2.7 million social media followers. This means you aren't just getting the high valued backlink, you're also getting the potential of more traffic to your site.

If you're interested, please reply back to this email, including the word 'interested' in the Subject Field.

Not sure what DA is? Have a read here: https://moz.com/learn/seo/domain-authority

Kind Regards,
Erica

Failed password for invalid user rstudio from 59.149.68.33 port 50464 ssh2

Failed password for invalid user beauty from 5.196.64.61 port 37262 ssh2

Jul 12 07:43:40 Invalid user postgres from 206.189.211.146 port 49414

ZGrab Application Layer Scanner Detection

Jul 16 22:42:23 olgosrv01 sshd[7672]: Invalid user vtl from 13.64.65.0
Jul 16 22:42:23 olgosrv01 sshd[7672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.64.65.0 
Jul 16 22:42:25 olgosrv01 sshd[7672]: Failed password for invalid user vtl from 13.64.65.0 port 38818 ssh2
Jul 16 22:42:26 olgosrv01 sshd[7672]: Received disconnect from 13.64.65.0: 11: Bye Bye [preauth]
Jul 16 22:50:19 olgosrv01 sshd[8160]: Invalid user ma from 13.64.65.0
Jul 16 22:50:19 olgosrv01 sshd[8160]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.64.65.0 
Jul 16 22:50:21 olgosrv01 sshd[8160]: Failed password for invalid user ma from 13.64.65.0 port 44618 ssh2
Jul 16 22:50:21 olgosrv01 sshd[8160]: Received disconnect from 13.64.65.0: 11: Bye Bye [preauth]
Jul 16 22:55:15 olgosrv01 sshd[8464]: Invalid user testappl from 13.64.65.0
Jul 16 22:55:15 olgosrv01 sshd[8464]: pam_unix(sshd:auth): authentication failure; l........
-------------------------------

firewall-block, port(s): 5955/tcp, 5961/tcp

(sshd) Failed SSH login from 167.99.157.37 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 17 13:54:44 localhost sshd[12427]: Invalid user ubuntu from 167.99.157.37 port 51296
Jul 17 13:54:45 localhost sshd[12427]: Failed password for invalid user ubuntu from 167.99.157.37 port 51296 ssh2
Jul 17 14:06:53 localhost sshd[13272]: Invalid user cumulus from 167.99.157.37 port 35456
Jul 17 14:06:56 localhost sshd[13272]: Failed password for invalid user cumulus from 167.99.157.37 port 35456 ssh2
Jul 17 14:12:42 localhost sshd[13631]: Invalid user wildfly from 167.99.157.37 port 53194

Jul 17 12:05:00 game-panel sshd[4774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.63.170
Jul 17 12:05:02 game-panel sshd[4774]: Failed password for invalid user hen from 118.25.63.170 port 62216 ssh2
Jul 17 12:09:50 game-panel sshd[5176]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.63.170

firewall-block, port(s): 23015/tcp, 23064/tcp, 23085/tcp, 23112/tcp, 23139/tcp, 23154/tcp, 23182/tcp, 23204/tcp, 23251/tcp, 23278/tcp, 23288/tcp, 23303/tcp, 23336/tcp, 23350/tcp, 23364/tcp, 23387/tcp, 23419/tcp, 23442/tcp, 23448/tcp, 23459/tcp, 23504/tcp, 23510/tcp, 23577/tcp, 23603/tcp, 23604/tcp, 23720/tcp, 23761/tcp, 23763/tcp, 23783/tcp, 23787/tcp, 23835/tcp, 23953/tcp, 23973/tcp

Unauthorized connection attempt from IP address 94.29.126.1 on Port 445(SMB)