10/05/2019-10:00:56.364056 185.209.0.90 Protocol: 6 ET DROP Dshield Block Listed Source group 1

[portscan] Port scan

2019-10-05T09:32:20.169060lon01.zurich-datacenter.net sshd\[27604\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.182  user=root
2019-10-05T09:32:22.723866lon01.zurich-datacenter.net sshd\[27604\]: Failed password for root from 222.186.175.182 port 30380 ssh2
2019-10-05T09:32:26.430008lon01.zurich-datacenter.net sshd\[27604\]: Failed password for root from 222.186.175.182 port 30380 ssh2
2019-10-05T09:32:30.354833lon01.zurich-datacenter.net sshd\[27604\]: Failed password for root from 222.186.175.182 port 30380 ssh2
2019-10-05T09:32:35.163674lon01.zurich-datacenter.net sshd\[27604\]: Failed password for root from 222.186.175.182 port 30380 ssh2
...

10/05/2019-02:40:44.670891 89.248.174.214 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 98

Invalid user pat from 46.101.187.76 port 50098

Oct  4 21:30:19 hanapaa sshd\[19020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.58.166  user=root
Oct  4 21:30:21 hanapaa sshd\[19020\]: Failed password for root from 182.61.58.166 port 36638 ssh2
Oct  4 21:35:07 hanapaa sshd\[19411\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.58.166  user=root
Oct  4 21:35:09 hanapaa sshd\[19411\]: Failed password for root from 182.61.58.166 port 41748 ssh2
Oct  4 21:39:51 hanapaa sshd\[19910\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.58.166  user=root

Automatic report - Port Scan Attack

Oct  5 09:13:09 core sshd[20510]: Invalid user 12#45qwErtasDfgzxCvb from 151.84.105.118 port 39038
Oct  5 09:13:11 core sshd[20510]: Failed password for invalid user 12#45qwErtasDfgzxCvb from 151.84.105.118 port 39038 ssh2
...

xmlrpc attack

Oct  5 09:52:35 meumeu sshd[9440]: Failed password for root from 222.186.173.154 port 49938 ssh2
Oct  5 09:52:40 meumeu sshd[9440]: Failed password for root from 222.186.173.154 port 49938 ssh2
Oct  5 09:52:55 meumeu sshd[9440]: error: maximum authentication attempts exceeded for root from 222.186.173.154 port 49938 ssh2 [preauth]
...

Honeypot attack, port: 445, PTR: 82-64-81-51.subs.proxad.net.

(From gretchen.nichols779@gmail.com) Hello,

I'm quite certain you're aware that most successful businesses always have their website come up on the first page of Google search results since they're more relevant, popular, and more credible compared to the other companies found on page 2 or so on. Have you ever wondered how these websites dominated the first page? It's not at all difficult to achieve! We can put your site on the first page using search engine optimization.

I ran a few tests on your website and found out that there are many keywords you can potentially rank for. These are crucial for you to be easily found while people searching on Google input words relevant to your products or services. To give you an idea of my work, I will send you case studies of websites I've worked with before and how they gained more profit after the optimization.

I'll also give you a free consultation over the phone, and the information about your website can benefit you whether or not you choose to avail of m

Oct  5 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 7 secs\): user=\, method=PLAIN, rip=123.232.125.198, lip=**REMOVED**, TLS, session=\
Oct  5 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=123.232.125.198, lip=**REMOVED**, TLS, session=\
Oct  5 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 7 secs\): user=\, method=PLAIN, rip=123.232.125.198, lip=**REMOVED**, TLS, session=\

Oct  5 08:26:23 vmanager6029 sshd\[14140\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.55.241.3  user=root
Oct  5 08:26:25 vmanager6029 sshd\[14140\]: Failed password for root from 117.55.241.3 port 43006 ssh2
Oct  5 08:31:05 vmanager6029 sshd\[14214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.55.241.3  user=root

Oct  4 21:56:22 tdfoods sshd\[20025\]: Invalid user \&\*\(uioJKL from 91.132.103.64
Oct  4 21:56:22 tdfoods sshd\[20025\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.132.103.64
Oct  4 21:56:25 tdfoods sshd\[20025\]: Failed password for invalid user \&\*\(uioJKL from 91.132.103.64 port 51240 ssh2
Oct  4 22:00:11 tdfoods sshd\[20337\]: Invalid user 123Colorado from 91.132.103.64
Oct  4 22:00:11 tdfoods sshd\[20337\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.132.103.64