Malicious Scanning [Masscan - https://github.com/robertdavidgraham/masscan] @ 2019-11-24 13:27:40

(From eric@talkwithcustomer.com) Hey,

You have a website whatcomchiropractic.com, right?

Of course you do. I am looking at your website now.

It gets traffic every day – that you’re probably spending $2 / $4 / $10 or more a click to get.  Not including all of the work you put into creating social media, videos, blog posts, emails, and so on.

So you’re investing seriously in getting people to that site.

But how’s it working?  Great? Okay?  Not so much?

If that answer could be better, then it’s likely you’re putting a lot of time, effort, and money into an approach that’s not paying off like it should.

Now… imagine doubling your lead conversion in just minutes… In fact, I’ll go even better.
 
You could actually get up to 100X more conversions!

I’m not making this up.  As Chris Smith, best-selling author of The Conversion Code says: Speed is essential - there is a 100x decrease in Leads when a Lead is contacted within 14 minutes vs being contacted within 5 minutes.

He’s backed up by a

Nov 24 10:09:42 microserver sshd[54051]: Invalid user pi from 45.132.194.42 port 49351
Nov 24 10:09:42 microserver sshd[54051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.132.194.42
Nov 24 10:09:44 microserver sshd[54051]: Failed password for invalid user pi from 45.132.194.42 port 49351 ssh2
Nov 24 10:09:45 microserver sshd[54053]: Invalid user pi from 45.132.194.42 port 49571
Nov 24 10:09:45 microserver sshd[54053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.132.194.42
Nov 24 10:50:09 microserver sshd[59551]: Invalid user user from 45.132.194.42 port 63108
Nov 24 10:50:09 microserver sshd[59551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.132.194.42
Nov 24 10:50:12 microserver sshd[59551]: Failed password for invalid user user from 45.132.194.42 port 63108 ssh2
Nov 24 10:50:13 microserver sshd[59575]: Invalid user test from 45.132.194.42 port 63355
Nov 24 10:50:13 m

Rude login attack (16 tries in 1d)

FTP Brute-Force reported by Fail2Ban

Fail2Ban Ban Triggered

Nov 24 07:40:54 SilenceServices sshd[17448]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.80.142.84
Nov 24 07:40:56 SilenceServices sshd[17448]: Failed password for invalid user gayler from 110.80.142.84 port 48652 ssh2
Nov 24 07:48:17 SilenceServices sshd[19556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.80.142.84

Nov 24 08:41:11 eventyay sshd[21091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.27.53
Nov 24 08:41:14 eventyay sshd[21091]: Failed password for invalid user minecraft from 212.64.27.53 port 56236 ssh2
Nov 24 08:45:15 eventyay sshd[21150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.27.53
...

Telnet/23 MH Probe, BF, Hack -

11/24/2019-07:27:27.793409 36.189.242.187 Protocol: 6 ET SCAN NMAP -sS window 1024

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/185.62.188.218/ 
 
 NL - 1H : (18)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : NL 
 NAME ASN : ASN49349 
 
 IP : 185.62.188.218 
 
 CIDR : 185.62.188.0/24 
 
 PREFIX COUNT : 34 
 
 UNIQUE IP COUNT : 8704 
 
 
 ATTACKS DETECTED ASN49349 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-11-24 07:17:37 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

firewall-block, port(s): 17/udp, 69/udp, 111/udp, 137/udp, 161/udp, 623/udp, 5683/udp, 10001/udp, 11211/udp, 27018/udp, 47808/udp

Automatic report - XMLRPC Attack

2019-11-24T14:08:38.478623host3.slimhost.com.ua sshd[197502]: Invalid user guest from 54.39.147.2 port 46059
2019-11-24T14:08:38.493018host3.slimhost.com.ua sshd[197502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.ip-54-39-147.net
2019-11-24T14:08:38.478623host3.slimhost.com.ua sshd[197502]: Invalid user guest from 54.39.147.2 port 46059
2019-11-24T14:08:40.347832host3.slimhost.com.ua sshd[197502]: Failed password for invalid user guest from 54.39.147.2 port 46059 ssh2
2019-11-24T14:51:10.130708host3.slimhost.com.ua sshd[245122]: Invalid user markovich from 54.39.147.2 port 52895
2019-11-24T14:51:10.139374host3.slimhost.com.ua sshd[245122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.ip-54-39-147.net
2019-11-24T14:51:10.130708host3.slimhost.com.ua sshd[245122]: Invalid user markovich from 54.39.147.2 port 52895
2019-11-24T14:51:12.668780host3.slimhost.com.ua sshd[245122]: Failed password for in
...

Nov 24 09:31:19 MK-Soft-Root2 sshd[18879]: Failed password for root from 129.226.130.156 port 41038 ssh2
...