[2020-09-09 21:51:55] SECURITY[4624] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2020-09-09T21:51:55.851+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="",SessionID="1879519154-1021175523-1511529352",LocalAddress="IPV4/UDP/51.255.2.242/5060",RemoteAddress="IPV4/UDP/216.151.180.88/63809",Challenge="1599681115/efa64791062f8c6b733313f2e4739ba2",Response="abb6bd0c615242b0e42e5a9f711ff798",ExpectedResponse=""
[2020-09-09 21:51:56] SECURITY[4624] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2020-09-09T21:51:56.007+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="",SessionID="1879519154-1021175523-1511529352",LocalAddress="IPV4/UDP/51.255.2.242/5060",RemoteAddress="IPV4/UDP/216.151.180.88/63809",Challenge="1599681115/efa64791062f8c6b733313f2e4739ba2",Response="acc59618587c0c26439599bb23c62445",ExpectedResponse=""
[2020-09-09 21:51:56] SECURITY[4624] res_security_log.c: SecurityEvent="Challe
...

[2020-09-09 21:51:55] SECURITY[4624] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2020-09-09T21:51:55.851+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="",SessionID="1879519154-1021175523-1511529352",LocalAddress="IPV4/UDP/51.255.2.242/5060",RemoteAddress="IPV4/UDP/216.151.180.88/63809",Challenge="1599681115/efa64791062f8c6b733313f2e4739ba2",Response="abb6bd0c615242b0e42e5a9f711ff798",ExpectedResponse=""
[2020-09-09 21:51:56] SECURITY[4624] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2020-09-09T21:51:56.007+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="",SessionID="1879519154-1021175523-1511529352",LocalAddress="IPV4/UDP/51.255.2.242/5060",RemoteAddress="IPV4/UDP/216.151.180.88/63809",Challenge="1599681115/efa64791062f8c6b733313f2e4739ba2",Response="acc59618587c0c26439599bb23c62445",ExpectedResponse=""
[2020-09-09 21:51:56] SECURITY[4624] res_security_log.c: SecurityEvent="Challe
...

[2020-08-23 17:14:36] NOTICE[1185] chan_sip.c: Registration from '' failed for '216.151.180.238:50095' - Wrong password
[2020-08-23 17:14:36] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-23T17:14:36.495-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9756",SessionID="0x7f10c43e3a48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.151.180.238/50095",Challenge="25c43d35",ReceivedChallenge="25c43d35",ReceivedHash="a767ebbafa78a69506b9015e2956184b"
[2020-08-23 17:15:16] NOTICE[1185] chan_sip.c: Registration from '' failed for '216.151.180.238:50801' - Wrong password
[2020-08-23 17:15:16] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-23T17:15:16.291-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9756",SessionID="0x7f10c45459a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.151
...

[2020-08-22 14:22:27] NOTICE[1185] chan_sip.c: Registration from '' failed for '216.151.180.238:50543' - Wrong password
[2020-08-22 14:22:27] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-22T14:22:27.971-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9170",SessionID="0x7f10c4245bd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.151.180.238/50543",Challenge="7072434e",ReceivedChallenge="7072434e",ReceivedHash="46fdddc7a368e56808d0065e3b8b9c0c"
[2020-08-22 14:22:37] NOTICE[1185] chan_sip.c: Registration from '' failed for '216.151.180.238:57159' - Wrong password
[2020-08-22 14:22:37] SECURITY[1203] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-22T14:22:37.291-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9920",SessionID="0x7f10c405a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.151
...

Registration form abuse

Registration form abuse

(From sam.fallegeros@businesspromoted.live) cactusflowerwc.com is currently receiving  211  clicks from organic traffic. However, your competition is crushing it  You can view detailed traffic analysis at  https://www.spyfu.com/overview/domain?query=cactusflowerwc.com

211  clicks are certainly not enough. We can certainly do better! We need to do better. It is not that difficult. With in-depth keyword research and on-page optimization it is doable. We will reverse engineer competitor's link building strategies and get the links from similar sources. 

Its perfect time to plan your marketing strategy. You have created good website but your site will not rank in Google until content and images are  optimized correctly. We need to optimize your website for search engines and make it search engine friendly. 

I have analyzed your site in-depth and you can view your website audit report at

https://businesspromoted.websiteauditserver.com/cactusflowerwc.com

Your website is the reflection of your busines

[2020-07-12 17:51:11] NOTICE[1150][C-00002ad9] chan_sip.c: Call from '' (216.151.180.177:49222) to extension '705011972595725668' rejected because extension not found in context 'public'.
[2020-07-12 17:51:11] SECURITY[1167] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-12T17:51:11.781-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="705011972595725668",SessionID="0x7fcb4c4c4328",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.151.180.177/49222",ACLName="no_extension_match"
[2020-07-12 17:58:43] NOTICE[1150][C-00002ade] chan_sip.c: Call from '' (216.151.180.177:60022) to extension '706011972595725668' rejected because extension not found in context 'public'.
...

[2020-07-12 10:22:07] NOTICE[1150][C-00002873] chan_sip.c: Call from '' (216.151.180.177:59219) to extension '652011972595725668' rejected because extension not found in context 'public'.
[2020-07-12 10:22:07] SECURITY[1167] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-12T10:22:07.172-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="652011972595725668",SessionID="0x7fcb4c25c888",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.151.180.177/59219",ACLName="no_extension_match"
[2020-07-12 10:30:29] NOTICE[1150][C-00002886] chan_sip.c: Call from '' (216.151.180.177:58328) to extension '653011972595725668' rejected because extension not found in context 'public'.
[2020-07-12 10:30:29] SECURITY[1167] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-12T10:30:29.853-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="653011972595725668",SessionID="0x7fcb4c39d6d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",Remote
...

WordPress Bruteforce on Authentication page

[2020-07-11 02:14:31] NOTICE[1150][C-00001d3a] chan_sip.c: Call from '' (216.151.180.177:49363) to extension '419011972595725668' rejected because extension not found in context 'public'.
[2020-07-11 02:14:31] SECURITY[1167] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-11T02:14:31.655-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="419011972595725668",SessionID="0x7fcb4c0dfe08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.151.180.177/49363",ACLName="no_extension_match"
[2020-07-11 02:18:23] NOTICE[1150][C-00001d3b] chan_sip.c: Call from '' (216.151.180.177:63090) to extension '420011972595725668' rejected because extension not found in context 'public'.
[2020-07-11 02:18:23] SECURITY[1167] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-11T02:18:23.527-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="420011972595725668",SessionID="0x7fcb4c25c888",LocalAddress="IPV4/UDP/192.168.244.6/5060",Remote
...

[2020-07-08 09:25:59] NOTICE[1150][C-000009fa] chan_sip.c: Call from '' (216.151.180.177:57784) to extension '6011972592277524' rejected because extension not found in context 'public'.
[2020-07-08 09:25:59] SECURITY[1167] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-08T09:25:59.033-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="6011972592277524",SessionID="0x7fcb4c03b8a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.151.180.177/57784",ACLName="no_extension_match"
[2020-07-08 09:30:09] NOTICE[1150][C-000009fe] chan_sip.c: Call from '' (216.151.180.177:52566) to extension '7011972592277524' rejected because extension not found in context 'public'.
[2020-07-08 09:30:09] SECURITY[1167] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-08T09:30:09.256-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="7011972592277524",SessionID="0x7fcb4c07a778",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress=
...

Fail2Ban Ban Triggered

(From zoeramzy06@gmail.com) Hi,

How are you doing? I aim to provide you a high quality, free of cost guest post article for your amazing website. I can send you some really great topic ideas for this purpose which would be relevant to your website niche for sure.

If my topic ideas happen to appeal you, I’ll send over the article. I would just need a backlink in return of the article. The backlink needs to be within the body of the article.

Please let me know your response to this, if I shall send topic ideas?

Looking forward.

Regards.

Zoe Ramzy

Web Scraping

"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:

ssh brute force

116.202.114.112 - - \[09/Jun/2020:16:42:15 +0200\] "POST /wp-login.php HTTP/1.0" 200 5508 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
116.202.114.112 - - \[09/Jun/2020:16:42:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 5345 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
116.202.114.112 - - \[09/Jun/2020:16:42:17 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"

Jun  9 12:20:46 ip-172-31-61-156 sshd[14411]: Invalid user do from 139.59.129.45
Jun  9 12:20:46 ip-172-31-61-156 sshd[14411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.129.45
Jun  9 12:20:46 ip-172-31-61-156 sshd[14411]: Invalid user do from 139.59.129.45
Jun  9 12:20:49 ip-172-31-61-156 sshd[14411]: Failed password for invalid user do from 139.59.129.45 port 45330 ssh2
Jun  9 12:25:14 ip-172-31-61-156 sshd[14672]: Invalid user oracle from 139.59.129.45
...

Jun  9 14:02:57 debian-2gb-nbg1-2 kernel: \[13962912.766549\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=192.35.168.32 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=54321 PROTO=TCP SPT=44272 DPT=5903 WINDOW=65535 RES=0x00 SYN URGP=0

Jun  9 09:05:18 ny01 sshd[2078]: Failed password for root from 178.128.242.233 port 57970 ssh2
Jun  9 09:08:41 ny01 sshd[2532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.242.233
Jun  9 09:08:43 ny01 sshd[2532]: Failed password for invalid user bVM from 178.128.242.233 port 60890 ssh2

$f2bV_matches

$f2bV_matches

91.121.101.77 - - \[09/Jun/2020:14:45:19 +0200\] "POST /wp-login.php HTTP/1.0" 200 7021 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
91.121.101.77 - - \[09/Jun/2020:14:45:20 +0200\] "POST /wp-login.php HTTP/1.0" 200 6835 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
91.121.101.77 - - \[09/Jun/2020:14:45:22 +0200\] "POST /wp-login.php HTTP/1.0" 200 6844 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"

Jun  9 11:57:19 server1 sshd\[27268\]: Invalid user castis from 185.240.65.251
Jun  9 11:57:19 server1 sshd\[27268\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.240.65.251 
Jun  9 11:57:21 server1 sshd\[27268\]: Failed password for invalid user castis from 185.240.65.251 port 6664 ssh2
Jun  9 12:06:06 server1 sshd\[30215\]: Invalid user castis from 185.240.65.251
Jun  9 12:06:06 server1 sshd\[30215\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.240.65.251 
...

(sshd) Failed SSH login from 194.87.93.189 (RU/Russia/ptr.ruvds.com): 5 in the last 3600 secs

Unauthorized connection attempt from IP address 94.25.228.60 on Port 445(SMB)

(sshd) Failed SSH login from 168.90.89.35 (BR/Brazil/168.90.89.35.megalinkpi.net.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun  9 20:02:26 amsweb01 sshd[4852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.90.89.35  user=root
Jun  9 20:02:27 amsweb01 sshd[4852]: Failed password for root from 168.90.89.35 port 49618 ssh2
Jun  9 20:08:58 amsweb01 sshd[5668]: Invalid user raju from 168.90.89.35 port 58235
Jun  9 20:09:00 amsweb01 sshd[5668]: Failed password for invalid user raju from 168.90.89.35 port 58235 ssh2
Jun  9 20:11:20 amsweb01 sshd[6057]: Invalid user keibi01 from 168.90.89.35 port 46112

Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)

(sshd) Failed SSH login from 35.198.28.121 (US/United States/121.28.198.35.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun  9 18:04:04 s1 sshd[7989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.198.28.121  user=root
Jun  9 18:04:05 s1 sshd[7989]: Failed password for root from 35.198.28.121 port 55586 ssh2
Jun  9 18:16:53 s1 sshd[8313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.198.28.121  user=root
Jun  9 18:16:55 s1 sshd[8313]: Failed password for root from 35.198.28.121 port 54718 ssh2
Jun  9 18:20:15 s1 sshd[8380]: Invalid user mysql2 from 35.198.28.121 port 46066