Automatic report - Banned IP Access

pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.47.106 
Failed password for invalid user test from 159.89.47.106 port 55378 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.47.106

Port Scan
...

Sep 29 18:33:46 cho sshd[3896952]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.141.253 
Sep 29 18:33:46 cho sshd[3896952]: Invalid user cesar from 217.182.141.253 port 54457
Sep 29 18:33:48 cho sshd[3896952]: Failed password for invalid user cesar from 217.182.141.253 port 54457 ssh2
Sep 29 18:37:46 cho sshd[3897073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.141.253  user=root
Sep 29 18:37:48 cho sshd[3897073]: Failed password for root from 217.182.141.253 port 59395 ssh2
...

Sep 29 16:27:57 rancher-0 sshd[373537]: Invalid user samba1 from 106.12.211.254 port 53186
Sep 29 16:27:59 rancher-0 sshd[373537]: Failed password for invalid user samba1 from 106.12.211.254 port 53186 ssh2
...

Sep 29 03:19:31 mail sshd\[29812\]: Invalid user nagios from 106.52.140.195
Sep 29 03:19:31 mail sshd\[29812\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.140.195
...

(From eric@talkwithwebvisitor.com) My name’s Eric and I just came across your website - nassauchiropracticphysicaltherapy.com - in the search results.

Here’s what that means to me…

Your SEO’s working.

You’re getting eyeballs – mine at least.

Your content’s pretty good, wouldn’t change a thing.

BUT…

Eyeballs don’t pay the bills.

CUSTOMERS do.

And studies show that 7 out of 10 visitors to a site like nassauchiropracticphysicaltherapy.com will drop by, take a gander, and then head for the hills without doing anything else.

It’s like they never were even there.

You can fix this.

You can make it super-simple for them to raise their hand, say, “okay, let’s talk” without requiring them to even pull their cell phone from their pocket… thanks to Talk With Web Visitor.

Talk With Web Visitor is a software widget that sits on your site, ready and waiting to capture any visitor’s Name, Email address and Phone Number.  It lets you know immediately – so you can talk to that lead immediate

Sep 29 16:38:19 localhost sshd[7046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.237.182  user=ftp
Sep 29 16:38:22 localhost sshd[7046]: Failed password for ftp from 45.55.237.182 port 43386 ssh2
Sep 29 16:43:08 localhost sshd[7385]: Invalid user tester from 45.55.237.182 port 35260
Sep 29 16:43:08 localhost sshd[7385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.237.182
Sep 29 16:43:08 localhost sshd[7385]: Invalid user tester from 45.55.237.182 port 35260
Sep 29 16:43:11 localhost sshd[7385]: Failed password for invalid user tester from 45.55.237.182 port 35260 ssh2
...

Sep 29 10:31:05 george sshd[6874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.128.158.37  user=root
Sep 29 10:31:08 george sshd[6874]: Failed password for root from 124.128.158.37 port 28456 ssh2
Sep 29 10:35:11 george sshd[6916]: Invalid user cute from 124.128.158.37 port 28457
Sep 29 10:35:11 george sshd[6916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.128.158.37 
Sep 29 10:35:14 george sshd[6916]: Failed password for invalid user cute from 124.128.158.37 port 28457 ssh2
...

Invalid user develop from 111.229.211.66 port 44842

2020-09-29T12:28:33.3556771495-001 sshd[9268]: Invalid user webmaster from 123.207.85.150 port 55096
2020-09-29T12:28:34.8436051495-001 sshd[9268]: Failed password for invalid user webmaster from 123.207.85.150 port 55096 ssh2
2020-09-29T12:32:30.5910661495-001 sshd[9437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.85.150  user=root
2020-09-29T12:32:32.6123701495-001 sshd[9437]: Failed password for root from 123.207.85.150 port 59012 ssh2
2020-09-29T12:36:25.8167551495-001 sshd[9567]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.207.85.150  user=root
2020-09-29T12:36:28.0990531495-001 sshd[9567]: Failed password for root from 123.207.85.150 port 34752 ssh2
...

Sep 29 11:25:50 vlre-nyc-1 sshd\[18241\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.75.156.247  user=root
Sep 29 11:25:53 vlre-nyc-1 sshd\[18241\]: Failed password for root from 218.75.156.247 port 35364 ssh2
Sep 29 11:30:31 vlre-nyc-1 sshd\[18303\]: Invalid user vps from 218.75.156.247
Sep 29 11:30:31 vlre-nyc-1 sshd\[18303\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.75.156.247
Sep 29 11:30:33 vlre-nyc-1 sshd\[18303\]: Failed password for invalid user vps from 218.75.156.247 port 35980 ssh2
...

$f2bV_matches

[2020-09-29 12:33:32] NOTICE[1159] chan_sip.c: Registration from '"2063"' failed for '185.108.129.104:39318' - Wrong password
[2020-09-29 12:33:32] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-29T12:33:32.093-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2063",SessionID="0x7fcaa02d7a38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.108.129.104/39318",Challenge="226bcfe5",ReceivedChallenge="226bcfe5",ReceivedHash="558d95a5ff970526179c7ae89f0292a2"
[2020-09-29 12:33:33] NOTICE[1159] chan_sip.c: Registration from '"2064"' failed for '185.108.129.104:55684' - Wrong password
[2020-09-29 12:33:33] SECURITY[1198] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-29T12:33:33.057-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2064",SessionID="0x7fcaa0092e98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4
...

received a phishing email