47.75.172.46 - - [01/Apr/2020:09:14:13 +0200] "GET /wp-login.php HTTP/1.1" 200 5702 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
47.75.172.46 - - [01/Apr/2020:09:14:16 +0200] "POST /wp-login.php HTTP/1.1" 200 6601 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
47.75.172.46 - - [01/Apr/2020:09:14:18 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

1585730789 - 04/01/2020 15:46:29 Host: 223.71.167.164/223.71.167.164 Port: 37 TCP Blocked
...

Apr  1 08:32:14 vlre-nyc-1 sshd\[842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.31.31.68  user=root
Apr  1 08:32:16 vlre-nyc-1 sshd\[842\]: Failed password for root from 123.31.31.68 port 46318 ssh2
Apr  1 08:36:51 vlre-nyc-1 sshd\[921\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.31.31.68  user=root
Apr  1 08:36:53 vlre-nyc-1 sshd\[921\]: Failed password for root from 123.31.31.68 port 58786 ssh2
Apr  1 08:41:29 vlre-nyc-1 sshd\[995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.31.31.68  user=root
...

'Fail2Ban'

port scan and connect, tcp 443 (https)

Apr  1 04:54:40 server1 sshd\[19351\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.71.2.165  user=root
Apr  1 04:54:42 server1 sshd\[19351\]: Failed password for root from 101.71.2.165 port 34802 ssh2
Apr  1 04:57:49 server1 sshd\[20741\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.71.2.165  user=root
Apr  1 04:57:51 server1 sshd\[20741\]: Failed password for root from 101.71.2.165 port 34803 ssh2
Apr  1 05:00:56 server1 sshd\[21723\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.71.2.165  user=root
...

Apr  1 12:28:52 markkoudstaal sshd[9545]: Failed password for root from 222.186.42.75 port 30442 ssh2
Apr  1 12:28:54 markkoudstaal sshd[9545]: Failed password for root from 222.186.42.75 port 30442 ssh2
Apr  1 12:28:56 markkoudstaal sshd[9545]: Failed password for root from 222.186.42.75 port 30442 ssh2

Apr  1 10:06:36 [HOSTNAME] sshd[5772]: Invalid user dondo from 118.27.37.223 port 41304
Apr  1 10:06:36 [HOSTNAME] sshd[5772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.27.37.223
Apr  1 10:06:38 [HOSTNAME] sshd[5772]: Failed password for invalid user dondo from 118.27.37.223 port 41304 ssh2
...

(From eric@talkwithwebvisitor.com) Hey, this is Eric and I ran across drjenniferbrandon.com a few minutes ago.

Looks great… but now what?

By that I mean, when someone like me finds your website – either through Search or just bouncing around – what happens next?  Do you get a lot of leads from your site, or at least enough to make you happy?

Honestly, most business websites fall a bit short when it comes to generating paying customers. Studies show that 70% of a site’s visitors disappear and are gone forever after just a moment.

Here’s an idea…
 
How about making it really EASY for every visitor who shows up to get a personal phone call you as soon as they hit your site…
 
You can –
  
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It signals you the moment they let you know they’re interested – so that you can talk to that lead while they’re literally looking over your site.

CLICK HERE http://www

Apr  1 11:08:13 vmd26974 sshd[13456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.131.86
Apr  1 11:08:15 vmd26974 sshd[13456]: Failed password for invalid user kawano from 106.52.131.86 port 36520 ssh2
...

SSH invalid-user multiple login attempts

Icarus honeypot on github

[Wed Apr 01 04:13:51.139790 2020] [:error] [pid 76631] [client 148.72.23.181:41538] [client 148.72.23.181] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "91"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ws24vmsma01.ufn.edu.br"] [uri "/xmlrpc.php"] [unique_id "XoQ-LxMVuRP@kmurvlmb9QAAACU"]
...

2020-04-01T10:42:32.489027shield sshd\[30895\]: Invalid user bnq_ops from 41.221.86.21 port 50861
2020-04-01T10:42:32.493258shield sshd\[30895\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.221.86.21
2020-04-01T10:42:34.235820shield sshd\[30895\]: Failed password for invalid user bnq_ops from 41.221.86.21 port 50861 ssh2
2020-04-01T10:48:12.285911shield sshd\[31699\]: Invalid user admin from 41.221.86.21 port 56132
2020-04-01T10:48:12.289941shield sshd\[31699\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.221.86.21

2020-04-01T10:44:04.840817homeassistant sshd[29159]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.222.56.80  user=root
2020-04-01T10:44:06.549577homeassistant sshd[29159]: Failed password for root from 61.222.56.80 port 47454 ssh2
...