SSH bruteforce (Triggered fail2ban)

//public_html/wp-login.php

Automatic report - Port Scan Attack

(From eric@talkwithcustomer.com)  
Hey,

You have a website livewithvitality.com, right?

Of course you do. I am looking at your website now.

It gets traffic every day – that you’re probably spending $2 / $4 / $10 or more a click to get.  Not including all of the work you put into creating social media, videos, blog posts, emails, and so on.

So you’re investing seriously in getting people to that site.

But how’s it working?  Great? Okay?  Not so much?

If that answer could be better, then it’s likely you’re putting a lot of time, effort, and money into an approach that’s not paying off like it should.

Now… imagine doubling your lead conversion in just minutes… In fact, I’ll go even better.
 
You could actually get up to 100X more conversions!

I’m not making this up.  As Chris Smith, best-selling author of The Conversion Code says: Speed is essential - there is a 100x decrease in Leads when a Lead is contacted within 14 minutes vs being contacted within 5 minutes.

He’s backed up by a

Dec 29 09:49:54 [host] sshd[16421]: Invalid user yashun from 201.161.58.147
Dec 29 09:49:54 [host] sshd[16421]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.161.58.147
Dec 29 09:49:56 [host] sshd[16421]: Failed password for invalid user yashun from 201.161.58.147 port 59016 ssh2

$f2bV_matches

Dec 29 14:01:34 ks10 sshd[928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.12.237 
Dec 29 14:01:36 ks10 sshd[928]: Failed password for invalid user deyke from 178.33.12.237 port 36197 ssh2
...

Dec 29 14:23:37 mout sshd[7372]: Invalid user utente from 139.199.80.67 port 55782

$f2bV_matches

(From eric@talkwithcustomer.com) 
Hi,

Let’s take a quick trip to Tomorrow-land.

I’m not talking about a theme park, I’m talking about your business’s future…

Don’t worry, we won’t even need a crystal ball.  

Just imagine… 

… a future where the money you invest in driving traffic to your site drjeffarnel.com pays off with tons of calls from qualified leads.
 
And the difference between what you experienced in the past is staggering – you’re seeing 10X, 20X, 50X, even up to a 100X more leads coming from your website drjeffarnel.com.  Leads that are already engaged with what you have to offer and are ready to learn more and even open their wallets.

Seeing all this taking place in your business, you think back: What did I do only a short time ago that made such a huge difference?

And then it hits you: You took advantage of a free 14 day Test Drive of TalkWithCustomer.

You installed TalkWithCustomer on drjeffarnel.com – it was a snap.

And practically overnight customers started engagi

Automatic report - SSH Brute-Force Attack

SSH auth scanning - multiple failed logins

2019-12-29T06:20:46.498001shield sshd\[9424\]: Invalid user metta from 106.75.240.46 port 57220
2019-12-29T06:20:46.502248shield sshd\[9424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.240.46
2019-12-29T06:20:48.524313shield sshd\[9424\]: Failed password for invalid user metta from 106.75.240.46 port 57220 ssh2
2019-12-29T06:24:30.091029shield sshd\[10321\]: Invalid user ident from 106.75.240.46 port 54964
2019-12-29T06:24:30.095159shield sshd\[10321\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.240.46

Dec 29 11:06:08 vps46666688 sshd[10897]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.142.199
Dec 29 11:06:10 vps46666688 sshd[10897]: Failed password for invalid user niedra from 188.131.142.199 port 43406 ssh2
...

$f2bV_matches