Unauthorised access (Aug 16) SRC=192.210.189.100 LEN=40 TTL=244 ID=58775 TCP DPT=445 WINDOW=1024 SYN

Icarus honeypot on github

Unauthorized connection attempt detected from IP address 192.210.189.68 to port 1433 [T]

(From eric@talkwithwebvisitor.com) Hi, my name is Eric and I’m betting you’d like your website advancedchirosolutions.com to generate more leads.

Here’s how:
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It signals you as soon as they say they’re interested – so that you can talk to that lead while they’re still there at advancedchirosolutions.com.

Talk With Web Visitor – CLICK HERE http://www.talkwithwebvisitor.com for a live demo now.

And now that you’ve got their phone number, our new SMS Text With Lead feature enables you to start a text (SMS) conversation – answer questions, provide more info, and close a deal that way.

If they don’t take you up on your offer then, just follow up with text messages for new offers, content links, even just “how you doing?” notes to build a relationship.

CLICK HERE http://www.talkwithwebvisitor.com to discover what Talk With Web Visitor can do for your business.

(From eric@talkwithwebvisitor.com) Hi, my name is Eric and I’m betting you’d like your website newtonpainrelief.com to generate more leads.

Here’s how:
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It signals you as soon as they say they’re interested – so that you can talk to that lead while they’re still there at newtonpainrelief.com.

Talk With Web Visitor – CLICK HERE http://www.talkwithwebvisitor.com for a live demo now.

And now that you’ve got their phone number, our new SMS Text With Lead feature enables you to start a text (SMS) conversation – answer questions, provide more info, and close a deal that way.

If they don’t take you up on your offer then, just follow up with text messages for new offers, content links, even just “how you doing?” notes to build a relationship.

CLICK HERE http://www.talkwithwebvisitor.com to discover what Talk With Web Visitor can do for your business.

The differe

(From eric@talkwithwebvisitor.com) Hey, this is Eric and I ran across rasselfamilychiropractic.com a few minutes ago.

Looks great… but now what?

By that I mean, when someone like me finds your website – either through Search or just bouncing around – what happens next?  Do you get a lot of leads from your site, or at least enough to make you happy?

Honestly, most business websites fall a bit short when it comes to generating paying customers. Studies show that 70% of a site’s visitors disappear and are gone forever after just a moment.

Here’s an idea…
 
How about making it really EASY for every visitor who shows up to get a personal phone call you as soon as they hit your site…
 
You can –
  
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It signals you the moment they let you know they’re interested – so that you can talk to that lead while they’re literally looking over your site.

CLICK HERE htt

03/30/2020-00:49:24.614962 192.210.189.120 Protocol: 6 ET SCAN NMAP -sS window 1024

Port probing on unauthorized port 445

(From eric@talkwithcustomer.com) 
Hi,

My name is Eric and I was looking at a few different sites online and came across your site staytunedchiropractic.com.  I must say - your website is very impressive.  I am seeing your website on the first page of the Search Engine. 

Have you noticed that 70 percent of visitors who leave your website will never return?  In most cases, this means that 95 percent to 98 percent of your marketing efforts are going to waste, not to mention that you are losing more money in customer acquisition costs than you need to.
 
As a business person, the time and money you put into your marketing efforts is extremely valuable.  So why let it go to waste?  Our users have seen staggering improvements in conversions with insane growths of 150 percent going upwards of 785 percent. Are you ready to unlock the highest conversion revenue from each of your website visitors?  

TalkWithCustomer is a widget which captures a website visitor’s Name, Email address and Phone Number and then

(From eric@talkwithcustomer.com)  
Hey,

You have a website nervedoc.org, right?

Of course you do. I am looking at your website now.

It gets traffic every day – that you’re probably spending $2 / $4 / $10 or more a click to get.  Not including all of the work you put into creating social media, videos, blog posts, emails, and so on.

So you’re investing seriously in getting people to that site.

But how’s it working?  Great? Okay?  Not so much?

If that answer could be better, then it’s likely you’re putting a lot of time, effort, and money into an approach that’s not paying off like it should.

Now… imagine doubling your lead conversion in just minutes… In fact, I’ll go even better.
 
You could actually get up to 100X more conversions!

I’m not making this up.  As Chris Smith, best-selling author of The Conversion Code says: Speed is essential - there is a 100x decrease in Leads when a Lead is contacted within 14 minutes vs being contacted within 5 minutes.

He’s backed up by a study a

SPAM Bot Host Blocked!

Unauthorised access (Jan 26) SRC=192.210.189.120 LEN=40 TTL=244 ID=15168 TCP DPT=1433 WINDOW=1024 SYN 
Unauthorised access (Jan 23) SRC=192.210.189.120 LEN=40 TTL=244 ID=52913 TCP DPT=445 WINDOW=1024 SYN

(From eric@talkwithcustomer.com) 
Hi,

Let’s take a quick trip to Tomorrow-land.

I’m not talking about a theme park, I’m talking about your business’s future…

Don’t worry, we won’t even need a crystal ball.  

Just imagine… 

… a future where the money you invest in driving traffic to your site wellnessfirstclinics.com pays off with tons of calls from qualified leads.
 
And the difference between what you experienced in the past is staggering – you’re seeing 10X, 20X, 50X, even up to a 100X more leads coming from your website wellnessfirstclinics.com.  Leads that are already engaged with what you have to offer and are ready to learn more and even open their wallets.

Seeing all this taking place in your business, you think back: What did I do only a short time ago that made such a huge difference?

And then it hits you: You took advantage of a free 14 day Test Drive of TalkWithCustomer.

You installed TalkWithCustomer on wellnessfirstclinics.com – it was a snap.

And practically overnig

1576996019 - 12/22/2019 07:26:59 Host: 192.210.189.120/192.210.189.120 Port: 445 TCP Blocked

Unauthorized connection attempt detected from IP address 192.210.189.69 to port 445

Honeypot attack, port: 445, PTR: 192-210-189-120-host.colocrossing.com.

SpamScore above: 10.0

2020-04-24T14:01:43.878279v22018076590370373 sshd[25976]: Invalid user admin from 62.234.142.49 port 60822
2020-04-24T14:01:43.884867v22018076590370373 sshd[25976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.142.49
2020-04-24T14:01:43.878279v22018076590370373 sshd[25976]: Invalid user admin from 62.234.142.49 port 60822
2020-04-24T14:01:45.474014v22018076590370373 sshd[25976]: Failed password for invalid user admin from 62.234.142.49 port 60822 ssh2
2020-04-24T14:05:23.293433v22018076590370373 sshd[15513]: Invalid user erick from 62.234.142.49 port 41816
...

[2020-04-24 11:31:02] NOTICE[1170][C-00004af9] chan_sip.c: Call from '' (103.145.12.87:52634) to extension '011441482455983' rejected because extension not found in context 'public'.
[2020-04-24 11:31:02] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-24T11:31:02.223-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441482455983",SessionID="0x7f6c083c7058",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.87/52634",ACLName="no_extension_match"
[2020-04-24 11:31:02] NOTICE[1170][C-00004afa] chan_sip.c: Call from '' (103.145.12.87:56500) to extension '011442037698349' rejected because extension not found in context 'public'.
[2020-04-24 11:31:02] SECURITY[1184] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-04-24T11:31:02.833-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442037698349",SessionID="0x7f6c08378858",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/
...

TCP Port Scanning

3 failed Login Attempts - (Email Service)

Apr 24 14:05:18 * sshd[30788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.236.235.47
Apr 24 14:05:19 * sshd[30788]: Failed password for invalid user nfs from 34.236.235.47 port 46098 ssh2

Apr 24 14:28:18 srv01 sshd[8086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.129.215  user=root
Apr 24 14:28:19 srv01 sshd[8086]: Failed password for root from 118.25.129.215 port 47678 ssh2
Apr 24 14:30:48 srv01 sshd[8269]: Invalid user mbsetupuser from 118.25.129.215 port 45380
Apr 24 14:30:48 srv01 sshd[8269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.129.215
Apr 24 14:30:48 srv01 sshd[8269]: Invalid user mbsetupuser from 118.25.129.215 port 45380
Apr 24 14:30:49 srv01 sshd[8269]: Failed password for invalid user mbsetupuser from 118.25.129.215 port 45380 ssh2
...

Apr 24 18:42:32 gw1 sshd[31446]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.122.149.144
Apr 24 18:42:34 gw1 sshd[31446]: Failed password for invalid user chef from 186.122.149.144 port 55534 ssh2
...

Automatic report - Port Scan Attack

Apr 24 11:45:29 host sshd[16648]: Invalid user anna from 118.24.249.20 port 52660
Apr 24 11:45:29 host sshd[16648]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.249.20
Apr 24 11:45:30 host sshd[16648]: Failed password for invalid user anna from 118.24.249.20 port 52660 ssh2
Apr 24 11:45:31 host sshd[16648]: Received disconnect from 118.24.249.20 port 52660:11: Bye Bye [preauth]
Apr 24 11:45:31 host sshd[16648]: Disconnected from invalid user anna 118.24.249.20 port 52660 [preauth]
Apr 24 11:49:47 host sshd[17813]: Invalid user margaret from 118.24.249.20 port 39694
Apr 24 11:49:47 host sshd[17813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.249.20
Apr 24 11:49:50 host sshd[17813]: Failed password for invalid user margaret from 118.24.249.20 port 39694 ssh2
Apr 24 11:49:50 host sshd[17813]: Received disconnect from 118.24.249.20 port 39694:11: Bye Bye [preauth]
Apr 24 11........
-------------------------------

Dovecot Invalid User Login Attempt.

detected by Fail2Ban

Apr 24 17:29:03 dev0-dcde-rnet sshd[10170]: Failed password for root from 190.8.149.146 port 57753 ssh2
Apr 24 17:33:30 dev0-dcde-rnet sshd[10197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.8.149.146
Apr 24 17:33:32 dev0-dcde-rnet sshd[10197]: Failed password for invalid user teamspeak3 from 190.8.149.146 port 33161 ssh2

2020-04-24T05:05:58.150624-07:00 suse-nuc sshd[10843]: Invalid user admin1 from 119.152.142.128 port 61176
...

Lines containing failures of 180.165.53.103
Apr 23 16:18:39 shared04 sshd[2024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.165.53.103  user=r.r
Apr 23 16:18:41 shared04 sshd[2024]: Failed password for r.r from 180.165.53.103 port 41665 ssh2
Apr 23 16:18:41 shared04 sshd[2024]: Received disconnect from 180.165.53.103 port 41665:11: Bye Bye [preauth]
Apr 23 16:18:41 shared04 sshd[2024]: Disconnected from authenticating user r.r 180.165.53.103 port 41665 [preauth]
Apr 23 16:32:44 shared04 sshd[8086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.165.53.103  user=r.r
Apr 23 16:32:46 shared04 sshd[8086]: Failed password for r.r from 180.165.53.103 port 58338 ssh2
Apr 23 16:32:47 shared04 sshd[8086]: Received disconnect from 180.165.53.103 port 58338:11: Bye Bye [preauth]
Apr 23 16:32:47 shared04 sshd[8086]: Disconnected from authenticating user r.r 180.165.53.103 port 58338 [preaut........
------------------------------