Registration form abuse

(From eric@talkwithwebvisitor.com) Hey there, I just found your site, quick question…

My name’s Eric, I found savannahhillsfamilychiropractic.com after doing a quick search – you showed up near the top of the rankings, so whatever you’re doing for SEO, looks like it’s working well.

So here’s my question – what happens AFTER someone lands on your site?  Anything?

Research tells us at least 70% of the people who find your site, after a quick once-over, they disappear… forever.

That means that all the work and effort you put into getting them to show up, goes down the tubes.

Why would you want all that good work – and the great site you’ve built – go to waste?

Because the odds are they’ll just skip over calling or even grabbing their phone, leaving you high and dry.

But here’s a thought… what if you could make it super-simple for someone to raise their hand, say, “okay, let’s talk” without requiring them to even pull their cell phone from their pocket?
  
You can – thanks to revolutionary

9,23-07/07 [bc04/m182] PostRequest-Spammer scoring: Durban01

3,91-04/03 [bc03/m127] PostRequest-Spammer scoring: Durban01

(From eric@talkwithwebvisitor.com) Cool website!

My name’s Eric, and I just found your site - perlinechiropractic.com - while surfing the net. You showed up at the top of the search results, so I checked you out. Looks like what you’re doing is pretty cool.
 
But if you don’t mind me asking – after someone like me stumbles across perlinechiropractic.com, what usually happens?

Is your site generating leads for your business? 
 
I’m guessing some, but I also bet you’d like more… studies show that 7 out 10 who land on a site wind up leaving without a trace.

Not good.

Here’s a thought – what if there was an easy way for every visitor to “raise their hand” to get a phone call from you INSTANTLY… the second they hit your site and said, “call me now.”

You can –
  
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It lets you know IMMEDIATELY – so that you can talk to that lead while they’re literally lookin

(From eric@talkwithwebvisitor.com) Cool website!

My name’s Eric, and I just found your site - fpchiro.com - while surfing the net. You showed up at the top of the search results, so I checked you out. Looks like what you’re doing is pretty cool.
 
But if you don’t mind me asking – after someone like me stumbles across fpchiro.com, what usually happens?

Is your site generating leads for your business? 
 
I’m guessing some, but I also bet you’d like more… studies show that 7 out 10 who land on a site wind up leaving without a trace.

Not good.

Here’s a thought – what if there was an easy way for every visitor to “raise their hand” to get a phone call from you INSTANTLY… the second they hit your site and said, “call me now.”

You can –
  
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It lets you know IMMEDIATELY – so that you can talk to that lead while they’re literally looking over your site.

CLI

(From eric@talkwithcustomer.com) Hi,

You know it’s true…

Your competition just can’t hold a candle to the way you DELIVER real solutions to your customers on your website aquilinochiro.com.

But it’s a shame when good people who need what you have to offer wind up settling for second best or even worse.

Not only do they deserve better, you deserve to be at the top of their list.
 
TalkWithCustomer can reliably turn your website aquilinochiro.com into a serious, lead generating machine.

With TalkWithCustomer installed on your site, visitors can either call you immediately or schedule a call for you in the future.
 
And the difference to your business can be staggering – up to 100X more leads could be yours, just by giving TalkWithCustomer a FREE 14 Day Test Drive.
 
There’s absolutely NO risk to you, so CLICK HERE http://www.talkwithcustomer.com to sign up for this free test drive now.  

Tons more leads? You deserve it.

Sincerely,
Eric
PS:  Odds are, you won’t have long to wait befo

(From eric@talkwithcustomer.com) Hi,

You know it’s true…

Your competition just can’t hold a candle to the way you DELIVER real solutions to your customers on your website moreyfamilychiro.com.

But it’s a shame when good people who need what you have to offer wind up settling for second best or even worse.

Not only do they deserve better, you deserve to be at the top of their list.
 
TalkWithCustomer can reliably turn your website moreyfamilychiro.com into a serious, lead generating machine.

With TalkWithCustomer installed on your site, visitors can either call you immediately or schedule a call for you in the future.
 
And the difference to your business can be staggering – up to 100X more leads could be yours, just by giving TalkWithCustomer a FREE 14 Day Test Drive.
 
There’s absolutely NO risk to you, so CLICK HERE http://www.talkwithcustomer.com to sign up for this free test drive now.  

Tons more leads? You deserve it.

Sincerely,
Eric
PS:  Odds are, you won’t have long to wai

(From eric@talkwithcustomer.com) 
Hi,

Let’s take a quick trip to Tomorrow-land.

I’m not talking about a theme park, I’m talking about your business’s future…

Don’t worry, we won’t even need a crystal ball.  

Just imagine… 

… a future where the money you invest in driving traffic to your site bissland.com pays off with tons of calls from qualified leads.
 
And the difference between what you experienced in the past is staggering – you’re seeing 10X, 20X, 50X, even up to a 100X more leads coming from your website bissland.com.  Leads that are already engaged with what you have to offer and are ready to learn more and even open their wallets.

Seeing all this taking place in your business, you think back: What did I do only a short time ago that made such a huge difference?

And then it hits you: You took advantage of a free 14 day Test Drive of TalkWithCustomer.

You installed TalkWithCustomer on bissland.com – it was a snap.

And practically overnight customers started engaging more r

0,66-14/07 [bc02/m44] PostRequest-Spammer scoring: zurich

Sep 28 23:49:46 corona-Z97-D3H sshd[44573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.186.145.9  user=root
Sep 28 23:49:49 corona-Z97-D3H sshd[44573]: Failed password for root from 220.186.145.9 port 49954 ssh2
...

20 attempts against mh-ssh on rock

Phishing scam

Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-28T23:44:45Z and 2020-09-28T23:52:59Z

2020-09-29T04:45:43.357164randservbullet-proofcloud-66.localdomain sshd[31247]: Invalid user oracle from 51.178.45.204 port 37509
2020-09-29T04:45:43.361416randservbullet-proofcloud-66.localdomain sshd[31247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.ip-51-178-45.eu
2020-09-29T04:45:43.357164randservbullet-proofcloud-66.localdomain sshd[31247]: Invalid user oracle from 51.178.45.204 port 37509
2020-09-29T04:45:45.981221randservbullet-proofcloud-66.localdomain sshd[31247]: Failed password for invalid user oracle from 51.178.45.204 port 37509 ssh2
...

Brute forcing email accounts

Sep 29 05:17:19 MainVPS sshd[21285]: Invalid user rr from 207.180.231.146 port 44154
Sep 29 05:17:19 MainVPS sshd[21285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.180.231.146
Sep 29 05:17:19 MainVPS sshd[21285]: Invalid user rr from 207.180.231.146 port 44154
Sep 29 05:17:21 MainVPS sshd[21285]: Failed password for invalid user rr from 207.180.231.146 port 44154 ssh2
Sep 29 05:21:11 MainVPS sshd[26346]: Invalid user rafli from 207.180.231.146 port 53010
...

2020-09-29T03:15:58.451820dmca.cloudsearch.cf sshd[17560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.238.113.126  user=root
2020-09-29T03:16:00.799765dmca.cloudsearch.cf sshd[17560]: Failed password for root from 124.238.113.126 port 59765 ssh2
2020-09-29T03:16:03.962824dmca.cloudsearch.cf sshd[17566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.238.113.126  user=root
2020-09-29T03:16:05.994944dmca.cloudsearch.cf sshd[17566]: Failed password for root from 124.238.113.126 port 33760 ssh2
2020-09-29T03:16:09.813936dmca.cloudsearch.cf sshd[17569]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.238.113.126  user=root
2020-09-29T03:16:11.670240dmca.cloudsearch.cf sshd[17569]: Failed password for root from 124.238.113.126 port 35639 ssh2
2020-09-29T03:16:16.148382dmca.cloudsearch.cf sshd[17576]: pam_unix(sshd:auth): authentication failure; logname= ui
...

Sep 29 01:16:02 myhostname sshd[7303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141  user=r.r
Sep 29 01:16:03 myhostname sshd[7303]: Failed password for r.r from 45.14.148.141 port 53122 ssh2
Sep 29 01:16:03 myhostname sshd[7303]: Received disconnect from 45.14.148.141 port 53122:11: Bye Bye [preauth]
Sep 29 01:16:03 myhostname sshd[7303]: Disconnected from 45.14.148.141 port 53122 [preauth]
Sep 29 01:28:04 myhostname sshd[20778]: Invalid user nagios3 from 45.14.148.141
Sep 29 01:28:04 myhostname sshd[20778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.14.148.141


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.14.148.141

Sep 29 14:29:04 localhost sshd[2289703]: Invalid user ak47 from 210.184.2.66 port 44570
...

Sep 28 22:24:24 ns sshd[5072]: Connection from 165.232.47.126 port 36548 on 134.119.36.27 port 22
Sep 28 22:24:24 ns sshd[5072]: Invalid user gpadmin from 165.232.47.126 port 36548
Sep 28 22:24:24 ns sshd[5072]: Failed password for invalid user gpadmin from 165.232.47.126 port 36548 ssh2
Sep 28 22:24:24 ns sshd[5072]: Received disconnect from 165.232.47.126 port 36548:11: Bye Bye [preauth]
Sep 28 22:24:24 ns sshd[5072]: Disconnected from 165.232.47.126 port 36548 [preauth]
Sep 28 22:34:06 ns sshd[27574]: Connection from 165.232.47.126 port 55150 on 134.119.36.27 port 22
Sep 28 22:34:07 ns sshd[27574]: User r.r from 165.232.47.126 not allowed because not listed in AllowUsers
Sep 28 22:34:07 ns sshd[27574]: Failed password for invalid user r.r from 165.232.47.126 port 55150 ssh2
Sep 28 22:34:07 ns sshd[27574]: Received disconnect from 165.232.47.126 port 55150:11: Bye Bye [preauth]
Sep 28 22:34:07 ns sshd[27574]: Disconnected from 165.232.47.126 port 55150 [preauth]
Sep 2........
-------------------------------

Sep 29 04:25:38 ns3164893 sshd[20084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.105.187
Sep 29 04:25:40 ns3164893 sshd[20084]: Failed password for invalid user 8 from 182.75.105.187 port 13445 ssh2
...

37.187.132.132 - - [29/Sep/2020:04:46:51 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
37.187.132.132 - - [29/Sep/2020:04:46:51 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
37.187.132.132 - - [29/Sep/2020:04:46:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

DATE:2020-09-28 22:40:56, IP:115.96.131.119, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)

[N3.H3.VM3] Port Scanner Detected Blocked by UFW