Registration form abuse

Registration form abuse

Abuse of XMLRPC

(From eric@talkwithwebvisitor.com) Cool website!

My name’s Eric, and I just found your site - performancechiroofga.com - while surfing the net. You showed up at the top of the search results, so I checked you out. Looks like what you’re doing is pretty cool.
 
But if you don’t mind me asking – after someone like me stumbles across performancechiroofga.com, what usually happens?

Is your site generating leads for your business? 
 
I’m guessing some, but I also bet you’d like more… studies show that 7 out 10 who land on a site wind up leaving without a trace.

Not good.

Here’s a thought – what if there was an easy way for every visitor to “raise their hand” to get a phone call from you INSTANTLY… the second they hit your site and said, “call me now.”

You can –
  
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It lets you know IMMEDIATELY – so that you can talk to that lead while they’re literally look

(From eric@talkwithwebvisitor.com) Hey there, I just found your site, quick question…

My name’s Eric, I found savannahhillsfamilychiropractic.com after doing a quick search – you showed up near the top of the rankings, so whatever you’re doing for SEO, looks like it’s working well.

So here’s my question – what happens AFTER someone lands on your site?  Anything?

Research tells us at least 70% of the people who find your site, after a quick once-over, they disappear… forever.

That means that all the work and effort you put into getting them to show up, goes down the tubes.

Why would you want all that good work – and the great site you’ve built – go to waste?

Because the odds are they’ll just skip over calling or even grabbing their phone, leaving you high and dry.

But here’s a thought… what if you could make it super-simple for someone to raise their hand, say, “okay, let’s talk” without requiring them to even pull their cell phone from their pocket?
  
You can – thanks to revolutionary

9,23-07/07 [bc04/m182] PostRequest-Spammer scoring: Durban01

3,91-04/03 [bc03/m127] PostRequest-Spammer scoring: Durban01

(From eric@talkwithwebvisitor.com) Cool website!

My name’s Eric, and I just found your site - perlinechiropractic.com - while surfing the net. You showed up at the top of the search results, so I checked you out. Looks like what you’re doing is pretty cool.
 
But if you don’t mind me asking – after someone like me stumbles across perlinechiropractic.com, what usually happens?

Is your site generating leads for your business? 
 
I’m guessing some, but I also bet you’d like more… studies show that 7 out 10 who land on a site wind up leaving without a trace.

Not good.

Here’s a thought – what if there was an easy way for every visitor to “raise their hand” to get a phone call from you INSTANTLY… the second they hit your site and said, “call me now.”

You can –
  
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It lets you know IMMEDIATELY – so that you can talk to that lead while they’re literally lookin

(From eric@talkwithwebvisitor.com) Cool website!

My name’s Eric, and I just found your site - fpchiro.com - while surfing the net. You showed up at the top of the search results, so I checked you out. Looks like what you’re doing is pretty cool.
 
But if you don’t mind me asking – after someone like me stumbles across fpchiro.com, what usually happens?

Is your site generating leads for your business? 
 
I’m guessing some, but I also bet you’d like more… studies show that 7 out 10 who land on a site wind up leaving without a trace.

Not good.

Here’s a thought – what if there was an easy way for every visitor to “raise their hand” to get a phone call from you INSTANTLY… the second they hit your site and said, “call me now.”

You can –
  
Talk With Web Visitor is a software widget that’s works on your site, ready to capture any visitor’s Name, Email address and Phone Number.  It lets you know IMMEDIATELY – so that you can talk to that lead while they’re literally looking over your site.

CLI

Several IPs in the 192.3.0.0 range are up to no-good.

(From eric@talkwithcustomer.com) Hi,

You know it’s true…

Your competition just can’t hold a candle to the way you DELIVER real solutions to your customers on your website aquilinochiro.com.

But it’s a shame when good people who need what you have to offer wind up settling for second best or even worse.

Not only do they deserve better, you deserve to be at the top of their list.
 
TalkWithCustomer can reliably turn your website aquilinochiro.com into a serious, lead generating machine.

With TalkWithCustomer installed on your site, visitors can either call you immediately or schedule a call for you in the future.
 
And the difference to your business can be staggering – up to 100X more leads could be yours, just by giving TalkWithCustomer a FREE 14 Day Test Drive.
 
There’s absolutely NO risk to you, so CLICK HERE http://www.talkwithcustomer.com to sign up for this free test drive now.  

Tons more leads? You deserve it.

Sincerely,
Eric
PS:  Odds are, you won’t have long to wait befo

(From eric@talkwithcustomer.com) Hi,

You know it’s true…

Your competition just can’t hold a candle to the way you DELIVER real solutions to your customers on your website moreyfamilychiro.com.

But it’s a shame when good people who need what you have to offer wind up settling for second best or even worse.

Not only do they deserve better, you deserve to be at the top of their list.
 
TalkWithCustomer can reliably turn your website moreyfamilychiro.com into a serious, lead generating machine.

With TalkWithCustomer installed on your site, visitors can either call you immediately or schedule a call for you in the future.
 
And the difference to your business can be staggering – up to 100X more leads could be yours, just by giving TalkWithCustomer a FREE 14 Day Test Drive.
 
There’s absolutely NO risk to you, so CLICK HERE http://www.talkwithcustomer.com to sign up for this free test drive now.  

Tons more leads? You deserve it.

Sincerely,
Eric
PS:  Odds are, you won’t have long to wai

(From edwardfrankish32@gmail.com) Hi!

Did you know that the first page of Goggle search results is where all potential clients will be looking at if they're searching for products/services? Does your website appear on the first page of Google search results when you try searching for your products/services? Most of the time, they would just ignore page 2 and so on since the results listed on the first page seem more relevant and are more credible.

I'm very familiar with all the algorithms and methods that search engines use and I am an expert on how to get the most out of it. I'm a freelance online marketing specialist, and I have helped my clients bring their websites to the first page of web searches for more than 10 years now. Also, the cost of my services is something that small businesses can afford.

I can give you a free consultation so you can be better informed of how your website is doing right now, what can be done and what to expect after if this is something that interests you. Kindly wri

(From eric@talkwithcustomer.com) 
Hi,

Let’s take a quick trip to Tomorrow-land.

I’m not talking about a theme park, I’m talking about your business’s future…

Don’t worry, we won’t even need a crystal ball.  

Just imagine… 

… a future where the money you invest in driving traffic to your site bissland.com pays off with tons of calls from qualified leads.
 
And the difference between what you experienced in the past is staggering – you’re seeing 10X, 20X, 50X, even up to a 100X more leads coming from your website bissland.com.  Leads that are already engaged with what you have to offer and are ready to learn more and even open their wallets.

Seeing all this taking place in your business, you think back: What did I do only a short time ago that made such a huge difference?

And then it hits you: You took advantage of a free 14 day Test Drive of TalkWithCustomer.

You installed TalkWithCustomer on bissland.com – it was a snap.

And practically overnight customers started engaging more r

(smtpauth) Failed SMTP AUTH login from 1.186.61.185 (IN/India/1.186.61.185.dvois.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-05-10 08:19:13 plain authenticator failed for ([1.186.61.185]) [1.186.61.185]: 535 Incorrect authentication data (set_id=job@samerco.com)

2020-05-10T14:02:51.789066vivaldi2.tree2.info sshd[27275]: Failed password for root from 31.41.255.34 port 58250 ssh2
2020-05-10T14:06:50.540515vivaldi2.tree2.info sshd[27450]: Invalid user software from 31.41.255.34
2020-05-10T14:06:50.557323vivaldi2.tree2.info sshd[27450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.41.255.34
2020-05-10T14:06:50.540515vivaldi2.tree2.info sshd[27450]: Invalid user software from 31.41.255.34
2020-05-10T14:06:51.880126vivaldi2.tree2.info sshd[27450]: Failed password for invalid user software from 31.41.255.34 port 38382 ssh2
...

2020-05-09 UTC: (34x) - abc,ak,alima,aravind,dad,daniel,eliot,ew,ftpuser,fu,guest,hadoop,jack,jd,juniper,lk,marcela,mitchell,pacs,ronald,root(8x),sumit,test,tmp,user3,xman,yhy

May 10 10:29:08 sigma sshd\[24249\]: Invalid user deploy from 218.153.133.68May 10 10:29:10 sigma sshd\[24249\]: Failed password for invalid user deploy from 218.153.133.68 port 46516 ssh2
...

Bruteforce detected by fail2ban

Automatic report - Port Scan Attack

firewall-block, port(s): 5169/tcp, 5185/tcp

Brute-Force

odoo8
...

May 10 06:30:53 sshgateway sshd\[21436\]: Invalid user tacpro from 42.240.130.165
May 10 06:30:53 sshgateway sshd\[21436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.240.130.165
May 10 06:30:54 sshgateway sshd\[21436\]: Failed password for invalid user tacpro from 42.240.130.165 port 36054 ssh2

May 10 10:35:20 ns382633 sshd\[19117\]: Invalid user sleep from 139.170.150.251 port 9003
May 10 10:35:20 ns382633 sshd\[19117\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.170.150.251
May 10 10:35:22 ns382633 sshd\[19117\]: Failed password for invalid user sleep from 139.170.150.251 port 9003 ssh2
May 10 10:40:25 ns382633 sshd\[20180\]: Invalid user bng from 139.170.150.251 port 46848
May 10 10:40:25 ns382633 sshd\[20180\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.170.150.251

Fail2Ban - SSH Bruteforce Attempt

2020-05-10T11:46:16.043782afi-git.jinr.ru sshd[15931]: Failed password for invalid user nidoweb from 202.77.105.100 port 44402 ssh2
2020-05-10T11:50:06.254582afi-git.jinr.ru sshd[17124]: Invalid user jacky from 202.77.105.100 port 44358
2020-05-10T11:50:06.257817afi-git.jinr.ru sshd[17124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.77.105.100
2020-05-10T11:50:06.254582afi-git.jinr.ru sshd[17124]: Invalid user jacky from 202.77.105.100 port 44358
2020-05-10T11:50:07.953786afi-git.jinr.ru sshd[17124]: Failed password for invalid user jacky from 202.77.105.100 port 44358 ssh2
...

Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)

May 10 05:45:22 vserver sshd\[23736\]: Invalid user phpmyadmin from 106.12.150.36May 10 05:45:24 vserver sshd\[23736\]: Failed password for invalid user phpmyadmin from 106.12.150.36 port 49252 ssh2May 10 05:49:14 vserver sshd\[23771\]: Invalid user test from 106.12.150.36May 10 05:49:15 vserver sshd\[23771\]: Failed password for invalid user test from 106.12.150.36 port 46912 ssh2
...