2020-05-07T19:18:12.838374scrat postfix/smtpd[3588456]: NOQUEUE: reject: RCPT from unknown[103.44.13.246]: 450 4.7.25 Client host rejected: cannot find your hostname, [103.44.13.246]; from= to= proto=ESMTP helo=<2cd.us>
2020-05-07T19:18:14.031213scrat postfix/smtpd[3588456]: NOQUEUE: reject: RCPT from unknown[103.44.13.246]: 450 4.7.25 Client host rejected: cannot find your hostname, [103.44.13.246]; from= to= proto=ESMTP helo=<2cd.us>
2020-05-07T19:18:15.209980scrat postfix/smtpd[3588456]: NOQUEUE: reject: RCPT from unknown[103.44.13.246]: 450 4.7.25 Client host rejected: cannot find your hostname, [103.44.13.246]; from= to= proto=ESMTP helo=<2cd.us>
2020-05-07T19:18:16.378713scrat postfix/smtpd[3588456]: NOQUEUE: reject: RCPT from unknown[103.44.13.246]: 450 4.7.25 Client host rejected: cannot find your hostname, [103.44.13.246]; from= to=

postfix

email spam

1576132051 - 12/12/2019 07:27:31 Host: 103.44.138.14/103.44.138.14 Port: 445 TCP Blocked

proto=tcp  .  spt=48682  .  dpt=25  .     (listed on     Github Combined on 3 lists )     (277)

"Account brute force using dictionary attack against Exchange Online"

Jul 19 07:35:43 animalibera sshd[21333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44  user=www-data
Jul 19 07:35:45 animalibera sshd[21333]: Failed password for www-data from 103.44.132.44 port 60640 ssh2
...

Mar 24 17:00:05 vtv3 sshd\[17397\]: Invalid user fei from 103.44.132.44 port 45674
Mar 24 17:00:05 vtv3 sshd\[17397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Mar 24 17:00:07 vtv3 sshd\[17397\]: Failed password for invalid user fei from 103.44.132.44 port 45674 ssh2
Mar 24 17:04:05 vtv3 sshd\[19006\]: Invalid user osadrc from 103.44.132.44 port 58088
Mar 24 17:04:05 vtv3 sshd\[19006\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Mar 30 04:26:03 vtv3 sshd\[27494\]: Invalid user yr from 103.44.132.44 port 52532
Mar 30 04:26:03 vtv3 sshd\[27494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Mar 30 04:26:05 vtv3 sshd\[27494\]: Failed password for invalid user yr from 103.44.132.44 port 52532 ssh2
Mar 30 04:34:56 vtv3 sshd\[30681\]: Invalid user write from 103.44.132.44 port 47708
Mar 30 04:34:56 vtv3 sshd\[30681\]: pam_unix\(sshd

Mar 24 17:00:05 vtv3 sshd\[17397\]: Invalid user fei from 103.44.132.44 port 45674
Mar 24 17:00:05 vtv3 sshd\[17397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Mar 24 17:00:07 vtv3 sshd\[17397\]: Failed password for invalid user fei from 103.44.132.44 port 45674 ssh2
Mar 24 17:04:05 vtv3 sshd\[19006\]: Invalid user osadrc from 103.44.132.44 port 58088
Mar 24 17:04:05 vtv3 sshd\[19006\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Mar 30 04:26:03 vtv3 sshd\[27494\]: Invalid user yr from 103.44.132.44 port 52532
Mar 30 04:26:03 vtv3 sshd\[27494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Mar 30 04:26:05 vtv3 sshd\[27494\]: Failed password for invalid user yr from 103.44.132.44 port 52532 ssh2
Mar 30 04:34:56 vtv3 sshd\[30681\]: Invalid user write from 103.44.132.44 port 47708
Mar 30 04:34:56 vtv3 sshd\[30681\]: pam_unix\(sshd

Jul 13 18:37:34 mail sshd\[7826\]: Invalid user webuser from 103.44.132.44 port 45200
Jul 13 18:37:34 mail sshd\[7826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Jul 13 18:37:35 mail sshd\[7826\]: Failed password for invalid user webuser from 103.44.132.44 port 45200 ssh2
Jul 13 18:41:40 mail sshd\[8650\]: Invalid user michael from 103.44.132.44 port 56902
Jul 13 18:41:40 mail sshd\[8650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44

Jul  5 01:57:10 unicornsoft sshd\[14937\]: Invalid user user from 103.44.132.44
Jul  5 01:57:10 unicornsoft sshd\[14937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Jul  5 01:57:11 unicornsoft sshd\[14937\]: Failed password for invalid user user from 103.44.132.44 port 49644 ssh2

Jul  4 20:42:57 lnxmysql61 sshd[23667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Jul  4 20:42:57 lnxmysql61 sshd[23667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44

Automated report - ssh fail2ban:
Jul 3 18:33:35 authentication failure 
Jul 3 18:33:37 wrong password, user=angus, port=50950, ssh2
Jul 3 19:05:20 authentication failure

Jul  3 09:12:24 ip-172-31-62-245 sshd\[27881\]: Invalid user speedtest from 103.44.132.44\
Jul  3 09:12:26 ip-172-31-62-245 sshd\[27881\]: Failed password for invalid user speedtest from 103.44.132.44 port 54840 ssh2\
Jul  3 09:14:56 ip-172-31-62-245 sshd\[27903\]: Invalid user gitblit from 103.44.132.44\
Jul  3 09:14:58 ip-172-31-62-245 sshd\[27903\]: Failed password for invalid user gitblit from 103.44.132.44 port 46242 ssh2\
Jul  3 09:17:24 ip-172-31-62-245 sshd\[27931\]: Invalid user um from 103.44.132.44\

Jul  2 23:55:47 localhost sshd\[8404\]: Invalid user weng123 from 103.44.132.44 port 58594
Jul  2 23:55:47 localhost sshd\[8404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Jul  2 23:55:49 localhost sshd\[8404\]: Failed password for invalid user weng123 from 103.44.132.44 port 58594 ssh2
Jul  2 23:57:42 localhost sshd\[8473\]: Invalid user 123 from 103.44.132.44 port 48808
Jul  2 23:57:42 localhost sshd\[8473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
...

Sep 16 19:37:47 web9 sshd\[10766\]: Invalid user resource from 165.22.246.228
Sep 16 19:37:47 web9 sshd\[10766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.246.228
Sep 16 19:37:49 web9 sshd\[10766\]: Failed password for invalid user resource from 165.22.246.228 port 39934 ssh2
Sep 16 19:43:02 web9 sshd\[11882\]: Invalid user info2 from 165.22.246.228
Sep 16 19:43:02 web9 sshd\[11882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.246.228

2019-09-17T05:24:32.227841abusebot-5.cloudsearch.cf sshd\[32446\]: Invalid user landscape from 106.13.165.13 port 60604

Sep 17 05:32:21 dev0-dcfr-rnet sshd[11538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.91.34.119
Sep 17 05:32:23 dev0-dcfr-rnet sshd[11538]: Failed password for invalid user od from 113.91.34.119 port 26747 ssh2
Sep 17 05:35:04 dev0-dcfr-rnet sshd[11565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.91.34.119

Sep 17 08:48:44 mail sshd[6336]: Invalid user corine from 80.211.171.195
Sep 17 08:48:44 mail sshd[6336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.171.195
Sep 17 08:48:44 mail sshd[6336]: Invalid user corine from 80.211.171.195
Sep 17 08:48:46 mail sshd[6336]: Failed password for invalid user corine from 80.211.171.195 port 57490 ssh2
Sep 17 08:57:32 mail sshd[19603]: Invalid user demo from 80.211.171.195
...

Sep 17 10:02:03 v22019058497090703 sshd[23800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.79.179.89
Sep 17 10:02:05 v22019058497090703 sshd[23800]: Failed password for invalid user jodi from 92.79.179.89 port 31928 ssh2
Sep 17 10:07:39 v22019058497090703 sshd[24190]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.79.179.89
...

Automatic report - Port Scan Attack

SMB Server BruteForce Attack

Sep 17 06:57:34 www5 sshd\[17736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.155.194  user=root
Sep 17 06:57:36 www5 sshd\[17736\]: Failed password for root from 142.93.155.194 port 43290 ssh2
Sep 17 07:01:29 www5 sshd\[18781\]: Invalid user admin from 142.93.155.194
...

Sep 16 22:34:31 lcdev sshd\[11953\]: Invalid user whoopsie from 14.49.38.114
Sep 16 22:34:31 lcdev sshd\[11953\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.49.38.114
Sep 16 22:34:33 lcdev sshd\[11953\]: Failed password for invalid user whoopsie from 14.49.38.114 port 41014 ssh2
Sep 16 22:39:10 lcdev sshd\[12426\]: Invalid user wpyan from 14.49.38.114
Sep 16 22:39:10 lcdev sshd\[12426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.49.38.114

Sep 17 06:49:13 legacy sshd[9421]: Failed password for root from 218.92.0.191 port 19409 ssh2
Sep 17 06:49:55 legacy sshd[9438]: Failed password for root from 218.92.0.191 port 55563 ssh2
...

Sep 17 06:50:33 docs sshd\[36411\]: Invalid user OVH from 111.85.191.131Sep 17 06:50:35 docs sshd\[36411\]: Failed password for invalid user OVH from 111.85.191.131 port 45380 ssh2Sep 17 06:54:50 docs sshd\[36536\]: Invalid user rtkit from 111.85.191.131Sep 17 06:54:52 docs sshd\[36536\]: Failed password for invalid user rtkit from 111.85.191.131 port 47806 ssh2Sep 17 06:59:09 docs sshd\[36681\]: Invalid user annonciation from 111.85.191.131Sep 17 06:59:11 docs sshd\[36681\]: Failed password for invalid user annonciation from 111.85.191.131 port 50238 ssh2
...

Sep 17 09:36:02 icinga sshd[8981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.158.83.31
Sep 17 09:36:04 icinga sshd[8981]: Failed password for invalid user dietpi from 94.158.83.31 port 48563 ssh2
...

(From heathere011@gmail.com) Hello!

I'm freelance search engine optimization specialist currently looking for new clients who need SEO services but are on a budget. I was just looking at your site and wanted to let you know that I can get you more site visits, which eventually leads to getting more profit. I've helped dozens of other websites owned by small businesses and I can show you case studies for what it's done for their business. You'll be surprised of how much it boosted their profits.

Please reply to let me know if you're interested in my services so we can schedule a free consultation. All of the info I'll hand over can be useful whether or not you choose to avail of my services. I hope to speak with you soon. 

Thank you,
Heather Ellison

2019-09-17T10:31:33.917814lon01.zurich-datacenter.net sshd\[31648\]: Invalid user db2inst1 from 4.14.207.173 port 35448
2019-09-17T10:31:33.926598lon01.zurich-datacenter.net sshd\[31648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.14.207.173
2019-09-17T10:31:36.039695lon01.zurich-datacenter.net sshd\[31648\]: Failed password for invalid user db2inst1 from 4.14.207.173 port 35448 ssh2
2019-09-17T10:35:00.057383lon01.zurich-datacenter.net sshd\[31714\]: Invalid user user01 from 4.14.207.173 port 45474
2019-09-17T10:35:00.064969lon01.zurich-datacenter.net sshd\[31714\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.14.207.173
...

RDPBruteCAu24