| 193.35.48.18 |
attackbots |
Jun 7 01:17:24 mail.srvfarm.net postfix/smtpd[4076942]: warning: unknown[193.35.48.18]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 7 01:17:24 mail.srvfarm.net postfix/smtpd[4076942]: lost connection after AUTH from unknown[193.35.48.18]
Jun 7 01:17:29 mail.srvfarm.net postfix/smtpd[4089386]: lost connection after AUTH from unknown[193.35.48.18]
Jun 7 01:17:33 mail.srvfarm.net postfix/smtpd[4089395]: lost connection after AUTH from unknown[193.35.48.18]
Jun 7 01:17:34 mail.srvfarm.net postfix/smtps/smtpd[4090925]: lost connection after AUTH from unknown[193.35.48.18] |
2020-06-07 23:29:06 |
| 219.78.102.229 |
attack |
Brute-force attempt banned |
2020-06-07 23:56:14 |
| 89.186.11.16 |
attackbots |
Jun 5 19:15:41 mail.srvfarm.net postfix/smtps/smtpd[3191653]: warning: ip-89-186-11-16.static.vip-net.pl[89.186.11.16]: SASL PLAIN authentication failed:
Jun 5 19:15:41 mail.srvfarm.net postfix/smtps/smtpd[3191653]: lost connection after AUTH from ip-89-186-11-16.static.vip-net.pl[89.186.11.16]
Jun 5 19:18:15 mail.srvfarm.net postfix/smtps/smtpd[3191656]: warning: ip-89-186-11-16.static.vip-net.pl[89.186.11.16]: SASL PLAIN authentication failed:
Jun 5 19:18:15 mail.srvfarm.net postfix/smtps/smtpd[3191656]: lost connection after AUTH from ip-89-186-11-16.static.vip-net.pl[89.186.11.16]
Jun 5 19:19:33 mail.srvfarm.net postfix/smtps/smtpd[3191640]: warning: ip-89-186-11-16.static.vip-net.pl[89.186.11.16]: SASL PLAIN authentication failed: |
2020-06-07 23:42:22 |
| 217.112.128.61 |
attack |
Jun 5 18:05:24 mail.srvfarm.net postfix/smtpd[3172177]: NOQUEUE: reject: RCPT from unknown[217.112.128.61]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 5 18:05:24 mail.srvfarm.net postfix/smtpd[3159447]: NOQUEUE: reject: RCPT from unknown[217.112.128.61]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 5 18:07:13 mail.srvfarm.net postfix/smtpd[3160160]: NOQUEUE: reject: RCPT from unknown[217.112.128.61]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 5 18:07:13 mail.srvfarm.net postfix/smtpd[3160138]: NOQUEUE: reject: RCPT fr |
2020-06-07 23:26:11 |
| 130.93.197.27 |
attack |
Jun 5 18:50:06 mail.srvfarm.net postfix/smtps/smtpd[3178016]: warning: unknown[130.93.197.27]: SASL PLAIN authentication failed:
Jun 5 18:50:06 mail.srvfarm.net postfix/smtps/smtpd[3178016]: lost connection after AUTH from unknown[130.93.197.27]
Jun 5 18:51:15 mail.srvfarm.net postfix/smtps/smtpd[3178015]: warning: unknown[130.93.197.27]: SASL PLAIN authentication failed:
Jun 5 18:51:15 mail.srvfarm.net postfix/smtps/smtpd[3178015]: lost connection after AUTH from unknown[130.93.197.27]
Jun 5 18:51:21 mail.srvfarm.net postfix/smtps/smtpd[3178017]: warning: unknown[130.93.197.27]: SASL PLAIN authentication failed: |
2020-06-07 23:38:26 |
| 191.53.193.218 |
attackbots |
Jun 5 17:21:51 mail.srvfarm.net postfix/smtps/smtpd[3149849]: warning: unknown[191.53.193.218]: SASL PLAIN authentication failed:
Jun 5 17:21:52 mail.srvfarm.net postfix/smtps/smtpd[3149849]: lost connection after AUTH from unknown[191.53.193.218]
Jun 5 17:24:04 mail.srvfarm.net postfix/smtps/smtpd[3149849]: warning: unknown[191.53.193.218]: SASL PLAIN authentication failed:
Jun 5 17:24:04 mail.srvfarm.net postfix/smtps/smtpd[3149849]: lost connection after AUTH from unknown[191.53.193.218]
Jun 5 17:27:04 mail.srvfarm.net postfix/smtps/smtpd[3154993]: warning: unknown[191.53.193.218]: SASL PLAIN authentication failed: |
2020-06-08 00:10:19 |
| 195.93.143.172 |
attackbots |
Jun 5 18:11:28 mail.srvfarm.net postfix/smtpd[3160155]: warning: unknown[195.93.143.172]: SASL PLAIN authentication failed:
Jun 5 18:11:28 mail.srvfarm.net postfix/smtpd[3160155]: lost connection after AUTH from unknown[195.93.143.172]
Jun 5 18:12:41 mail.srvfarm.net postfix/smtps/smtpd[3160855]: warning: unknown[195.93.143.172]: SASL PLAIN authentication failed:
Jun 5 18:12:41 mail.srvfarm.net postfix/smtps/smtpd[3160855]: lost connection after AUTH from unknown[195.93.143.172]
Jun 5 18:15:40 mail.srvfarm.net postfix/smtps/smtpd[3172531]: warning: unknown[195.93.143.172]: SASL PLAIN authentication failed: |
2020-06-07 23:28:07 |
| 54.37.136.213 |
attackbotsspam |
2020-06-07T17:36:12.685168+02:00 sshd[5687]: Failed password for root from 54.37.136.213 port 33086 ssh2 |
2020-06-08 00:00:02 |
| 177.70.75.156 |
attack |
Jun 5 18:18:28 mail.srvfarm.net postfix/smtpd[3160138]: warning: unknown[177.70.75.156]: SASL PLAIN authentication failed:
Jun 5 18:18:29 mail.srvfarm.net postfix/smtpd[3160138]: lost connection after AUTH from unknown[177.70.75.156]
Jun 5 18:26:21 mail.srvfarm.net postfix/smtpd[3172170]: warning: unknown[177.70.75.156]: SASL PLAIN authentication failed:
Jun 5 18:26:21 mail.srvfarm.net postfix/smtpd[3172170]: lost connection after AUTH from unknown[177.70.75.156]
Jun 5 18:26:50 mail.srvfarm.net postfix/smtpd[3160155]: warning: unknown[177.70.75.156]: SASL PLAIN authentication failed: |
2020-06-07 23:34:48 |
| 37.49.226.32 |
attack |
Brute-Force reported by Fail2Ban |
2020-06-07 23:53:01 |
| 93.99.133.168 |
attackbotsspam |
Jun 5 19:12:53 mail.srvfarm.net postfix/smtps/smtpd[3191648]: warning: unknown[93.99.133.168]: SASL PLAIN authentication failed:
Jun 5 19:12:53 mail.srvfarm.net postfix/smtps/smtpd[3191648]: lost connection after AUTH from unknown[93.99.133.168]
Jun 5 19:14:30 mail.srvfarm.net postfix/smtpd[3177784]: warning: unknown[93.99.133.168]: SASL PLAIN authentication failed:
Jun 5 19:14:30 mail.srvfarm.net postfix/smtpd[3177784]: lost connection after AUTH from unknown[93.99.133.168]
Jun 5 19:20:37 mail.srvfarm.net postfix/smtpd[3177813]: warning: unknown[93.99.133.168]: SASL PLAIN authentication failed: |
2020-06-07 23:39:59 |
| 222.186.30.35 |
attack |
Jun 7 20:54:38 gw1 sshd[8834]: Failed password for root from 222.186.30.35 port 45858 ssh2
... |
2020-06-07 23:55:19 |
| 193.106.155.55 |
attack |
Jun 5 19:08:15 mail.srvfarm.net postfix/smtpd[3192029]: warning: unknown[193.106.155.55]: SASL PLAIN authentication failed:
Jun 5 19:08:15 mail.srvfarm.net postfix/smtpd[3192029]: lost connection after AUTH from unknown[193.106.155.55]
Jun 5 19:15:05 mail.srvfarm.net postfix/smtpd[3192029]: warning: unknown[193.106.155.55]: SASL PLAIN authentication failed:
Jun 5 19:15:05 mail.srvfarm.net postfix/smtpd[3192029]: lost connection after AUTH from unknown[193.106.155.55]
Jun 5 19:17:49 mail.srvfarm.net postfix/smtps/smtpd[3191647]: warning: unknown[193.106.155.55]: SASL PLAIN authentication failed: |
2020-06-07 23:28:42 |
| 191.235.111.34 |
attackbotsspam |
Jun 7 00:42:29 web01.agentur-b-2.de postfix/smtps/smtpd[875058]: warning: unknown[191.235.111.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 7 00:42:38 web01.agentur-b-2.de postfix/smtps/smtpd[875066]: warning: unknown[191.235.111.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 7 00:44:29 web01.agentur-b-2.de postfix/smtps/smtpd[875058]: warning: unknown[191.235.111.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 7 00:44:38 web01.agentur-b-2.de postfix/smtps/smtpd[875244]: warning: unknown[191.235.111.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 7 00:46:27 web01.agentur-b-2.de postfix/smtps/smtpd[875244]: warning: unknown[191.235.111.34]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-06-07 23:29:33 |
| 139.162.242.157 |
attackspam |
139.162.242.157 - - [07/Jun/2020:15:31:25 +0200] "GET /wp-login.php HTTP/1.1" 200 1900 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.162.242.157 - - [07/Jun/2020:15:31:25 +0200] "POST /wp-login.php HTTP/1.1" 200 2031 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.162.242.157 - - [07/Jun/2020:15:33:30 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.162.242.157 - - [07/Jun/2020:15:33:30 +0200] "POST /wp-login.php HTTP/1.1" 200 1790 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.162.242.157 - - [07/Jun/2020:15:40:48 +0200] "GET /wp-login.php HTTP/1.1" 200 1689 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
139.162.242.157 - - [07/Jun/2020:15:40:48 +0200] "POST /wp-login.php HTTP/1.1" 200 1790 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/
... |
2020-06-08 00:01:29 |