| 178.91.254.34 |
attack |
Advance-fee Fraud Spam
Return-Path:
Received: from mail.logitex.kz (mail.logitex.kz [178.91.254.34])
Reply-To:
From: DR DAVID
To:
Subject: Re: Gold Investment
Date: Mon, 13 Jan 2020 18:15:16 -0500
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID:
Hello Friend
My name is Dr. David Koffi I am a financial broker by profession. I have an
important business I want to propose to you therefore go through this email and
get back to me.
In the year 2011 during the political upheavals in Libya, I was consulted by one
of my old client an oil magnate and ex minister of petroleum being a strong ally
to deposed Libyan president Muammar Gaddaffi. My client sought for my assistance
to move 900 kilograms of Gold ore Bars to a financial house abroad when it became
clear to him that |
2020-01-15 16:26:38 |
| 222.186.175.216 |
attackbots |
Jan 15 09:17:18 h2177944 sshd\[16989\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.216 user=root
Jan 15 09:17:19 h2177944 sshd\[16989\]: Failed password for root from 222.186.175.216 port 3952 ssh2
Jan 15 09:17:23 h2177944 sshd\[16989\]: Failed password for root from 222.186.175.216 port 3952 ssh2
Jan 15 09:17:26 h2177944 sshd\[16989\]: Failed password for root from 222.186.175.216 port 3952 ssh2
... |
2020-01-15 16:29:27 |
| 185.100.87.190 |
attackspam |
Unauthorized connection attempt detected from IP address 185.100.87.190 to port 1433 |
2020-01-15 16:51:22 |
| 77.158.136.18 |
attackbotsspam |
Unauthorized connection attempt detected from IP address 77.158.136.18 to port 2220 [J] |
2020-01-15 16:51:37 |
| 112.85.42.238 |
attack |
Jan 15 09:41:16 h2177944 sshd\[17833\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.238 user=root
Jan 15 09:41:18 h2177944 sshd\[17833\]: Failed password for root from 112.85.42.238 port 62469 ssh2
Jan 15 09:41:26 h2177944 sshd\[17833\]: Failed password for root from 112.85.42.238 port 62469 ssh2
Jan 15 09:43:57 h2177944 sshd\[17919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.238 user=root
... |
2020-01-15 16:53:30 |
| 95.213.177.124 |
attack |
Automatic report - Banned IP Access |
2020-01-15 16:40:38 |
| 159.203.124.234 |
attack |
Jan 15 10:33:53 site3 sshd\[227864\]: Invalid user odoo from 159.203.124.234
Jan 15 10:33:53 site3 sshd\[227864\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.124.234
Jan 15 10:33:55 site3 sshd\[227864\]: Failed password for invalid user odoo from 159.203.124.234 port 45131 ssh2
Jan 15 10:37:06 site3 sshd\[227893\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.124.234 user=root
Jan 15 10:37:08 site3 sshd\[227893\]: Failed password for root from 159.203.124.234 port 59594 ssh2
... |
2020-01-15 16:42:54 |
| 222.186.180.6 |
attack |
Multiple SSH login attempts. |
2020-01-15 16:21:30 |
| 104.236.246.16 |
attackspam |
3x Failed Password |
2020-01-15 16:30:24 |
| 80.66.81.143 |
attack |
Jan 15 09:38:26 relay postfix/smtpd\[29507\]: warning: unknown\[80.66.81.143\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jan 15 09:39:02 relay postfix/smtpd\[30766\]: warning: unknown\[80.66.81.143\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jan 15 09:39:19 relay postfix/smtpd\[30766\]: warning: unknown\[80.66.81.143\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jan 15 09:39:20 relay postfix/smtpd\[32339\]: warning: unknown\[80.66.81.143\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jan 15 09:39:39 relay postfix/smtpd\[30694\]: warning: unknown\[80.66.81.143\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
... |
2020-01-15 16:49:40 |
| 35.240.18.171 |
attackbotsspam |
Brute force attempt |
2020-01-15 16:45:36 |
| 179.157.56.56 |
attack |
Jan 15 06:30:53 localhost sshd\[16555\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.157.56.56 user=root
Jan 15 06:30:56 localhost sshd\[16555\]: Failed password for root from 179.157.56.56 port 30765 ssh2
Jan 15 06:33:01 localhost sshd\[16597\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.157.56.56 user=root
Jan 15 06:33:03 localhost sshd\[16597\]: Failed password for root from 179.157.56.56 port 31276 ssh2
Jan 15 06:35:10 localhost sshd\[16867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.157.56.56 user=root
... |
2020-01-15 16:24:26 |
| 218.16.213.166 |
attack |
Jan 15 05:50:33 *** sshd[14783]: Invalid user ubuntu from 218.16.213.166
Jan 15 05:50:35 *** sshd[14783]: Failed password for invalid user ubuntu from 218.16.213.166 port 52759 ssh2
Jan 15 05:55:45 *** sshd[15351]: Invalid user ubuntu from 218.16.213.166
........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=218.16.213.166 |
2020-01-15 16:27:03 |
| 125.142.63.88 |
attack |
Unauthorized connection attempt detected from IP address 125.142.63.88 to port 2220 [J] |
2020-01-15 16:44:36 |
| 222.186.42.4 |
attackbotsspam |
Jan 15 09:50:52 minden010 sshd[21940]: Failed password for root from 222.186.42.4 port 9230 ssh2
Jan 15 09:51:06 minden010 sshd[21940]: error: maximum authentication attempts exceeded for root from 222.186.42.4 port 9230 ssh2 [preauth]
Jan 15 09:51:11 minden010 sshd[22039]: Failed password for root from 222.186.42.4 port 39210 ssh2
... |
2020-01-15 16:53:05 |