| 177.44.17.100 |
attack |
Jun 18 12:50:59 mail.srvfarm.net postfix/smtps/smtpd[1450197]: warning: unknown[177.44.17.100]: SASL PLAIN authentication failed:
Jun 18 12:51:00 mail.srvfarm.net postfix/smtps/smtpd[1450197]: lost connection after AUTH from unknown[177.44.17.100]
Jun 18 12:54:37 mail.srvfarm.net postfix/smtps/smtpd[1450197]: warning: unknown[177.44.17.100]: SASL PLAIN authentication failed:
Jun 18 12:54:37 mail.srvfarm.net postfix/smtps/smtpd[1450197]: lost connection after AUTH from unknown[177.44.17.100]
Jun 18 12:58:43 mail.srvfarm.net postfix/smtpd[1452914]: warning: unknown[177.44.17.100]: SASL PLAIN authentication failed: |
2020-06-19 00:52:36 |
| 143.137.4.13 |
attackspam |
Jun 18 13:42:47 mail.srvfarm.net postfix/smtps/smtpd[1467947]: warning: unknown[143.137.4.13]: SASL PLAIN authentication failed:
Jun 18 13:42:47 mail.srvfarm.net postfix/smtps/smtpd[1467947]: lost connection after AUTH from unknown[143.137.4.13]
Jun 18 13:44:15 mail.srvfarm.net postfix/smtps/smtpd[1471062]: warning: unknown[143.137.4.13]: SASL PLAIN authentication failed:
Jun 18 13:44:15 mail.srvfarm.net postfix/smtps/smtpd[1471062]: lost connection after AUTH from unknown[143.137.4.13]
Jun 18 13:49:22 mail.srvfarm.net postfix/smtps/smtpd[1472781]: warning: unknown[143.137.4.13]: SASL PLAIN authentication failed: |
2020-06-19 00:27:09 |
| 45.80.208.225 |
attack |
Jun 18 15:53:31 web01.agentur-b-2.de postfix/smtpd[47632]: NOQUEUE: reject: RCPT from unknown[45.80.208.225]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 18 15:53:33 web01.agentur-b-2.de postfix/smtpd[22988]: NOQUEUE: reject: RCPT from unknown[45.80.208.225]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 18 15:54:02 web01.agentur-b-2.de postfix/smtpd[47632]: NOQUEUE: reject: RCPT from unknown[45.80.208.225]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 18 15:58:32 web01.agentur-b-2.de postfix/smtpd[47631]: NOQUEUE: reject: RCPT from unknown[45.80.208.225]: 450 4.7.1 : Helo command rejected: Host not found; from= |
2020-06-19 00:35:43 |
| 87.246.7.74 |
attackbots |
Jun 18 17:10:26 web01.agentur-b-2.de postfix/smtps/smtpd[95065]: warning: unknown[87.246.7.74]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 18 17:10:36 web01.agentur-b-2.de postfix/smtps/smtpd[95065]: lost connection after AUTH from unknown[87.246.7.74]
Jun 18 17:12:50 web01.agentur-b-2.de postfix/smtps/smtpd[95065]: warning: unknown[87.246.7.74]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 18 17:13:01 web01.agentur-b-2.de postfix/smtps/smtpd[95065]: lost connection after AUTH from unknown[87.246.7.74]
Jun 18 17:15:17 web01.agentur-b-2.de postfix/smtps/smtpd[95065]: warning: unknown[87.246.7.74]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-06-19 00:29:51 |
| 168.167.50.77 |
attackspambots |
Jun 18 13:20:41 mail.srvfarm.net postfix/smtps/smtpd[1467937]: warning: unknown[168.167.50.77]: SASL PLAIN authentication failed:
Jun 18 13:20:41 mail.srvfarm.net postfix/smtps/smtpd[1467937]: lost connection after AUTH from unknown[168.167.50.77]
Jun 18 13:21:09 mail.srvfarm.net postfix/smtps/smtpd[1467860]: warning: unknown[168.167.50.77]: SASL PLAIN authentication failed:
Jun 18 13:21:10 mail.srvfarm.net postfix/smtps/smtpd[1467860]: lost connection after AUTH from unknown[168.167.50.77]
Jun 18 13:22:57 mail.srvfarm.net postfix/smtps/smtpd[1467937]: warning: unknown[168.167.50.77]: SASL PLAIN authentication failed: |
2020-06-19 00:53:09 |
| 177.67.164.149 |
attackspambots |
Jun 18 13:38:02 mail.srvfarm.net postfix/smtps/smtpd[1467683]: warning: unknown[177.67.164.149]: SASL PLAIN authentication failed:
Jun 18 13:38:02 mail.srvfarm.net postfix/smtps/smtpd[1467683]: lost connection after AUTH from unknown[177.67.164.149]
Jun 18 13:44:09 mail.srvfarm.net postfix/smtpd[1469351]: warning: unknown[177.67.164.149]: SASL PLAIN authentication failed:
Jun 18 13:44:10 mail.srvfarm.net postfix/smtpd[1469351]: lost connection after AUTH from unknown[177.67.164.149]
Jun 18 13:46:29 mail.srvfarm.net postfix/smtpd[1469316]: warning: unknown[177.67.164.149]: SASL PLAIN authentication failed: |
2020-06-19 00:24:41 |
| 217.112.142.150 |
attackbots |
Jun 18 13:09:12 mail.srvfarm.net postfix/smtpd[1451514]: NOQUEUE: reject: RCPT from unknown[217.112.142.150]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 18 13:09:12 mail.srvfarm.net postfix/smtpd[1451513]: NOQUEUE: reject: RCPT from unknown[217.112.142.150]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 18 13:11:08 mail.srvfarm.net postfix/smtpd[1464959]: NOQUEUE: reject: RCPT from unknown[217.112.142.150]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 18 13:11:09 mail.srvfarm.net postfix/smtpd[1464899]: NOQUEUE: reject: RCPT from hard.yobaat.com[217.112.142.150]: 450 4.1.8 |
2020-06-19 00:50:14 |
| 92.222.93.104 |
attack |
(sshd) Failed SSH login from 92.222.93.104 (FR/France/104.ip-92-222-93.eu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 18 13:54:04 amsweb01 sshd[21189]: Invalid user lxh from 92.222.93.104 port 60824
Jun 18 13:54:06 amsweb01 sshd[21189]: Failed password for invalid user lxh from 92.222.93.104 port 60824 ssh2
Jun 18 14:02:18 amsweb01 sshd[22563]: Invalid user ubuntu from 92.222.93.104 port 50642
Jun 18 14:02:20 amsweb01 sshd[22563]: Failed password for invalid user ubuntu from 92.222.93.104 port 50642 ssh2
Jun 18 14:05:56 amsweb01 sshd[22969]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.93.104 user=root |
2020-06-19 00:46:11 |
| 186.216.71.242 |
attack |
Jun 18 13:30:06 mail.srvfarm.net postfix/smtps/smtpd[1465073]: warning: unknown[186.216.71.242]: SASL PLAIN authentication failed:
Jun 18 13:30:06 mail.srvfarm.net postfix/smtps/smtpd[1465073]: lost connection after AUTH from unknown[186.216.71.242]
Jun 18 13:33:57 mail.srvfarm.net postfix/smtps/smtpd[1469500]: warning: unknown[186.216.71.242]: SASL PLAIN authentication failed:
Jun 18 13:33:58 mail.srvfarm.net postfix/smtps/smtpd[1469500]: lost connection after AUTH from unknown[186.216.71.242]
Jun 18 13:36:58 mail.srvfarm.net postfix/smtps/smtpd[1467936]: warning: unknown[186.216.71.242]: SASL PLAIN authentication failed: |
2020-06-19 00:20:46 |
| 200.108.132.90 |
attackspam |
Jun 18 13:27:01 mail.srvfarm.net postfix/smtps/smtpd[1465073]: warning: unknown[200.108.132.90]: SASL PLAIN authentication failed:
Jun 18 13:27:01 mail.srvfarm.net postfix/smtps/smtpd[1465073]: lost connection after AUTH from unknown[200.108.132.90]
Jun 18 13:29:50 mail.srvfarm.net postfix/smtps/smtpd[1467860]: warning: unknown[200.108.132.90]: SASL PLAIN authentication failed:
Jun 18 13:29:50 mail.srvfarm.net postfix/smtps/smtpd[1467860]: lost connection after AUTH from unknown[200.108.132.90]
Jun 18 13:34:46 mail.srvfarm.net postfix/smtpd[1469322]: warning: unknown[200.108.132.90]: SASL PLAIN authentication failed: |
2020-06-19 00:16:48 |
| 152.32.144.26 |
attackspam |
Invalid user www from 152.32.144.26 port 45752 |
2020-06-19 00:40:46 |
| 63.81.93.149 |
attack |
Jun 18 14:50:34 web01.agentur-b-2.de postfix/smtpd[23101]: NOQUEUE: reject: RCPT from unknown[63.81.93.149]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 18 14:50:34 web01.agentur-b-2.de postfix/smtpd[22988]: NOQUEUE: reject: RCPT from unknown[63.81.93.149]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 18 14:56:55 web01.agentur-b-2.de postfix/smtpd[23101]: NOQUEUE: reject: RCPT from unknown[63.81.93.149]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 18 14:57:48 web01.agentur-b-2.de postfix/smtpd[23105]: NOQUEUE: reject: RCPT from thai.ketabaneh.com[63.81.93.149]: 4 |
2020-06-19 00:30:59 |
| 187.109.168.225 |
attackbotsspam |
Jun 18 13:44:45 mail.srvfarm.net postfix/smtps/smtpd[1471054]: warning: unknown[187.109.168.225]: SASL PLAIN authentication failed:
Jun 18 13:44:45 mail.srvfarm.net postfix/smtps/smtpd[1471054]: lost connection after AUTH from unknown[187.109.168.225]
Jun 18 13:47:49 mail.srvfarm.net postfix/smtps/smtpd[1469500]: warning: unknown[187.109.168.225]: SASL PLAIN authentication failed:
Jun 18 13:47:50 mail.srvfarm.net postfix/smtps/smtpd[1469500]: lost connection after AUTH from unknown[187.109.168.225]
Jun 18 13:48:46 mail.srvfarm.net postfix/smtps/smtpd[1469501]: warning: unknown[187.109.168.225]: SASL PLAIN authentication failed: |
2020-06-19 00:19:45 |
| 129.28.141.140 |
attackspam |
2020/06/18 13:06:05 [error] 842#842: *14189 open() "/usr/share/nginx/html/cgi-bin/php" failed (2: No such file or directory), client: 129.28.141.140, server: _, request: "POST /cgi-bin/php?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6E%63%6C%75%64%65%3D%6F%6E+%2D%64+%73%61%66%65%5F%6D%6F%64%65%3D%6F%66%66+%2D%64+%73%75%68%6F%73%69%6E%2E%73%69%6D%75%6C%61%74%69%6F%6E%3D%6F%6E+%2D%64+%64%69%73%61%62%6C%65%5F%66%75%6E%63%74%69%6F%6E%73%3D%22%22+%2D%64+%6F%70%65%6E%5F%62%61%73%65%64%69%72%3D%6E%6F%6E%65+%2D%64+%61%75%74%6F%5F%70%72%65%70%65%6E%64%5F%66%69%6C%65%3D%70%68%70%3A%2F%2F%69%6E%70%75%74+%2D%64+%63%67%69%2E%66%6F%72%63%65%5F%72%65%64%69%72%65%63%74%3D%30+%2D%64+%63%67%69%2E%72%65%64%69%72%65%63%74%5F%73%74%61%74%75%73%5F%65%6E%76%3D%30+%2D%6E HTTP/1.1", host: "185.118.196.154"
2020/06/18 13:06:08 [error] 842#842: *14189 open() "/usr/share/nginx/html/cgi-bin/php5" failed (2: No such file or directory), client: 129.28.141.140, server: _, request: "POST /cgi-bin/php5?%2D%64+%61%6C%6C%6F%77%5F%75%72%6C%5F%69%6 |
2020-06-19 00:54:00 |
| 81.221.234.204 |
attackspambots |
Brute-force attempt banned |
2020-06-19 00:07:04 |