Nov  4 07:16:10 mxgate1 postfix/postscreen[19168]: CONNECT from [45.82.34.57]:48184 to [176.31.12.44]:25
Nov  4 07:16:10 mxgate1 postfix/dnsblog[19200]: addr 45.82.34.57 listed by domain zen.spamhaus.org as 127.0.0.3
Nov  4 07:16:10 mxgate1 postfix/dnsblog[19199]: addr 45.82.34.57 listed by domain b.barracudacentral.org as 127.0.0.2
Nov  4 07:16:16 mxgate1 postfix/postscreen[19168]: DNSBL rank 3 for [45.82.34.57]:48184
Nov x@x
Nov  4 07:16:16 mxgate1 postfix/postscreen[19168]: DISCONNECT [45.82.34.57]:48184


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=45.82.34.57

Mar  8 05:44:14 mail.srvfarm.net postfix/smtpd[3234583]: NOQUEUE: reject: RCPT from unknown[45.82.34.224]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 05:44:24 mail.srvfarm.net postfix/smtpd[3235189]: NOQUEUE: reject: RCPT from unknown[45.82.34.224]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 05:46:47 mail.srvfarm.net postfix/smtpd[3235189]: NOQUEUE: reject: RCPT from unknown[45.82.34.224]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 05:47:46 mail.srvfarm.net postfix/smtpd[

Mar  7 05:24:21 mail.srvfarm.net postfix/smtpd[2589509]: NOQUEUE: reject: RCPT from unknown[45.82.34.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 05:24:35 mail.srvfarm.net postfix/smtpd[2589509]: NOQUEUE: reject: RCPT from unknown[45.82.34.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 05:28:44 mail.srvfarm.net postfix/smtpd[2593157]: NOQUEUE: reject: RCPT from unknown[45.82.34.144]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 05:29:09 mail.srvfarm.net postfix/smtpd[2591616]: NOQUEUE: reject: RCPT from unknown[45.82.34.1

Mar  6 05:29:23 mail.srvfarm.net postfix/smtpd[1923012]: NOQUEUE: reject: RCPT from unknown[45.82.34.191]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  6 05:30:30 mail.srvfarm.net postfix/smtpd[1924591]: NOQUEUE: reject: RCPT from unknown[45.82.34.191]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  6 05:31:17 mail.srvfarm.net postfix/smtpd[1924585]: NOQUEUE: reject: RCPT from unknown[45.82.34.191]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  6 05:33:14 mail.srvfarm.net postfix/smtpd[1924

Mar  5 05:28:44 web01 postfix/smtpd[25364]: connect from dance.geomaticvista.com[45.82.34.238]
Mar  5 05:28:44 web01 policyd-spf[25367]: None; identhostnamey=helo; client-ip=45.82.34.238; helo=dance.premchandsharma.co; envelope-from=x@x
Mar  5 05:28:44 web01 policyd-spf[25367]: Pass; identhostnamey=mailfrom; client-ip=45.82.34.238; helo=dance.premchandsharma.co; envelope-from=x@x
Mar x@x
Mar  5 05:28:44 web01 postfix/smtpd[25364]: disconnect from dance.geomaticvista.com[45.82.34.238]
Mar  5 05:32:36 web01 postfix/smtpd[25361]: connect from dance.geomaticvista.com[45.82.34.238]
Mar  5 05:32:36 web01 policyd-spf[25366]: None; identhostnamey=helo; client-ip=45.82.34.238; helo=dance.premchandsharma.co; envelope-from=x@x
Mar  5 05:32:36 web01 policyd-spf[25366]: Pass; identhostnamey=mailfrom; client-ip=45.82.34.238; helo=dance.premchandsharma.co; envelope-from=x@x
Mar x@x
Mar  5 05:32:36 web01 postfix/smtpd[25361]: disconnect from dance.geomaticvista.com[45.82.34.238]
Mar  5........
-------------------------------

[ER hit] Tried to deliver spam. Already well known.

Autoban   45.82.34.212 AUTH/CONNECT

Autoban   45.82.34.178 AUTH/CONNECT

Brute force attempt

Autoban   45.82.34.85 AUTH/CONNECT

Email Spam

Autoban   45.82.34.239 AUTH/CONNECT

Autoban   45.82.34.25 AUTH/CONNECT

Autoban   45.82.34.251 AUTH/CONNECT

Autoban   45.82.34.252 AUTH/CONNECT

Autoban   45.82.34.253 AUTH/CONNECT

Sep 13 22:25:15 MK-Soft-VM5 sshd\[25734\]: Invalid user metra from 139.217.103.62 port 45802
Sep 13 22:25:15 MK-Soft-VM5 sshd\[25734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.217.103.62
Sep 13 22:25:17 MK-Soft-VM5 sshd\[25734\]: Failed password for invalid user metra from 139.217.103.62 port 45802 ssh2
...

scan z

\[2019-09-13 18:30:15\] SECURITY\[20693\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-13T18:30:15.711-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441519470715",SessionID="0x7f8a6c2bd778",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.93/56909",ACLName="no_extension_match"
\[2019-09-13 18:30:38\] SECURITY\[20693\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-13T18:30:38.328-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441519470715",SessionID="0x7f8a6c744968",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.93/49883",ACLName="no_extension_match"
\[2019-09-13 18:31:10\] SECURITY\[20693\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-13T18:31:10.789-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441519470715",SessionID="0x7f8a6c744968",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.93/64334",ACLName="no_

Sep 14 00:45:13 tux-35-217 sshd\[3196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.235.60.248  user=uucp
Sep 14 00:45:15 tux-35-217 sshd\[3196\]: Failed password for uucp from 171.235.60.248 port 11630 ssh2
Sep 14 00:53:53 tux-35-217 sshd\[3214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.235.60.248  user=sync
Sep 14 00:53:55 tux-35-217 sshd\[3214\]: Failed password for sync from 171.235.60.248 port 33926 ssh2
...

Sep 13 12:07:07 kapalua sshd\[31966\]: Invalid user deploy from 171.223.186.229
Sep 13 12:07:07 kapalua sshd\[31966\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.223.186.229
Sep 13 12:07:09 kapalua sshd\[31966\]: Failed password for invalid user deploy from 171.223.186.229 port 7680 ssh2
Sep 13 12:11:01 kapalua sshd\[32570\]: Invalid user ftp_test from 171.223.186.229
Sep 13 12:11:01 kapalua sshd\[32570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.223.186.229

Jan 29 11:32:11 vtv3 sshd\[4972\]: Invalid user kafka from 138.122.202.200 port 50614
Jan 29 11:32:11 vtv3 sshd\[4972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
Jan 29 11:32:13 vtv3 sshd\[4972\]: Failed password for invalid user kafka from 138.122.202.200 port 50614 ssh2
Jan 29 11:36:52 vtv3 sshd\[6312\]: Invalid user mapr from 138.122.202.200 port 54572
Jan 29 11:36:52 vtv3 sshd\[6312\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
Jan 31 21:14:36 vtv3 sshd\[2998\]: Invalid user minecraft from 138.122.202.200 port 44460
Jan 31 21:14:36 vtv3 sshd\[2998\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.202.200
Jan 31 21:14:37 vtv3 sshd\[2998\]: Failed password for invalid user minecraft from 138.122.202.200 port 44460 ssh2
Jan 31 21:19:20 vtv3 sshd\[4295\]: Invalid user deploy from 138.122.202.200 port 48390
Jan 31 21:19:20 vtv3 ssh

Sep 13 22:34:35 hcbbdb sshd\[776\]: Invalid user user2 from 157.230.129.73
Sep 13 22:34:35 hcbbdb sshd\[776\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.129.73
Sep 13 22:34:36 hcbbdb sshd\[776\]: Failed password for invalid user user2 from 157.230.129.73 port 39368 ssh2
Sep 13 22:38:33 hcbbdb sshd\[1220\]: Invalid user musicbot from 157.230.129.73
Sep 13 22:38:33 hcbbdb sshd\[1220\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.129.73

\[2019-09-13 18:54:43\] SECURITY\[20693\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-13T18:54:43.137-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="0012342186069",SessionID="0x7f8a6c6094e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/58179",ACLName="no_extension_match"
\[2019-09-13 18:55:10\] SECURITY\[20693\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-13T18:55:10.923-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="90012342186069",SessionID="0x7f8a6c2bd778",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/56080",ACLName="no_extension_match"
\[2019-09-13 18:55:39\] SECURITY\[20693\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-13T18:55:39.216-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00012342186069",SessionID="0x7f8a6c744968",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.149.30/65430",ACLName="no_exte

Sep 14 01:23:22 server sshd\[1411\]: Invalid user debian123 from 139.155.5.21 port 41256
Sep 14 01:23:22 server sshd\[1411\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.5.21
Sep 14 01:23:24 server sshd\[1411\]: Failed password for invalid user debian123 from 139.155.5.21 port 41256 ssh2
Sep 14 01:27:47 server sshd\[8777\]: Invalid user 0d00 from 139.155.5.21 port 53224
Sep 14 01:27:47 server sshd\[8777\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.5.21

Invalid user teamspeak from 139.199.183.185 port 45172
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.183.185
Failed password for invalid user teamspeak from 139.199.183.185 port 45172 ssh2
Invalid user webmaster from 139.199.183.185 port 46394
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.183.185

Autoban   201.158.60.62 AUTH/CONNECT

Sep 13 23:43:40 mail sshd\[3320\]: Invalid user admin from 176.31.182.125 port 43297
Sep 13 23:43:40 mail sshd\[3320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.182.125
Sep 13 23:43:43 mail sshd\[3320\]: Failed password for invalid user admin from 176.31.182.125 port 43297 ssh2
Sep 13 23:47:34 mail sshd\[3664\]: Invalid user ftpuser from 176.31.182.125 port 36302
Sep 13 23:47:34 mail sshd\[3664\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.31.182.125

BURG,WP GET /wp-login.php

Sep 14 01:13:16 yabzik sshd[17352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.35.35.226
Sep 14 01:13:18 yabzik sshd[17352]: Failed password for invalid user postgres from 52.35.35.226 port 40514 ssh2
Sep 14 01:18:03 yabzik sshd[19069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.35.35.226

Sep 13 12:24:22 lcdev sshd\[22097\]: Invalid user git123 from 128.199.96.234
Sep 13 12:24:22 lcdev sshd\[22097\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.96.234
Sep 13 12:24:24 lcdev sshd\[22097\]: Failed password for invalid user git123 from 128.199.96.234 port 59612 ssh2
Sep 13 12:28:35 lcdev sshd\[22436\]: Invalid user !QAZ2wsx from 128.199.96.234
Sep 13 12:28:35 lcdev sshd\[22436\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.96.234