PHISHING AND SPAM ATTACK
63.80.185.62  Re: Special Offer - info@agencedigital.info,  Hello .. your email address .., Don't miss out to win $500 Target Gift Card!,  13 Jun 2021
OrgName:        MCI Communications Services, Inc. d/b/a Verizon Business : OVH Hosting, Inc. : DigitalOcean, LLC :
NetRange:       63.64.0.0 - 63.127.255.255
      	     64.227.0.0 - 64.227.127.255
                66.70.128.0 - 66.70.255.255
               161.35.0.0 - 161.35.255.255
Other emails from same group
63.80.185.62  Re: Special Offer - info@agencedigital.info,  Hello .. your email address .., Don't miss out to win $500 Target Gift Card!,  13 Jun 2021
64.227.6.89 Re: Limited Offer -admin@tcwuzi.co.in, ..your email address..,Enter now for your chance to win A $1,000 gift card!, Sun, 09 May 2021
64.227.24.212 Re: Bigger deal - newsletter@surazul.co.in, Hello ..your email address.. ,Grab a chance to win a $300 Hello Fresh Gift Card!, 09 Jun 2021
66.70.242.234  Re: Limited Offer - newsletter@sesanye.com - Hello .. your email address .., Don’t miss this chance to win Dyson V11 Vacuum Cleaner!  Sun, 11 Apr 2021
161.35.111.0 Re: Bigger deal - newsletter@elmyar.co.in, Hello .. your email address .., Grab a chance to win a $300 Hello Fresh Gift Card!, 12 Jun 2021
161.35.111.0 Jackpot Lottery Winners - ... your email address... - I'd won more than $324,000 in the last four months, 18 May 2021 
161.35.111.0 FreeSpins4You +Bonus  newsletter@elmyar.co.in, Claim your welcome Bonus at King Billy on $1000 OR 5 BTC +200 FREE SPINS, 08 Jun 2021

PHISHING AND SPAM ATTACK
63.80.185.105  Re: Special Offer - info@agencedigital.info.  Hello .. your email address .. Stand a chance to win a 10 x $100 McDonald's Voucher,  25 Jun 2021
OrgName:        MCI Communications Services, Inc. d/b/a Verizon Business : OVH Hosting, Inc. : DigitalOcean, LLC :
NetRange:       63.64.0.0 - 63.127.255.255
      	        64.227.0.0 - 64.227.127.255
                66.70.128.0 - 66.70.255.255
                161.35.0.0 - 161.35.255.255
Other emails from same group
63.80.185.62  Re: Special Offer - info@agencedigital.info,  Hello .. your email address .., Don't miss out to win $500 Target Gift Card!,  13 Jun 2021
63.80.185.105  Re: Special Offer - info@agencedigital.info.  Hello .. your email address .. Stand a chance to win a 10 x $100 McDonald's Voucher,  25 Jun 2021
64.227.6.89 Re: Limited Offer -admin@tcwuzi.co.in, ..your email address..,Enter now for your chance to win A $1,000 gift card!, Sun, 09 May 2021
64.227.24.212 Re: Bigger deal - newsletter@surazul.co.in, Hello ..your email address.. ,Grab a chance to win a $300 Hello Fresh Gift Card!, 09 Jun 2021
66.70.242.234  Re: Limited Offer - newsletter@sesanye.com - Hello .. your email address .., Don’t miss this chance to win Dyson V11 Vacuum Cleaner!  Sun, 11 Apr 2021
161.35.111.0 Re: Bigger deal - newsletter@elmyar.co.in, Hello .. your email address .., Grab a chance to win a $300 Hello Fresh Gift Card!, 12 Jun 2021
161.35.111.0 Jackpot Lottery Winners - ... your email address... - I'd won more than $324,000 in the last four months, 18 May 2021 
161.35.111.0 FreeSpins4You +Bonus  newsletter@elmyar.co.in, Claim your welcome Bonus at King Billy on $1000 OR 5 BTC +200 FREE SPINS, 08 Jun 2021

Mar 12 04:26:20 mail.srvfarm.net postfix/smtpd[1637570]: NOQUEUE: reject: RCPT from unknown[63.80.185.75]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 12 04:30:22 mail.srvfarm.net postfix/smtpd[1636119]: NOQUEUE: reject: RCPT from unknown[63.80.185.75]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 12 04:31:43 mail.srvfarm.net postfix/smtpd[1637564]: NOQUEUE: reject: RCPT from unknown[63.80.185.75]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 12 04:32:29 mail.srvfarm.net postfix/

Mar  6 13:58:09 mail.srvfarm.net postfix/smtpd[2116253]: NOQUEUE: reject: RCPT from unknown[63.80.185.73]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  6 14:07:14 mail.srvfarm.net postfix/smtpd[2116265]: NOQUEUE: reject: RCPT from unknown[63.80.185.73]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  6 14:07:14 mail.srvfarm.net postfix/smtpd[2112351]: NOQUEUE: reject: RCPT from unknown[63.80.185.73]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  6 14:07:14 mail.srvfarm.net postfix/smt

2020-02-20 1j4l9f-0004h6-Hg H=rations.kaanahr.com \(rations.sepehrms.com\) \[63.80.185.81\] rejected **REMOVED** : REJECTED - You seem to be a spammer!
2020-02-20 H=rations.kaanahr.com \(rations.sepehrms.com\) \[63.80.185.81\] F=\ rejected RCPT \: Mail not accepted. 63.80.185.81 is listed at a DNSBL.
2020-02-20 H=rations.kaanahr.com \(rations.sepehrms.com\) \[63.80.185.81\] F=\ rejected RCPT \<**REMOVED**@**REMOVED**.de\>: Mail not accepted. 63.80.185.81 is listed at a DNSBL.

Feb 13 10:44:28 mxgate1 postfix/postscreen[1864]: CONNECT from [63.80.185.166]:59037 to [176.31.12.44]:25
Feb 13 10:44:28 mxgate1 postfix/dnsblog[2011]: addr 63.80.185.166 listed by domain zen.spamhaus.org as 127.0.0.3
Feb 13 10:44:28 mxgate1 postfix/dnsblog[2011]: addr 63.80.185.166 listed by domain zen.spamhaus.org as 127.0.0.2
Feb 13 10:44:34 mxgate1 postfix/postscreen[1864]: DNSBL rank 2 for [63.80.185.166]:59037
Feb x@x
Feb 13 10:44:36 mxgate1 postfix/postscreen[1864]: DISCONNECT [63.80.185.166]:59037


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=63.80.185.166

Feb  6 21:04:18 mxgate1 postfix/postscreen[17935]: CONNECT from [63.80.185.36]:49555 to [176.31.12.44]:25
Feb  6 21:04:18 mxgate1 postfix/dnsblog[17936]: addr 63.80.185.36 listed by domain zen.spamhaus.org as 127.0.0.3
Feb  6 21:04:18 mxgate1 postfix/dnsblog[17938]: addr 63.80.185.36 listed by domain bl.spamcop.net as 127.0.0.2
Feb  6 21:04:18 mxgate1 postfix/dnsblog[17937]: addr 63.80.185.36 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Feb  6 21:04:24 mxgate1 postfix/postscreen[18965]: DNSBL rank 4 for [63.80.185.36]:49555
Feb x@x
Feb  6 21:04:25 mxgate1 postfix/postscreen[18965]: DISCONNECT [63.80.185.36]:49555


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=63.80.185.36

Autoban   63.80.185.72 AUTH/CONNECT

Autoban   63.80.185.73 AUTH/CONNECT

Autoban   63.80.185.74 AUTH/CONNECT

Autoban   63.80.185.75 AUTH/CONNECT

Autoban   63.80.185.76 AUTH/CONNECT

Aug 28 14:34:43 prod4 sshd\[12141\]: Invalid user porte from 103.66.96.230
Aug 28 14:34:44 prod4 sshd\[12141\]: Failed password for invalid user porte from 103.66.96.230 port 11046 ssh2
Aug 28 14:37:24 prod4 sshd\[13446\]: Invalid user python from 103.66.96.230
...

20 attempts against mh-misbehave-ban on pluto

Aug 28 15:32:07 marvibiene sshd[24332]: Failed password for root from 218.92.0.171 port 17361 ssh2
Aug 28 15:32:12 marvibiene sshd[24332]: Failed password for root from 218.92.0.171 port 17361 ssh2

"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:

2020-08-28T16:55:53.234301paragon sshd[602222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.73.181
2020-08-28T16:55:53.231697paragon sshd[602222]: Invalid user ubuntu from 159.203.73.181 port 60860
2020-08-28T16:55:55.777663paragon sshd[602222]: Failed password for invalid user ubuntu from 159.203.73.181 port 60860 ssh2
2020-08-28T16:59:55.056071paragon sshd[602602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.73.181  user=root
2020-08-28T16:59:57.152046paragon sshd[602602]: Failed password for root from 159.203.73.181 port 37213 ssh2
...

Aug 28 15:37:57 v22018053744266470 sshd[22409]: Failed password for root from 222.186.30.35 port 52195 ssh2
Aug 28 15:38:08 v22018053744266470 sshd[22419]: Failed password for root from 222.186.30.35 port 30761 ssh2
...

Aug 28 13:08:31 l03 sshd[10595]: Invalid user monitor from 116.196.72.196 port 56778
...

Aug 28 14:04:37 OPSO sshd\[17747\]: Invalid user lz from 51.83.132.101 port 35458
Aug 28 14:04:37 OPSO sshd\[17747\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.132.101
Aug 28 14:04:40 OPSO sshd\[17747\]: Failed password for invalid user lz from 51.83.132.101 port 35458 ssh2
Aug 28 14:08:23 OPSO sshd\[18405\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.83.132.101  user=root
Aug 28 14:08:25 OPSO sshd\[18405\]: Failed password for root from 51.83.132.101 port 42652 ssh2

2020-08-28T08:07:21.903540mail.thespaminator.com sshd[27748]: Failed password for root from 35.192.57.37 port 46558 ssh2
2020-08-28T08:10:43.806959mail.thespaminator.com sshd[28256]: Invalid user admin from 35.192.57.37 port 52844
...

Aug 28 15:41:57 sshgateway sshd\[5155\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.150  user=root
Aug 28 15:41:59 sshgateway sshd\[5155\]: Failed password for root from 222.186.175.150 port 34324 ssh2
Aug 28 15:42:02 sshgateway sshd\[5155\]: Failed password for root from 222.186.175.150 port 34324 ssh2

2020-08-28T16:42:20.481189lavrinenko.info sshd[24488]: Failed password for invalid user toor from 87.103.120.250 port 32986 ssh2
2020-08-28T16:46:14.929188lavrinenko.info sshd[25331]: Invalid user jie from 87.103.120.250 port 41078
2020-08-28T16:46:14.939570lavrinenko.info sshd[25331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.103.120.250
2020-08-28T16:46:14.929188lavrinenko.info sshd[25331]: Invalid user jie from 87.103.120.250 port 41078
2020-08-28T16:46:17.210562lavrinenko.info sshd[25331]: Failed password for invalid user jie from 87.103.120.250 port 41078 ssh2
...

Aug 28 14:07:56 abendstille sshd\[24666\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.201  user=root
Aug 28 14:07:57 abendstille sshd\[24666\]: Failed password for root from 45.95.168.201 port 51970 ssh2
Aug 28 14:08:11 abendstille sshd\[25042\]: Invalid user oracle from 45.95.168.201
Aug 28 14:08:11 abendstille sshd\[25042\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.95.168.201
Aug 28 14:08:13 abendstille sshd\[25042\]: Failed password for invalid user oracle from 45.95.168.201 port 50646 ssh2
...

3,72-02/05 [bc01/m10] PostRequest-Spammer scoring: harare01_holz

2020-08-28T07:28:54.468876linuxbox-skyline sshd[215080]: Invalid user apple from 106.13.233.4 port 52846
...

2020-08-28 08:36:15.088528-0500  localhost sshd[41410]: Failed password for root from 187.86.152.139 port 47926 ssh2