Mar  5 04:23:09 web01 postfix/smtpd[22625]: connect from nest.jdmbrosllc.com[63.82.48.218]
Mar  5 04:23:09 web01 policyd-spf[22627]: None; identhostnamey=helo; client-ip=63.82.48.218; helo=nest.exfundex.co; envelope-from=x@x
Mar  5 04:23:09 web01 policyd-spf[22627]: Pass; identhostnamey=mailfrom; client-ip=63.82.48.218; helo=nest.exfundex.co; envelope-from=x@x
Mar x@x
Mar  5 04:23:09 web01 postfix/smtpd[22625]: disconnect from nest.jdmbrosllc.com[63.82.48.218]
Mar  5 04:27:46 web01 postfix/smtpd[22419]: connect from nest.jdmbrosllc.com[63.82.48.218]
Mar  5 04:27:47 web01 policyd-spf[22425]: None; identhostnamey=helo; client-ip=63.82.48.218; helo=nest.exfundex.co; envelope-from=x@x
Mar  5 04:27:47 web01 policyd-spf[22425]: Pass; identhostnamey=mailfrom; client-ip=63.82.48.218; helo=nest.exfundex.co; envelope-from=x@x
Mar x@x
Mar  5 04:27:47 web01 postfix/smtpd[22419]: disconnect from nest.jdmbrosllc.com[63.82.48.218]
Mar  5 04:29:29 web01 postfix/smtpd[22938]: connect fr........
-------------------------------

Jun 10 05:40:34 mail.srvfarm.net postfix/smtpd[2068244]: NOQUEUE: reject: RCPT from unknown[63.82.48.245]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 10 05:41:13 mail.srvfarm.net postfix/smtpd[2068037]: NOQUEUE: reject: RCPT from unknown[63.82.48.245]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 10 05:44:06 mail.srvfarm.net postfix/smtpd[2068244]: NOQUEUE: reject: RCPT from unknown[63.82.48.245]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 10 05:44:51 mail.srvfarm.net postfix/smtpd[2067986]: NOQUEUE: reject: RCPT from unknown[63.82.48.245]: 450 4.1.8 : Sender addr

Jun  5 17:26:18 web01.agentur-b-2.de postfix/smtpd[255076]: NOQUEUE: reject: RCPT from unknown[63.82.48.200]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  5 17:26:18 web01.agentur-b-2.de postfix/smtpd[256572]: NOQUEUE: reject: RCPT from unknown[63.82.48.200]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  5 17:29:00 web01.agentur-b-2.de postfix/smtpd[256572]: NOQUEUE: reject: RCPT from unknown[63.82.48.200]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  5 17:34:35 web01.agentur-b-2.de postfix/smtpd[255076]: NOQUEUE: reject: RCPT from unknown[63.82.48.200]: 450 4.7.1 

Jun  5 16:37:47 mail.srvfarm.net postfix/smtpd[3129216]: NOQUEUE: reject: RCPT from unknown[63.82.48.254]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 16:42:01 mail.srvfarm.net postfix/smtpd[3132026]: NOQUEUE: reject: RCPT from unknown[63.82.48.254]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 16:44:00 mail.srvfarm.net postfix/smtpd[3129250]: NOQUEUE: reject: RCPT from unknown[63.82.48.254]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 16:46:39 mail.srvfarm.net postfix/smtpd[3132026]: NOQUEUE: reject: RCPT from unknown[63.82.48.254]: 450 4.1.8 

Postfix RBL failed

Jun  4 14:42:25 mail.srvfarm.net postfix/smtpd[2524285]: NOQUEUE: reject: RCPT from discover.jdmbrosllc.com[63.82.48.233]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  4 14:42:46 mail.srvfarm.net postfix/smtpd[2523659]: NOQUEUE: reject: RCPT from discover.jdmbrosllc.com[63.82.48.233]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  4 14:43:25 mail.srvfarm.net postfix/smtpd[2523656]: NOQUEUE: reject: RCPT from discover.jdmbrosllc.com[63.82.48.233]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  4 14:43:48 mail.srvfarm.net postfix/smtpd[2523330]: NOQUEUE: reject: RCPT from d

Jun  1 13:37:52 web01.agentur-b-2.de postfix/smtpd[592715]: NOQUEUE: reject: RCPT from unknown[63.82.48.244]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  1 13:38:06 web01.agentur-b-2.de postfix/smtpd[591656]: NOQUEUE: reject: RCPT from unknown[63.82.48.244]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  1 13:38:09 web01.agentur-b-2.de postfix/smtpd[592715]: NOQUEUE: reject: RCPT from unknown[63.82.48.244]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  1 13:40:53 web01.agentur-b-2.de postfix/smtpd[592715]: NOQUEUE: reject: RCPT from unknown[63.82.48.244]: 450 4.7.1 : Helo command rej

May 20 01:33:40 web01.agentur-b-2.de postfix/smtpd[459681]: NOQUEUE: reject: RCPT from unknown[63.82.48.253]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May 20 01:37:38 web01.agentur-b-2.de postfix/smtpd[461049]: NOQUEUE: reject: RCPT from unknown[63.82.48.253]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May 20 01:38:17 web01.agentur-b-2.de postfix/smtpd[459681]: NOQUEUE: reject: RCPT from unknown[63.82.48.253]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May 20 01:43:33 web01.agentur-b-2.de postfix/smtpd[459681]: NOQUEUE: reject: RCPT from unknown[63.82.48.253]: 450 4.7.1 

2020-05-10 H=pie.jdmbrosllc.com \(pie.ailacabs.com\) \[63.82.48.241\] F=\ rejected RCPT \<**REMOVED**_perl.org@**REMOVED**.de\>: Mail not accepted. 63.82.48.241 is listed at a DNSBL.
2020-05-10 H=pie.jdmbrosllc.com \(pie.ailacabs.com\) \[63.82.48.241\] F=\ rejected RCPT \<**REMOVED****REMOVED**perl.org@**REMOVED**.de\>: recipient blacklisted
2020-05-10 H=pie.jdmbrosllc.com \(pie.ailacabs.com\) \[63.82.48.241\] F=\ rejected RCPT \<**REMOVED**_last.fm@**REMOVED**.de\>: Mail not accepted. 63.82.48.241 is listed at a DNSBL.

May  5 06:30:37 web01.agentur-b-2.de postfix/smtpd[87093]: NOQUEUE: reject: RCPT from unknown[63.82.48.225]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May  5 06:31:21 web01.agentur-b-2.de postfix/smtpd[87093]: NOQUEUE: reject: RCPT from unknown[63.82.48.225]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May  5 06:33:34 web01.agentur-b-2.de postfix/smtpd[87277]: NOQUEUE: reject: RCPT from unknown[63.82.48.225]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May  5 06:35:42 web01.agentur-b-2.de postfix/smtpd[87093]: NOQUEUE: reject: RCPT from unknown[63.82.48.225]: 450 4.7.1 : Helo command rejected: Host not found; f

May  2 05:34:14 web01.agentur-b-2.de postfix/smtpd[976469]: NOQUEUE: reject: RCPT from unknown[63.82.48.236]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May  2 05:34:15 web01.agentur-b-2.de postfix/smtpd[976089]: NOQUEUE: reject: RCPT from unknown[63.82.48.236]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May  2 05:35:52 web01.agentur-b-2.de postfix/smtpd[978764]: NOQUEUE: reject: RCPT from unknown[63.82.48.236]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May  2 05:39:08 web01.agentur-b-2.de postfix/smtpd[983789]: NOQUEUE: reject: RCPT from unknown[63.82.48.236]: 450 4.7.1 : Helo command rejected:

May  1 15:00:00 mail.srvfarm.net postfix/smtpd[1274237]: NOQUEUE: reject: RCPT from unknown[63.82.48.245]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
May  1 15:00:36 mail.srvfarm.net postfix/smtpd[1274215]: NOQUEUE: reject: RCPT from unknown[63.82.48.245]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
May  1 15:00:40 mail.srvfarm.net postfix/smtpd[1274325]: NOQUEUE: reject: RCPT from unknown[63.82.48.245]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
May  1 15:01:29 mail.srvfarm.net postfix/smtpd[1271594]: NOQUEUE: reject: RCPT from unknown[63.82.48.245]: 450 4.1.8 

Apr 30 22:31:47 mail.srvfarm.net postfix/smtpd[773728]: NOQUEUE: reject: RCPT from unknown[63.82.48.244]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 30 22:33:11 mail.srvfarm.net postfix/smtpd[773728]: NOQUEUE: reject: RCPT from unknown[63.82.48.244]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 30 22:33:19 mail.srvfarm.net postfix/smtpd[777594]: NOQUEUE: reject: RCPT from unknown[63.82.48.244]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 30 22:34:05 mail.srvfarm.net postfix/smtpd[778258]: NOQUEUE: reject: RCPT from unknown[63.82.48.244]: 450 4.1.8 : Sender addres

Apr 29 13:47:16 web01.agentur-b-2.de postfix/smtpd[1084617]: NOQUEUE: reject: RCPT from unknown[63.82.48.203]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 29 13:47:16 web01.agentur-b-2.de postfix/smtpd[1084901]: NOQUEUE: reject: RCPT from unknown[63.82.48.203]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 29 13:47:16 web01.agentur-b-2.de postfix/smtpd[1089891]: NOQUEUE: reject: RCPT from unknown[63.82.48.203]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 29 13:47:16 web01.agentur-b-2.de postfix/smtpd[1089892]: NOQUEUE: reject: RCPT from unknown[63.82.

Apr 25 05:49:59 mail.srvfarm.net postfix/smtpd[854255]: NOQUEUE: reject: RCPT from unknown[63.82.48.242]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 25 05:50:00 mail.srvfarm.net postfix/smtpd[854253]: NOQUEUE: reject: RCPT from unknown[63.82.48.242]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 25 05:50:00 mail.srvfarm.net postfix/smtpd[854252]: NOQUEUE: reject: RCPT from unknown[63.82.48.242]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 25 05:50:14 mail.srvfarm.net postfix/smtpd[853297]: NOQUEUE: reject: RCPT from unknown[63.82.48.242]: 450 4

Apr 24 05:31:51 web01.agentur-b-2.de postfix/smtpd[499241]: NOQUEUE: reject: RCPT from unknown[63.82.48.231]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 24 05:35:28 web01.agentur-b-2.de postfix/smtpd[499263]: NOQUEUE: reject: RCPT from unknown[63.82.48.231]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 24 05:35:51 web01.agentur-b-2.de postfix/smtpd[497817]: NOQUEUE: reject: RCPT from unknown[63.82.48.231]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 24 05:36:27 web01.agentur-b-2.de postfix/smtpd[500606]: NOQUEUE: reject: RCPT from unknown[63.82.48.231]: 450 4.7.1 : Helo command rejected: Host no

2020-08-19T23:59:54.638787correo.[domain] sshd[6027]: Failed password for invalid user chenpq from 165.22.33.32 port 49644 ssh2 2020-08-20T00:09:22.967477correo.[domain] sshd[48639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.33.32 user=root 2020-08-20T00:09:25.257122correo.[domain] sshd[48639]: Failed password for root from 165.22.33.32 port 40812 ssh2 ...

firewall-block, port(s): 49995/tcp

(ftpd) Failed FTP login from 60.171.124.69 (CN/China/-): 10 in the last 3600 secs

Aug 20 23:26:45 h1745522 sshd[27822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.58.179.163  user=root
Aug 20 23:26:47 h1745522 sshd[27822]: Failed password for root from 200.58.179.163 port 46272 ssh2
Aug 20 23:28:30 h1745522 sshd[27909]: Invalid user cvsuser from 200.58.179.163 port 57081
Aug 20 23:28:30 h1745522 sshd[27909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.58.179.163
Aug 20 23:28:30 h1745522 sshd[27909]: Invalid user cvsuser from 200.58.179.163 port 57081
Aug 20 23:28:33 h1745522 sshd[27909]: Failed password for invalid user cvsuser from 200.58.179.163 port 57081 ssh2
Aug 20 23:30:13 h1745522 sshd[28012]: Invalid user farhan from 200.58.179.163 port 39648
Aug 20 23:30:13 h1745522 sshd[28012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.58.179.163
Aug 20 23:30:13 h1745522 sshd[28012]: Invalid user farhan from 200.58.179.163 port 
...

Dovecot Invalid User Login Attempt.

SSH brute force

Aug 20 20:57:19 dignus sshd[25809]: Failed password for root from 218.92.0.249 port 64077 ssh2
Aug 20 20:57:19 dignus sshd[25809]: error: maximum authentication attempts exceeded for root from 218.92.0.249 port 64077 ssh2 [preauth]
Aug 20 20:57:24 dignus sshd[25843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.249  user=root
Aug 20 20:57:25 dignus sshd[25843]: Failed password for root from 218.92.0.249 port 30366 ssh2
Aug 20 20:57:29 dignus sshd[25843]: Failed password for root from 218.92.0.249 port 30366 ssh2
...

Invalid user admin from 139.198.23.244 port 34272

Unauthorised connection attempt detected at AUO NODE 4. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)

Aug 21 01:49:03 nextcloud sshd\[20614\]: Invalid user zvo from 139.170.150.253
Aug 21 01:49:03 nextcloud sshd\[20614\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.170.150.253
Aug 21 01:49:05 nextcloud sshd\[20614\]: Failed password for invalid user zvo from 139.170.150.253 port 24880 ssh2

Invalid user vps from 181.223.64.154 port 44038

Aug 19 15:59:34 *hidden* sshd[20844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.113.109 Aug 19 15:59:36 *hidden* sshd[20844]: Failed password for invalid user zqe from 128.199.113.109 port 15176 ssh2 Aug 19 16:13:33 *hidden* sshd[13330]: Invalid user consulta from 128.199.113.109 port 52156

Aug 20 21:52:21 ns382633 sshd\[21214\]: Invalid user alberto from 52.186.40.140 port 1216
Aug 20 21:52:21 ns382633 sshd\[21214\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.186.40.140
Aug 20 21:52:24 ns382633 sshd\[21214\]: Failed password for invalid user alberto from 52.186.40.140 port 1216 ssh2
Aug 20 22:24:58 ns382633 sshd\[26896\]: Invalid user maven from 52.186.40.140 port 1024
Aug 20 22:24:58 ns382633 sshd\[26896\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.186.40.140

prod6
...

prod6
...