Mar  9 14:30:22 mail.srvfarm.net postfix/smtpd[4062738]: NOQUEUE: reject: RCPT from unknown[69.94.134.207]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  9 14:30:22 mail.srvfarm.net postfix/smtpd[4073581]: NOQUEUE: reject: RCPT from unknown[69.94.134.207]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  9 14:30:22 mail.srvfarm.net postfix/smtpd[4074827]: NOQUEUE: reject: RCPT from unknown[69.94.134.207]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  9 14:30:22 mail.srvfarm.net postfix/smtpd[4074830]: NOQUEUE: reject: RCPT from unknown[69.94.134.207]: 450 4.1.8 : Sender ad

2020-10-05 15:35:56.409952-0500  localhost smtpd[28648]: NOQUEUE: reject: RCPT from unknown[69.94.134.48]: 450 4.7.25 Client host rejected: cannot find your hostname, [69.94.134.48]; from=<10.minutes.of.set.up.for.up.to.150.faster.speeds-rls=customvisuals.com@wal6grn.com> to= proto=ESMTP helo=

2020-10-05 15:35:56.409952-0500  localhost smtpd[28648]: NOQUEUE: reject: RCPT from unknown[69.94.134.48]: 450 4.7.25 Client host rejected: cannot find your hostname, [69.94.134.48]; from=<10.minutes.of.set.up.for.up.to.150.faster.speeds-rls=customvisuals.com@wal6grn.com> to= proto=ESMTP helo=

2020-10-02 15:33:49.838914-0500  localhost smtpd[73643]: NOQUEUE: reject: RCPT from unknown[69.94.134.211]: 450 4.7.25 Client host rejected: cannot find your hostname, [69.94.134.211]; from= to= proto=ESMTP helo=

2020-10-02 15:33:49.838914-0500  localhost smtpd[73643]: NOQUEUE: reject: RCPT from unknown[69.94.134.211]: 450 4.7.25 Client host rejected: cannot find your hostname, [69.94.134.211]; from= to= proto=ESMTP helo=

Mar 19 22:27:47 mail.srvfarm.net postfix/smtpd[2325870]: NOQUEUE: reject: RCPT from unknown[69.94.134.205]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 19 22:28:37 mail.srvfarm.net postfix/smtpd[2325917]: NOQUEUE: reject: RCPT from unknown[69.94.134.205]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 19 22:28:37 mail.srvfarm.net postfix/smtpd[2325916]: NOQUEUE: reject: RCPT from unknown[69.94.134.205]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 19 22:28:37 mail.srvfarm.net postfix/smtpd[2325870]: NOQUEUE: reject: RCPT from unknown[69.94.134.205]: 450

Mar 12 05:31:36 mail.srvfarm.net postfix/smtpd[1643479]: NOQUEUE: reject: RCPT from unknown[69.94.134.230]: 554 5.7.1 Service unavailable; Client host [69.94.134.230] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?69.94.134.230; from= to= proto=ESMTP helo=
Mar 12 05:31:36 mail.srvfarm.net postfix/smtpd[1659045]: NOQUEUE: reject: RCPT from unknown[69.94.134.230]: 554 5.7.1 Service unavailable; Client host [69.94.134.230] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?69.94.134.230; from= to= proto=ESMTP helo=
Mar 12 05:31:36 mail.srvfarm.net postfix/smtpd[1659046]: NOQUEUE: reject: RCPT from unknown[69.94.134.230]: 554 5.7.1 Service unavailable; Client host [69.94.134.230] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?69.94.134.230; from=

Mar 10 04:25:54 web01 postfix/smtpd[4015]: warning: hostname 69-94-134-252.nca.datanoc.com does not resolve to address 69.94.134.252
Mar 10 04:25:54 web01 postfix/smtpd[4015]: connect from unknown[69.94.134.252]
Mar 10 04:25:54 web01 policyd-spf[4023]: None; identhostnamey=helo; client-ip=69.94.134.252; helo=arrange.eshaghjamali.com; envelope-from=x@x
Mar 10 04:25:54 web01 policyd-spf[4023]: Pass; identhostnamey=mailfrom; client-ip=69.94.134.252; helo=arrange.eshaghjamali.com; envelope-from=x@x
Mar x@x
Mar 10 04:25:54 web01 postfix/smtpd[4015]: disconnect from unknown[69.94.134.252]
Mar 10 04:27:47 web01 postfix/smtpd[4013]: warning: hostname 69-94-134-252.nca.datanoc.com does not resolve to address 69.94.134.252
Mar 10 04:27:47 web01 postfix/smtpd[4013]: connect from unknown[69.94.134.252]
Mar 10 04:27:47 web01 policyd-spf[4019]: None; identhostnamey=helo; client-ip=69.94.134.252; helo=arrange.eshaghjamali.com; envelope-from=x@x
Mar 10 04:27:47 web01 policyd-spf[4019]:........
-------------------------------

Mar  8 04:28:21 web01 postfix/smtpd[22499]: warning: hostname 69-94-134-225.nca.datanoc.com does not resolve to address 69.94.134.225
Mar  8 04:28:21 web01 postfix/smtpd[22499]: connect from unknown[69.94.134.225]
Mar  8 04:28:21 web01 policyd-spf[22500]: None; identhostnamey=helo; client-ip=69.94.134.225; helo=difficult.eurekafied.com; envelope-from=x@x
Mar  8 04:28:21 web01 policyd-spf[22500]: Pass; identhostnamey=mailfrom; client-ip=69.94.134.225; helo=difficult.eurekafied.com; envelope-from=x@x
Mar x@x
Mar  8 04:28:22 web01 postfix/smtpd[22499]: disconnect from unknown[69.94.134.225]
Mar  8 04:31:47 web01 postfix/smtpd[22526]: warning: hostname 69-94-134-225.nca.datanoc.com does not resolve to address 69.94.134.225
Mar  8 04:31:47 web01 postfix/smtpd[22526]: connect from unknown[69.94.134.225]
Mar  8 04:31:47 web01 policyd-spf[22529]: None; identhostnamey=helo; client-ip=69.94.134.225; helo=difficult.eurekafied.com; envelope-from=x@x
Mar  8 04:31:47 web01 policyd-sp........
-------------------------------

Mar  8 06:43:14 mail.srvfarm.net postfix/smtpd[3251594]: NOQUEUE: reject: RCPT from unknown[69.94.134.230]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 06:45:23 mail.srvfarm.net postfix/smtpd[3252861]: NOQUEUE: reject: RCPT from unknown[69.94.134.230]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 06:45:26 mail.srvfarm.net postfix/smtpd[3251594]: NOQUEUE: reject: RCPT from unknown[69.94.134.230]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 06:45:27 mail.srvfarm.net postfix/

Mar  7 06:30:16 mail.srvfarm.net postfix/smtpd[2613528]: NOQUEUE: reject: RCPT from unknown[69.94.134.209]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 06:30:16 mail.srvfarm.net postfix/smtpd[2613288]: NOQUEUE: reject: RCPT from unknown[69.94.134.209]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 06:30:16 mail.srvfarm.net postfix/smtpd[2609359]: NOQUEUE: reject: RCPT from unknown[69.94.134.209]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 06:34:20 mail.srvfarm.net postfix/smtpd[2611674]: NOQUEUE: reject: RCPT from unknown[69.94

Mar  6 21:22:05 web01 postfix/smtpd[21381]: warning: hostname 69-94-134-238.nca.datanoc.com does not resolve to address 69.94.134.238
Mar  6 21:22:05 web01 postfix/smtpd[21381]: connect from unknown[69.94.134.238]
Mar  6 21:22:05 web01 policyd-spf[21932]: None; identhostnamey=helo; client-ip=69.94.134.238; helo=oil.eshaghjamali.com; envelope-from=x@x
Mar  6 21:22:05 web01 policyd-spf[21932]: Pass; identhostnamey=mailfrom; client-ip=69.94.134.238; helo=oil.eshaghjamali.com; envelope-from=x@x
Mar x@x
Mar  6 21:22:05 web01 postfix/smtpd[21381]: disconnect from unknown[69.94.134.238]
Mar  6 21:23:22 web01 postfix/smtpd[21381]: warning: hostname 69-94-134-238.nca.datanoc.com does not resolve to address 69.94.134.238
Mar  6 21:23:22 web01 postfix/smtpd[21381]: connect from unknown[69.94.134.238]
Mar  6 21:23:22 web01 policyd-spf[21932]: None; identhostnamey=helo; client-ip=69.94.134.238; helo=oil.eshaghjamali.com; envelope-from=x@x
Mar  6 21:23:22 web01 policyd-spf[21932]: Pa........
-------------------------------

Mar  6 14:28:12 mail.srvfarm.net postfix/smtpd[2131454]: NOQUEUE: reject: RCPT from unknown[69.94.134.218]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  6 14:28:12 mail.srvfarm.net postfix/smtpd[2118201]: NOQUEUE: reject: RCPT from unknown[69.94.134.218]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  6 14:28:12 mail.srvfarm.net postfix/smtpd[2116249]: NOQUEUE: reject: RCPT from unknown[69.94.134.218]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  6 14:28:12 mail.srvfarm.net postfix/smtpd[2131729]: NOQUEUE: reject: RCPT from unknown[69.94.134.218]: 450 4.1.8 

Email Subject: 'Tragödien durch Lichteffekten – Schütze deine Augen am Lenkrad auf neue Weise'

Report Spam to:
Re: 69.94.134.201 (Administrator of network where email originates)
 To: lansetspammers@devnull.spamcop.net (Notes)

Re: http://www.anewroofnow.info/Shearer-slimly/d325... (Administrator of network hosting website referenced in spam)
 To: abuse@cloudflare.com (Notes)

Automatic report - Port Scan Attack

Oct 24 18:24:40 MK-Soft-VM3 sshd[26416]: Failed password for root from 36.75.104.152 port 29650 ssh2
...

Oct 24 17:17:46 firewall sshd[14099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.4.241.6
Oct 24 17:17:46 firewall sshd[14099]: Invalid user akkermans from 122.4.241.6
Oct 24 17:17:47 firewall sshd[14099]: Failed password for invalid user akkermans from 122.4.241.6 port 65179 ssh2
...

2019-10-24T20:17:33.260597homeassistant sshd[8970]: Invalid user davide from 79.137.73.253 port 39832
2019-10-24T20:17:33.267181homeassistant sshd[8970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.137.73.253
...

Oct 24 10:31:34 kapalua sshd\[10136\]: Invalid user ad@\#0m3g45 from 181.30.27.11
Oct 24 10:31:34 kapalua sshd\[10136\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.30.27.11
Oct 24 10:31:36 kapalua sshd\[10136\]: Failed password for invalid user ad@\#0m3g45 from 181.30.27.11 port 51388 ssh2
Oct 24 10:36:24 kapalua sshd\[10537\]: Invalid user pokemon from 181.30.27.11
Oct 24 10:36:24 kapalua sshd\[10537\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.30.27.11

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/110.42.7.12/ 
 
 CN - 1H : (911)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN136188 
 
 IP : 110.42.7.12 
 
 CIDR : 110.42.0.0/18 
 
 PREFIX COUNT : 87 
 
 UNIQUE IP COUNT : 143104 
 
 
 ATTACKS DETECTED ASN136188 :  
  1H - 6 
  3H - 9 
  6H - 9 
 12H - 9 
 24H - 9 
 
 DateTime : 2019-10-24 22:17:20 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery

2019-10-24T14:32:24.6525401495-001 sshd\[16680\]: Failed password for root from 5.196.75.178 port 35134 ssh2
2019-10-24T15:39:29.0573061495-001 sshd\[19866\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=0007.seedbox.com.ar  user=root
2019-10-24T15:39:31.0662261495-001 sshd\[19866\]: Failed password for root from 5.196.75.178 port 52812 ssh2
2019-10-24T15:47:00.3454921495-001 sshd\[20097\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=0007.seedbox.com.ar  user=root
2019-10-24T15:47:02.0725591495-001 sshd\[20097\]: Failed password for root from 5.196.75.178 port 39108 ssh2
2019-10-24T15:54:43.2185541495-001 sshd\[20439\]: Invalid user ddddd from 5.196.75.178 port 53844
...

Invalid user ethos from 58.22.99.135 port 34603

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/110.42.4.62/ 
 
 CN - 1H : (911)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN136188 
 
 IP : 110.42.4.62 
 
 CIDR : 110.42.0.0/18 
 
 PREFIX COUNT : 87 
 
 UNIQUE IP COUNT : 143104 
 
 
 ATTACKS DETECTED ASN136188 :  
  1H - 6 
  3H - 9 
  6H - 9 
 12H - 9 
 24H - 9 
 
 DateTime : 2019-10-24 22:17:20 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery

" "

10/24/2019-16:26:30.906709 211.44.226.158 Protocol: 6 ET SCAN Potential SSH Scan

Invalid user admin from 1.2.144.19 port 41077

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/112.30.129.243/ 
 
 CN - 1H : (911)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN9808 
 
 IP : 112.30.129.243 
 
 CIDR : 112.30.0.0/16 
 
 PREFIX COUNT : 3598 
 
 UNIQUE IP COUNT : 18819072 
 
 
 ATTACKS DETECTED ASN9808 :  
  1H - 4 
  3H - 5 
  6H - 8 
 12H - 11 
 24H - 14 
 
 DateTime : 2019-10-24 22:17:23 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/119.28.107.182/ 
 
 CN - 1H : (913)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN132203 
 
 IP : 119.28.107.182 
 
 CIDR : 119.28.106.0/23 
 
 PREFIX COUNT : 595 
 
 UNIQUE IP COUNT : 481792 
 
 
 ATTACKS DETECTED ASN132203 :  
  1H - 1 
  3H - 3 
  6H - 3 
 12H - 3 
 24H - 3 
 
 DateTime : 2019-10-24 22:17:58 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery

Oct 24 23:34:36 sauna sshd[206838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.246.193
Oct 24 23:34:38 sauna sshd[206838]: Failed password for invalid user com from 118.24.246.193 port 58758 ssh2
...