Feb 15 06:18:08 h2421860 postfix/postscreen[28172]: CONNECT from [69.94.141.57]:33264 to [85.214.119.52]:25
Feb 15 06:18:08 h2421860 postfix/dnsblog[28176]: addr 69.94.141.57 listed by domain b.barracudacentral.org as 127.0.0.2
Feb 15 06:18:08 h2421860 postfix/dnsblog[28178]: addr 69.94.141.57 listed by domain zen.spamhaus.org as 127.0.0.3
Feb 15 06:18:08 h2421860 postfix/dnsblog[28177]: addr 69.94.141.57 listed by domain Unknown.trblspam.com as 185.53.179.7
Feb 15 06:18:08 h2421860 postfix/dnsblog[28174]: addr 69.94.141.57 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Feb 15 06:18:14 h2421860 postfix/postscreen[28172]: DNSBL rank 7 for [69.94.141.57]:33264
Feb x@x
Feb 15 06:18:15 h2421860 postfix/postscreen[28172]: DISCONNECT [69.94.141.57]:33264


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=69.94.141.57

2020-08-01 15:40:24.132355-0500  localhost smtpd[87819]: NOQUEUE: reject: RCPT from unknown[69.94.141.98]: 554 5.7.1 Service unavailable; Client host [69.94.141.98] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=

Mar 24 00:22:16 web01 postfix/smtpd[7559]: warning: hostname 69-94-141-68.nca.datanoc.com does not resolve to address 69.94.141.68
Mar 24 00:22:16 web01 postfix/smtpd[7559]: connect from unknown[69.94.141.68]
Mar 24 00:22:17 web01 policyd-spf[8166]: None; identhostnamey=helo; client-ip=69.94.141.68; helo=common.1nosnore-sk.com; envelope-from=x@x
Mar 24 00:22:17 web01 policyd-spf[8166]: Pass; identhostnamey=mailfrom; client-ip=69.94.141.68; helo=common.1nosnore-sk.com; envelope-from=x@x
Mar x@x
Mar 24 00:22:17 web01 postfix/smtpd[7559]: disconnect from unknown[69.94.141.68]
Mar 24 00:25:28 web01 postfix/smtpd[8332]: warning: hostname 69-94-141-68.nca.datanoc.com does not resolve to address 69.94.141.68
Mar 24 00:25:28 web01 postfix/smtpd[8332]: connect from unknown[69.94.141.68]
Mar 24 00:25:28 web01 policyd-spf[8337]: None; identhostnamey=helo; client-ip=69.94.141.68; helo=common.1nosnore-sk.com; envelope-from=x@x
Mar 24 00:25:28 web01 policyd-spf[8337]: Pass; identhost........
-------------------------------

Email Spam

Email Spam

Mar 22 05:32:26 mail.srvfarm.net postfix/smtpd[546752]: NOQUEUE: reject: RCPT from unknown[69.94.141.56]: 554 5.7.1 Service unavailable; Client host [69.94.141.56] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
Mar 22 05:34:14 mail.srvfarm.net postfix/smtpd[561111]: NOQUEUE: reject: RCPT from unknown[69.94.141.56]: 554 5.7.1 Service unavailable; Client host [69.94.141.56] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
Mar 22 05:34:14 mail.srvfarm.net postfix/smtpd[562348]: NOQUEUE: reject: RCPT from unknown[69.94.141.56]: 554 5.7.1 Service unavailable; Client host [69.94.141.56] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP

Mar 17 00:28:53 web01 postfix/smtpd[19162]: warning: hostname 69-94-141-74.nca.datanoc.com does not resolve to address 69.94.141.74
Mar 17 00:28:53 web01 postfix/smtpd[19162]: connect from unknown[69.94.141.74]
Mar 17 00:28:53 web01 policyd-spf[20223]: None; identhostnamey=helo; client-ip=69.94.141.74; helo=grateful.1nosnore-sk.com; envelope-from=x@x
Mar 17 00:28:53 web01 policyd-spf[20223]: Pass; identhostnamey=mailfrom; client-ip=69.94.141.74; helo=grateful.1nosnore-sk.com; envelope-from=x@x
Mar x@x
Mar 17 00:28:54 web01 postfix/smtpd[19162]: disconnect from unknown[69.94.141.74]
Mar 17 00:29:44 web01 postfix/smtpd[19162]: warning: hostname 69-94-141-74.nca.datanoc.com does not resolve to address 69.94.141.74
Mar 17 00:29:44 web01 postfix/smtpd[19162]: connect from unknown[69.94.141.74]
Mar 17 00:29:44 web01 policyd-spf[20223]: None; identhostnamey=helo; client-ip=69.94.141.74; helo=grateful.1nosnore-sk.com; envelope-from=x@x
Mar 17 00:29:44 web01 policyd-spf[20223]: ........
-------------------------------

Mar 12 05:34:01 web01 postfix/smtpd[4246]: warning: hostname 69-94-141-83.nca.datanoc.com does not resolve to address 69.94.141.83
Mar 12 05:34:01 web01 postfix/smtpd[4246]: connect from unknown[69.94.141.83]
Mar 12 05:34:01 web01 policyd-spf[4251]: None; identhostnamey=helo; client-ip=69.94.141.83; helo=volcano.1nosnore-sk.com; envelope-from=x@x
Mar 12 05:34:01 web01 policyd-spf[4251]: Pass; identhostnamey=mailfrom; client-ip=69.94.141.83; helo=volcano.1nosnore-sk.com; envelope-from=x@x
Mar x@x
Mar 12 05:34:01 web01 postfix/smtpd[4246]: disconnect from unknown[69.94.141.83]
Mar 16 05:22:27 web01 postfix/smtpd[10701]: warning: hostname 69-94-141-83.nca.datanoc.com does not resolve to address 69.94.141.83
Mar 16 05:22:27 web01 postfix/smtpd[10701]: connect from unknown[69.94.141.83]
Mar 16 05:22:27 web01 policyd-spf[10707]: None; identhostnamey=helo; client-ip=69.94.141.83; helo=volcano.tcheko.com; envelope-from=x@x
Mar 16 05:22:27 web01 policyd-spf[10707]: Pass; identho........
-------------------------------

Mar 13 05:29:45 mail.srvfarm.net postfix/smtpd[2287632]: NOQUEUE: reject: RCPT from unknown[69.94.141.94]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 13 05:31:52 mail.srvfarm.net postfix/smtpd[2288927]: NOQUEUE: reject: RCPT from unknown[69.94.141.94]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 13 05:32:41 mail.srvfarm.net postfix/smtpd[2288980]: NOQUEUE: reject: RCPT from unknown[69.94.141.94]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 13 05:32:45 mail.srvfarm.net postfix/smtpd[2289178]: NOQUEUE: reject: RCPT f

Mar 12 14:30:45 mail.srvfarm.net postfix/smtpd[1850439]: NOQUEUE: reject: RCPT from unknown[69.94.141.44]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 12 14:30:45 mail.srvfarm.net postfix/smtpd[1850351]: NOQUEUE: reject: RCPT from unknown[69.94.141.44]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 12 14:30:45 mail.srvfarm.net postfix/smtpd[1852675]: NOQUEUE: reject: RCPT from unknown[69.94.141.44]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 12 14:30:45 mail.srvfarm.net postfix/smtpd[1837190]: NOQUEUE: reject: RCPT from unknown[69.94.141.44]: 450 4.1.8 :

Mar 12 05:32:49 mail.srvfarm.net postfix/smtpd[1659239]: NOQUEUE: reject: RCPT from unknown[69.94.141.78]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 12 05:32:54 mail.srvfarm.net postfix/smtpd[1659239]: NOQUEUE: reject: RCPT from unknown[69.94.141.78]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 12 05:32:57 mail.srvfarm.net postfix/smtpd[1659242]: NOQUEUE: reject: RCPT from unknown[69.94.141.78]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 12 05:32:57 mail.srvfarm.net postfix/smtpd[1659045]: NOQUEUE: reject: RCPT from unknown[69.94.141.78]: 4

Mar 10 04:24:56 mail.srvfarm.net postfix/smtpd[332242]: NOQUEUE: reject: RCPT from unknown[69.94.141.46]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 10 04:27:38 mail.srvfarm.net postfix/smtpd[307894]: NOQUEUE: reject: RCPT from unknown[69.94.141.46]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 10 04:27:46 mail.srvfarm.net postfix/smtpd[332600]: NOQUEUE: reject: RCPT from unknown[69.94.141.46]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar 10 04:28:18 mail.srvfarm.net postfix/smtpd[332214]: NOQUEUE: reject: RCPT from unknown[69.94.141.46]: 450 4.1.8 

Mar  9 14:28:43 mail.srvfarm.net postfix/smtpd[4074749]: NOQUEUE: reject: RCPT from unknown[69.94.141.55]: 554 5.7.1 Service unavailable; Client host [69.94.141.55] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?69.94.141.55; from= to= proto=ESMTP helo=
Mar  9 14:28:43 mail.srvfarm.net postfix/smtpd[4074833]: NOQUEUE: reject: RCPT from unknown[69.94.141.55]: 554 5.7.1 Service unavailable; Client host [69.94.141.55] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?69.94.141.55; from= to= proto=ESMTP helo=
Mar  9 14:28:45 mail.srvfarm.net postfix/smtpd[4074830]: NOQUEUE: reject: RCPT from unknown[69.94.141.55]: 554 5.7.1 Service unavailable; Client host [69.94.141.55] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?69.94.141.55; from=

Mar  9 04:23:12 web01 postfix/smtpd[11537]: warning: hostname 69-94-141-89.nca.datanoc.com does not resolve to address 69.94.141.89
Mar  9 04:23:12 web01 postfix/smtpd[11537]: connect from unknown[69.94.141.89]
Mar  9 04:23:12 web01 policyd-spf[11543]: None; identhostnamey=helo; client-ip=69.94.141.89; helo=agree.1nosnore-sk.com; envelope-from=x@x
Mar  9 04:23:12 web01 policyd-spf[11543]: Pass; identhostnamey=mailfrom; client-ip=69.94.141.89; helo=agree.1nosnore-sk.com; envelope-from=x@x
Mar x@x
Mar  9 04:23:12 web01 postfix/smtpd[11537]: disconnect from unknown[69.94.141.89]
Mar  9 04:25:57 web01 postfix/smtpd[11537]: warning: hostname 69-94-141-89.nca.datanoc.com does not resolve to address 69.94.141.89
Mar  9 04:25:57 web01 postfix/smtpd[11537]: connect from unknown[69.94.141.89]
Mar  9 04:25:57 web01 policyd-spf[12324]: None; identhostnamey=helo; client-ip=69.94.141.89; helo=agree.1nosnore-sk.com; envelope-from=x@x
Mar  9 04:25:57 web01 policyd-spf[12324]: Pass; ide........
-------------------------------

Mar  8 05:44:26 mail.srvfarm.net postfix/smtpd[3235194]: NOQUEUE: reject: RCPT from unknown[69.94.141.95]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 05:44:31 mail.srvfarm.net postfix/smtpd[3235189]: NOQUEUE: reject: RCPT from unknown[69.94.141.95]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 05:45:24 mail.srvfarm.net postfix/smtpd[3235202]: NOQUEUE: reject: RCPT from unknown[69.94.141.95]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 05:45:25 mail.srvfarm.net postfix/smtpd[3235195]: NOQUEUE: reject: RCPT from unknown[69.94.141.95]: 450 4.1.8 : Sender address re

Mar  7 06:34:52 mail.srvfarm.net postfix/smtpd[2613287]: NOQUEUE: reject: RCPT from unknown[69.94.141.67]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 06:34:52 mail.srvfarm.net postfix/smtpd[2609381]: NOQUEUE: reject: RCPT from unknown[69.94.141.67]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 06:34:52 mail.srvfarm.net postfix/smtpd[2613524]: NOQUEUE: reject: RCPT from unknown[69.94.141.67]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  7 06:34:52 mail.srvfarm.net postfix/smtpd[2613289]: NOQUEUE: reject: RCPT from unknown[69.94.141.67]: 450 4.1.8 : Sender

Apr  2 15:09:54 vpn01 sshd[20736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.78.169.50
Apr  2 15:09:56 vpn01 sshd[20736]: Failed password for invalid user admin from 188.78.169.50 port 45514 ssh2
...

Automatic report - Port Scan Attack

Apr  2 14:02:36 vlre-nyc-1 sshd\[12779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.76.216.4  user=root
Apr  2 14:02:38 vlre-nyc-1 sshd\[12779\]: Failed password for root from 144.76.216.4 port 46464 ssh2
Apr  2 14:06:30 vlre-nyc-1 sshd\[12848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.76.216.4  user=root
Apr  2 14:06:32 vlre-nyc-1 sshd\[12848\]: Failed password for root from 144.76.216.4 port 58194 ssh2
Apr  2 14:10:23 vlre-nyc-1 sshd\[12923\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.76.216.4  user=root
...

Unauthorized connection attempt from IP address 101.80.147.106 on Port 445(SMB)

Apr  2 07:05:32 server1 sshd\[27542\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.7.54  user=root
Apr  2 07:05:34 server1 sshd\[27542\]: Failed password for root from 138.99.7.54 port 46016 ssh2
Apr  2 07:07:41 server1 sshd\[28230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.7.54  user=root
Apr  2 07:07:43 server1 sshd\[28230\]: Failed password for root from 138.99.7.54 port 45624 ssh2
Apr  2 07:09:53 server1 sshd\[28906\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.7.54  user=root
...

Unauthorized connection attempt from IP address 81.215.87.102 on Port 445(SMB)

Apr  2 15:31:54 OPSO sshd\[1224\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.202.159  user=root
Apr  2 15:31:56 OPSO sshd\[1224\]: Failed password for root from 157.245.202.159 port 53564 ssh2
Apr  2 15:35:45 OPSO sshd\[1930\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.202.159  user=root
Apr  2 15:35:47 OPSO sshd\[1930\]: Failed password for root from 157.245.202.159 port 55442 ssh2
Apr  2 15:39:32 OPSO sshd\[2503\]: Invalid user gh from 157.245.202.159 port 57348
Apr  2 15:39:32 OPSO sshd\[2503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.202.159

Unauthorized connection attempt detected from IP address 49.88.112.116 to port 22 [T]

[MK-VM6] SSH login failed

2020-04-02T16:25:25.247915jannga.de sshd[30652]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.17.110.58  user=root
2020-04-02T16:25:27.420571jannga.de sshd[30652]: Failed password for root from 14.17.110.58 port 41092 ssh2
...

Attempted connection to port 42794.

Apr  2 16:47:23 ArkNodeAT sshd\[26232\]: Invalid user ftpuser from 218.69.16.26
Apr  2 16:47:23 ArkNodeAT sshd\[26232\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.69.16.26
Apr  2 16:47:25 ArkNodeAT sshd\[26232\]: Failed password for invalid user ftpuser from 218.69.16.26 port 54031 ssh2

Unauthorised access (Apr  2) SRC=185.164.72.136 LEN=40 TTL=244 ID=48868 TCP DPT=3389 WINDOW=1024 SYN

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/5.133.11.118/ 
 
 PL - 1H : (40)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : PL 
 NAME ASN : ASN197155 
 
 IP : 5.133.11.118 
 
 CIDR : 5.133.11.0/24 
 
 PREFIX COUNT : 42 
 
 UNIQUE IP COUNT : 12032 
 
 
 ATTACKS DETECTED ASN197155 :  
  1H - 2 
  3H - 2 
  6H - 2 
 12H - 2 
 24H - 2 
 
 DateTime : 2020-04-02 14:46:00 
 
 INFO : Looking for resource vulnerabilities 403 Detected and Blocked by ADMIN  - data recovery

Unauthorized connection attempt from IP address 171.240.181.23 on Port 445(SMB)