Jan 17 14:04:55  exim[4970]: [1\53] 1isRIx-0001IA-9P H=switch.swingthelamp.com (switch.arsstrd.com) [69.94.158.65] F= rejected after DATA: This message scored 102.5 spam points.

SpamScore above: 10.0

Jun 22 14:41:26 mail.srvfarm.net postfix/smtpd[4156079]: NOQUEUE: reject: RCPT from medical.ifixheal.com[69.94.158.125]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 22 14:41:26 mail.srvfarm.net postfix/smtpd[4156127]: NOQUEUE: reject: RCPT from medical.ifixheal.com[69.94.158.125]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 22 14:41:26 mail.srvfarm.net postfix/smtpd[4152946]: NOQUEUE: reject: RCPT from unknown[69.94.158.125]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 22 14:41:27 mail.srvfarm.net postfix/smtpd[4152191]: NOQUEUE: reject: RCPT from u

Jun 17 05:24:07 web01.agentur-b-2.de postfix/smtpd[560626]: NOQUEUE: reject: RCPT from unknown[69.94.158.120]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 17 05:27:51 web01.agentur-b-2.de postfix/smtpd[560626]: NOQUEUE: reject: RCPT from unknown[69.94.158.120]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 17 05:27:58 web01.agentur-b-2.de postfix/smtpd[562233]: NOQUEUE: reject: RCPT from unknown[69.94.158.120]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 17 05:28:11 web01.agentur-b-2.de postfix/smtpd[560625]: NOQUEUE: reject: RCPT from unknown[69.94.158.120]: 45

Jun  8 05:42:37 mail.srvfarm.net postfix/smtpd[671306]: NOQUEUE: reject: RCPT from unknown[69.94.158.91]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  8 05:43:10 mail.srvfarm.net postfix/smtpd[673032]: NOQUEUE: reject: RCPT from unknown[69.94.158.91]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  8 05:43:34 mail.srvfarm.net postfix/smtpd[673035]: NOQUEUE: reject: RCPT from unknown[69.94.158.91]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  8 05:46:47 mail.srvfarm.net postfix/smtpd[671463]: NOQUEUE: reject: RCPT from unknown[69.94.158.91]: 450 4.1.8 

Jun  5 15:31:48 mail.srvfarm.net postfix/smtpd[3113570]: NOQUEUE: reject: RCPT from unknown[69.94.158.78]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 15:32:18 mail.srvfarm.net postfix/smtpd[3109485]: NOQUEUE: reject: RCPT from unknown[69.94.158.78]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 15:32:26 mail.srvfarm.net postfix/smtpd[3109485]: NOQUEUE: reject: RCPT from unknown[69.94.158.78]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 15:36:04 mail.srvfarm.net postfix/smtpd[3113153]: NOQUEUE: reject: RCPT from unknown[69.94.158.78]: 450 4.1.8 

Jun  5 17:35:49 mail.srvfarm.net postfix/smtpd[3156527]: NOQUEUE: reject: RCPT from unknown[69.94.158.83]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 17:36:02 mail.srvfarm.net postfix/smtpd[3151339]: NOQUEUE: reject: RCPT from unknown[69.94.158.83]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 17:38:26 mail.srvfarm.net postfix/smtpd[3155924]: NOQUEUE: reject: RCPT from unknown[69.94.158.83]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 17:42:09 mail.srvfarm.net postfix/smtpd[3156526]: NOQUEUE: reject: RCPT from unknown[69.94.158.83]: 450 4.1.8 : Send

Jun  4 13:33:39 web01.agentur-b-2.de postfix/smtpd[178713]: NOQUEUE: reject: RCPT from unknown[69.94.158.116]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  4 13:35:57 web01.agentur-b-2.de postfix/smtpd[177278]: NOQUEUE: reject: RCPT from unknown[69.94.158.116]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  4 13:36:10 web01.agentur-b-2.de postfix/smtpd[177278]: NOQUEUE: reject: RCPT from unknown[69.94.158.116]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  4 13:40:07 web01.agentur-b-2.de postfix/smtpd[181736]: NOQUEUE: reject: RCPT from unknown[69.94.158.116]: 450 4.7.1 : He

Jun  1 13:36:25 mail.srvfarm.net postfix/smtpd[577447]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 554 5.7.1 Service unavailable; Client host [69.94.158.68] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
Jun  1 13:36:54 mail.srvfarm.net postfix/smtpd[576967]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 554 5.7.1 Service unavailable; Client host [69.94.158.68] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
Jun  1 13:36:59 mail.srvfarm.net postfix/smtpd[576966]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 554 5.7.1 Service unavailable; Client host [69.94.158.68] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=

May 24 05:02:36 web01.agentur-b-2.de postfix/smtpd[509182]: NOQUEUE: reject: RCPT from unknown[69.94.158.92]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May 24 05:05:46 web01.agentur-b-2.de postfix/smtpd[507167]: NOQUEUE: reject: RCPT from unknown[69.94.158.92]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May 24 05:10:08 web01.agentur-b-2.de postfix/smtpd[502191]: NOQUEUE: reject: RCPT from unknown[69.94.158.92]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May 24 05:12:05 web01.agentur-b-2.de postfix/smtpd[502191]: NOQUEUE: reject: RCPT from unknown[69.94.158.92]: 450 4.7.1 : Helo command rejected: Host

Email Spam

Apr 30 22:24:29 web01.agentur-b-2.de postfix/smtpd[308782]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 30 22:25:27 web01.agentur-b-2.de postfix/smtpd[311470]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 30 22:27:15 web01.agentur-b-2.de postfix/smtpd[314121]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 30 22:28:36 web01.agentur-b-2.de postfix/smtpd[311518]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 450 4.7.1 : Helo command rejected: Host n

Apr 29 14:28:32 mail.srvfarm.net postfix/smtpd[166895]: NOQUEUE: reject: RCPT from unknown[69.94.158.86]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 29 14:30:31 mail.srvfarm.net postfix/smtpd[148816]: NOQUEUE: reject: RCPT from unknown[69.94.158.86]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 29 14:31:05 mail.srvfarm.net postfix/smtpd[169893]: NOQUEUE: reject: RCPT from unknown[69.94.158.86]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 29 14:31:29 mail.srvfarm.net postfix/smtpd[169892]: NOQUEUE: reject: RCPT from unknown[69.94.158.86]: 450 4.1.8 : Sender add

2020-04-25 1jSBUh-00034G-NK H=medical.ifixheal.com \(medical.porkaspk.com\) \[69.94.158.125\] rejected **REMOVED** : REJECTED - You seem to be a spammer!
2020-04-25 1jSCC3-00038E-DK H=medical.ifixheal.com \(medical.porkaspk.com\) \[69.94.158.125\] rejected **REMOVED** : REJECTED - You seem to be a spammer!
2020-04-25 1jSCC3-00038F-DK H=medical.ifixheal.com \(medical.porkaspk.com\) \[69.94.158.125\] rejected **REMOVED** : REJECTED - You seem to be a spammer!

Apr 23 10:12:23 web01.agentur-b-2.de postfix/smtpd[128143]: NOQUEUE: reject: RCPT from unknown[69.94.158.98]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 23 10:13:59 web01.agentur-b-2.de postfix/smtpd[131327]: NOQUEUE: reject: RCPT from unknown[69.94.158.98]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 23 10:15:25 web01.agentur-b-2.de postfix/smtpd[128143]: NOQUEUE: reject: RCPT from unknown[69.94.158.98]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 23 10:16:17 web01.agentur-b-2.de postfix/smtpd[128143]: NOQUEUE: reject: RCPT from unknown[69.94.158.98]: 450

Apr 22 22:41:32 mail.srvfarm.net postfix/smtpd[3565326]: NOQUEUE: reject: RCPT from unknown[69.94.158.117]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 22 22:41:32 mail.srvfarm.net postfix/smtpd[3564410]: NOQUEUE: reject: RCPT from unknown[69.94.158.117]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 22 22:41:32 mail.srvfarm.net postfix/smtpd[3565329]: NOQUEUE: reject: RCPT from unknown[69.94.158.117]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 22 22:41:32 mail.srvfar

Jun 21 06:17:48 inter-technics sshd[28581]: Invalid user virtual from 112.33.13.124 port 50036
Jun 21 06:17:48 inter-technics sshd[28581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.33.13.124
Jun 21 06:17:48 inter-technics sshd[28581]: Invalid user virtual from 112.33.13.124 port 50036
Jun 21 06:17:50 inter-technics sshd[28581]: Failed password for invalid user virtual from 112.33.13.124 port 50036 ssh2
Jun 21 06:20:06 inter-technics sshd[28768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.33.13.124  user=root
Jun 21 06:20:08 inter-technics sshd[28768]: Failed password for root from 112.33.13.124 port 46198 ssh2
...

SMB Server BruteForce Attack

Invalid user calloni from 43.241.238.152 port 55019

Invalid user gm from 198.154.99.175 port 50816

Invalid user wangqiang from 198.199.124.109 port 36906

2020-06-21T03:53:20.558180homeassistant sshd[9786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.210.105.116  user=root
2020-06-21T03:53:22.505490homeassistant sshd[9786]: Failed password for root from 62.210.105.116 port 35431 ssh2
...

06/20/2020-23:52:51.419326 1.30.219.93 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433

$f2bV_matches

Invalid user Administrator from 35.204.70.38 port 49722

Jun 21 02:05:09 server1 sshd\[5061\]: Invalid user marek from 132.148.166.225
Jun 21 02:05:09 server1 sshd\[5061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.148.166.225 
Jun 21 02:05:11 server1 sshd\[5061\]: Failed password for invalid user marek from 132.148.166.225 port 54728 ssh2
Jun 21 02:09:06 server1 sshd\[9333\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.148.166.225  user=ubuntu
Jun 21 02:09:08 server1 sshd\[9333\]: Failed password for ubuntu from 132.148.166.225 port 57080 ssh2
...

 TCP (SYN) 209.126.4.240:46199 -> port 22, len 48

Automatic report BANNED IP

leo_www

Invalid user openerp from 120.53.15.134 port 53318

Invalid user adminit from 188.166.246.46 port 48208