Mar  8 05:33:30 mail.srvfarm.net postfix/smtpd[3216078]: NOQUEUE: reject: RCPT from earth.swingthelamp.com[69.94.158.90]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 05:34:53 mail.srvfarm.net postfix/smtpd[3216095]: NOQUEUE: reject: RCPT from earth.swingthelamp.com[69.94.158.90]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 05:35:26 mail.srvfarm.net postfix/smtpd[3232947]: NOQUEUE: reject: RCPT from earth.swingthelamp.com[69.94.158.90]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Mar  8 05:35:26 mail.srvfarm.net postfix/smtpd[3216090]: NOQUEUE: rejec

SpamScore above: 10.0

Jun 22 14:41:26 mail.srvfarm.net postfix/smtpd[4156079]: NOQUEUE: reject: RCPT from medical.ifixheal.com[69.94.158.125]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 22 14:41:26 mail.srvfarm.net postfix/smtpd[4156127]: NOQUEUE: reject: RCPT from medical.ifixheal.com[69.94.158.125]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 22 14:41:26 mail.srvfarm.net postfix/smtpd[4152946]: NOQUEUE: reject: RCPT from unknown[69.94.158.125]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 22 14:41:27 mail.srvfarm.net postfix/smtpd[4152191]: NOQUEUE: reject: RCPT from u

Jun 17 05:24:07 web01.agentur-b-2.de postfix/smtpd[560626]: NOQUEUE: reject: RCPT from unknown[69.94.158.120]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 17 05:27:51 web01.agentur-b-2.de postfix/smtpd[560626]: NOQUEUE: reject: RCPT from unknown[69.94.158.120]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 17 05:27:58 web01.agentur-b-2.de postfix/smtpd[562233]: NOQUEUE: reject: RCPT from unknown[69.94.158.120]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 17 05:28:11 web01.agentur-b-2.de postfix/smtpd[560625]: NOQUEUE: reject: RCPT from unknown[69.94.158.120]: 45

Jun  8 05:42:37 mail.srvfarm.net postfix/smtpd[671306]: NOQUEUE: reject: RCPT from unknown[69.94.158.91]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  8 05:43:10 mail.srvfarm.net postfix/smtpd[673032]: NOQUEUE: reject: RCPT from unknown[69.94.158.91]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  8 05:43:34 mail.srvfarm.net postfix/smtpd[673035]: NOQUEUE: reject: RCPT from unknown[69.94.158.91]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  8 05:46:47 mail.srvfarm.net postfix/smtpd[671463]: NOQUEUE: reject: RCPT from unknown[69.94.158.91]: 450 4.1.8 

Jun  5 15:31:48 mail.srvfarm.net postfix/smtpd[3113570]: NOQUEUE: reject: RCPT from unknown[69.94.158.78]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 15:32:18 mail.srvfarm.net postfix/smtpd[3109485]: NOQUEUE: reject: RCPT from unknown[69.94.158.78]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 15:32:26 mail.srvfarm.net postfix/smtpd[3109485]: NOQUEUE: reject: RCPT from unknown[69.94.158.78]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 15:36:04 mail.srvfarm.net postfix/smtpd[3113153]: NOQUEUE: reject: RCPT from unknown[69.94.158.78]: 450 4.1.8 

Jun  5 17:35:49 mail.srvfarm.net postfix/smtpd[3156527]: NOQUEUE: reject: RCPT from unknown[69.94.158.83]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 17:36:02 mail.srvfarm.net postfix/smtpd[3151339]: NOQUEUE: reject: RCPT from unknown[69.94.158.83]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 17:38:26 mail.srvfarm.net postfix/smtpd[3155924]: NOQUEUE: reject: RCPT from unknown[69.94.158.83]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 17:42:09 mail.srvfarm.net postfix/smtpd[3156526]: NOQUEUE: reject: RCPT from unknown[69.94.158.83]: 450 4.1.8 : Send

Jun  4 13:33:39 web01.agentur-b-2.de postfix/smtpd[178713]: NOQUEUE: reject: RCPT from unknown[69.94.158.116]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  4 13:35:57 web01.agentur-b-2.de postfix/smtpd[177278]: NOQUEUE: reject: RCPT from unknown[69.94.158.116]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  4 13:36:10 web01.agentur-b-2.de postfix/smtpd[177278]: NOQUEUE: reject: RCPT from unknown[69.94.158.116]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  4 13:40:07 web01.agentur-b-2.de postfix/smtpd[181736]: NOQUEUE: reject: RCPT from unknown[69.94.158.116]: 450 4.7.1 : He

Jun  1 13:36:25 mail.srvfarm.net postfix/smtpd[577447]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 554 5.7.1 Service unavailable; Client host [69.94.158.68] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
Jun  1 13:36:54 mail.srvfarm.net postfix/smtpd[576967]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 554 5.7.1 Service unavailable; Client host [69.94.158.68] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
Jun  1 13:36:59 mail.srvfarm.net postfix/smtpd[576966]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 554 5.7.1 Service unavailable; Client host [69.94.158.68] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=

May 24 05:02:36 web01.agentur-b-2.de postfix/smtpd[509182]: NOQUEUE: reject: RCPT from unknown[69.94.158.92]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May 24 05:05:46 web01.agentur-b-2.de postfix/smtpd[507167]: NOQUEUE: reject: RCPT from unknown[69.94.158.92]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May 24 05:10:08 web01.agentur-b-2.de postfix/smtpd[502191]: NOQUEUE: reject: RCPT from unknown[69.94.158.92]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May 24 05:12:05 web01.agentur-b-2.de postfix/smtpd[502191]: NOQUEUE: reject: RCPT from unknown[69.94.158.92]: 450 4.7.1 : Helo command rejected: Host

Email Spam

Apr 30 22:24:29 web01.agentur-b-2.de postfix/smtpd[308782]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 30 22:25:27 web01.agentur-b-2.de postfix/smtpd[311470]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 30 22:27:15 web01.agentur-b-2.de postfix/smtpd[314121]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 30 22:28:36 web01.agentur-b-2.de postfix/smtpd[311518]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 450 4.7.1 : Helo command rejected: Host n

Apr 29 14:28:32 mail.srvfarm.net postfix/smtpd[166895]: NOQUEUE: reject: RCPT from unknown[69.94.158.86]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 29 14:30:31 mail.srvfarm.net postfix/smtpd[148816]: NOQUEUE: reject: RCPT from unknown[69.94.158.86]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 29 14:31:05 mail.srvfarm.net postfix/smtpd[169893]: NOQUEUE: reject: RCPT from unknown[69.94.158.86]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 29 14:31:29 mail.srvfarm.net postfix/smtpd[169892]: NOQUEUE: reject: RCPT from unknown[69.94.158.86]: 450 4.1.8 : Sender add

2020-04-25 1jSBUh-00034G-NK H=medical.ifixheal.com \(medical.porkaspk.com\) \[69.94.158.125\] rejected **REMOVED** : REJECTED - You seem to be a spammer!
2020-04-25 1jSCC3-00038E-DK H=medical.ifixheal.com \(medical.porkaspk.com\) \[69.94.158.125\] rejected **REMOVED** : REJECTED - You seem to be a spammer!
2020-04-25 1jSCC3-00038F-DK H=medical.ifixheal.com \(medical.porkaspk.com\) \[69.94.158.125\] rejected **REMOVED** : REJECTED - You seem to be a spammer!

Apr 23 10:12:23 web01.agentur-b-2.de postfix/smtpd[128143]: NOQUEUE: reject: RCPT from unknown[69.94.158.98]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 23 10:13:59 web01.agentur-b-2.de postfix/smtpd[131327]: NOQUEUE: reject: RCPT from unknown[69.94.158.98]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 23 10:15:25 web01.agentur-b-2.de postfix/smtpd[128143]: NOQUEUE: reject: RCPT from unknown[69.94.158.98]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 23 10:16:17 web01.agentur-b-2.de postfix/smtpd[128143]: NOQUEUE: reject: RCPT from unknown[69.94.158.98]: 450

Apr 22 22:41:32 mail.srvfarm.net postfix/smtpd[3565326]: NOQUEUE: reject: RCPT from unknown[69.94.158.117]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 22 22:41:32 mail.srvfarm.net postfix/smtpd[3564410]: NOQUEUE: reject: RCPT from unknown[69.94.158.117]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 22 22:41:32 mail.srvfarm.net postfix/smtpd[3565329]: NOQUEUE: reject: RCPT from unknown[69.94.158.117]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 22 22:41:32 mail.srvfar

[2020-06-22 18:51:06] NOTICE[1273][C-00003d14] chan_sip.c: Call from '' (198.46.135.250:60474) to extension '0002146462607540' rejected because extension not found in context 'public'.
[2020-06-22 18:51:06] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-22T18:51:06.384-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="0002146462607540",SessionID="0x7f31c02adcc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/198.46.135.250/60474",ACLName="no_extension_match"
[2020-06-22 18:52:05] NOTICE[1273][C-00003d16] chan_sip.c: Call from '' (198.46.135.250:59763) to extension '00146462607540' rejected because extension not found in context 'public'.
[2020-06-22 18:52:05] SECURITY[1288] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-06-22T18:52:05.534-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00146462607540",SessionID="0x7f31c02adcc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/U
...

1900/udp
[2020-06-22]1pkt

Jun 22 23:21:38 minden010 sshd[20670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.33.240.91
Jun 22 23:21:40 minden010 sshd[20670]: Failed password for invalid user client from 193.33.240.91 port 32787 ssh2
Jun 22 23:27:08 minden010 sshd[21417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.33.240.91
...

445/tcp 445/tcp 445/tcp...
[2020-06-22]8pkt,1pt.(tcp)

64411/udp
[2020-06-22]1pkt

27452/tcp
[2020-06-22]1pkt

xmlrpc attack

2020-06-22T23:36:27.457851sd-86998 sshd[34735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.232.73.83  user=root
2020-06-22T23:36:29.129993sd-86998 sshd[34735]: Failed password for root from 45.232.73.83 port 50368 ssh2
2020-06-22T23:40:24.421611sd-86998 sshd[35221]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.232.73.83  user=root
2020-06-22T23:40:26.629365sd-86998 sshd[35221]: Failed password for root from 45.232.73.83 port 50312 ssh2
2020-06-22T23:44:20.548588sd-86998 sshd[35696]: Invalid user deploy from 45.232.73.83 port 50252
...

2020-06-22T21:32:42.633336abusebot-8.cloudsearch.cf sshd[6867]: Invalid user admin from 178.128.144.227 port 36746
2020-06-22T21:32:42.639873abusebot-8.cloudsearch.cf sshd[6867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.144.227
2020-06-22T21:32:42.633336abusebot-8.cloudsearch.cf sshd[6867]: Invalid user admin from 178.128.144.227 port 36746
2020-06-22T21:32:44.758552abusebot-8.cloudsearch.cf sshd[6867]: Failed password for invalid user admin from 178.128.144.227 port 36746 ssh2
2020-06-22T21:36:53.649950abusebot-8.cloudsearch.cf sshd[6876]: Invalid user release from 178.128.144.227 port 40946
2020-06-22T21:36:53.655951abusebot-8.cloudsearch.cf sshd[6876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.144.227
2020-06-22T21:36:53.649950abusebot-8.cloudsearch.cf sshd[6876]: Invalid user release from 178.128.144.227 port 40946
2020-06-22T21:36:56.231368abusebot-8.cloudsearch.cf sshd[687
...

22/tcp 22/tcp
[2020-06-22]2pkt

CMS (WordPress or Joomla) login attempt.

Port scan

23/tcp
[2020-06-22]1pkt

Attempted connection to port 25065.

Jun 22 22:29:39 vps sshd[2374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.202.206 
Jun 22 22:29:41 vps sshd[2374]: Failed password for invalid user admin from 128.199.202.206 port 59438 ssh2
Jun 22 22:40:51 vps sshd[3038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.202.206 
...