Apr  8 05:44:18 web01.agentur-b-2.de postfix/smtpd[520661]: NOQUEUE: reject: RCPT from unknown[69.94.158.99]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr  8 05:49:29 web01.agentur-b-2.de postfix/smtpd[519257]: NOQUEUE: reject: RCPT from unknown[69.94.158.99]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr  8 05:49:29 web01.agentur-b-2.de postfix/smtpd[520684]: NOQUEUE: reject: RCPT from unknown[69.94.158.99]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr  8 05:49:57 web01.agentur-b-2.de postfix/smtpd[504512]: NOQUEUE: reject: RCPT from unknown[69.94.158.99]: 450 4.7.1 : Helo com

Apr  4 05:54:24 mail.srvfarm.net postfix/smtpd[3108039]: NOQUEUE: reject: RCPT from unknown[69.94.158.99]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr  4 05:56:32 mail.srvfarm.net postfix/smtpd[3111169]: NOQUEUE: reject: RCPT from unknown[69.94.158.99]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr  4 06:00:00 mail.srvfarm.net postfix/smtpd[3112533]: NOQUEUE: reject: RCPT from unknown[69.94.158.99]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr  4 06:04:05 mail.srvfarm.net postfix/smtpd[3125820]: NOQUEUE: reject: RCPT from unknown[69.94.158.99]: 450 4.1.8 : Sender

Dec  5 22:09:29 smtp postfix/smtpd[3746]: NOQUEUE: reject: RCPT from tailor.swingthelamp.com[69.94.158.99]: 554 5.7.1 Service unavailable; Client host [69.94.158.99] blocked using cbl.abuseat.org; Blocked - see http://www.abuseat.org/lookup.cgi?ip=69.94.158.99; from= to= proto=ESMTP helo=
...

SpamScore above: 10.0

Jun 22 14:41:26 mail.srvfarm.net postfix/smtpd[4156079]: NOQUEUE: reject: RCPT from medical.ifixheal.com[69.94.158.125]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 22 14:41:26 mail.srvfarm.net postfix/smtpd[4156127]: NOQUEUE: reject: RCPT from medical.ifixheal.com[69.94.158.125]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 22 14:41:26 mail.srvfarm.net postfix/smtpd[4152946]: NOQUEUE: reject: RCPT from unknown[69.94.158.125]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun 22 14:41:27 mail.srvfarm.net postfix/smtpd[4152191]: NOQUEUE: reject: RCPT from u

Jun 17 05:24:07 web01.agentur-b-2.de postfix/smtpd[560626]: NOQUEUE: reject: RCPT from unknown[69.94.158.120]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 17 05:27:51 web01.agentur-b-2.de postfix/smtpd[560626]: NOQUEUE: reject: RCPT from unknown[69.94.158.120]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 17 05:27:58 web01.agentur-b-2.de postfix/smtpd[562233]: NOQUEUE: reject: RCPT from unknown[69.94.158.120]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 17 05:28:11 web01.agentur-b-2.de postfix/smtpd[560625]: NOQUEUE: reject: RCPT from unknown[69.94.158.120]: 45

Jun  8 05:42:37 mail.srvfarm.net postfix/smtpd[671306]: NOQUEUE: reject: RCPT from unknown[69.94.158.91]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  8 05:43:10 mail.srvfarm.net postfix/smtpd[673032]: NOQUEUE: reject: RCPT from unknown[69.94.158.91]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  8 05:43:34 mail.srvfarm.net postfix/smtpd[673035]: NOQUEUE: reject: RCPT from unknown[69.94.158.91]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  8 05:46:47 mail.srvfarm.net postfix/smtpd[671463]: NOQUEUE: reject: RCPT from unknown[69.94.158.91]: 450 4.1.8 

Jun  5 15:31:48 mail.srvfarm.net postfix/smtpd[3113570]: NOQUEUE: reject: RCPT from unknown[69.94.158.78]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 15:32:18 mail.srvfarm.net postfix/smtpd[3109485]: NOQUEUE: reject: RCPT from unknown[69.94.158.78]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 15:32:26 mail.srvfarm.net postfix/smtpd[3109485]: NOQUEUE: reject: RCPT from unknown[69.94.158.78]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 15:36:04 mail.srvfarm.net postfix/smtpd[3113153]: NOQUEUE: reject: RCPT from unknown[69.94.158.78]: 450 4.1.8 

Jun  5 17:35:49 mail.srvfarm.net postfix/smtpd[3156527]: NOQUEUE: reject: RCPT from unknown[69.94.158.83]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 17:36:02 mail.srvfarm.net postfix/smtpd[3151339]: NOQUEUE: reject: RCPT from unknown[69.94.158.83]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 17:38:26 mail.srvfarm.net postfix/smtpd[3155924]: NOQUEUE: reject: RCPT from unknown[69.94.158.83]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Jun  5 17:42:09 mail.srvfarm.net postfix/smtpd[3156526]: NOQUEUE: reject: RCPT from unknown[69.94.158.83]: 450 4.1.8 : Send

Jun  4 13:33:39 web01.agentur-b-2.de postfix/smtpd[178713]: NOQUEUE: reject: RCPT from unknown[69.94.158.116]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  4 13:35:57 web01.agentur-b-2.de postfix/smtpd[177278]: NOQUEUE: reject: RCPT from unknown[69.94.158.116]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  4 13:36:10 web01.agentur-b-2.de postfix/smtpd[177278]: NOQUEUE: reject: RCPT from unknown[69.94.158.116]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun  4 13:40:07 web01.agentur-b-2.de postfix/smtpd[181736]: NOQUEUE: reject: RCPT from unknown[69.94.158.116]: 450 4.7.1 : He

Jun  1 13:36:25 mail.srvfarm.net postfix/smtpd[577447]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 554 5.7.1 Service unavailable; Client host [69.94.158.68] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
Jun  1 13:36:54 mail.srvfarm.net postfix/smtpd[576967]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 554 5.7.1 Service unavailable; Client host [69.94.158.68] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
Jun  1 13:36:59 mail.srvfarm.net postfix/smtpd[576966]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 554 5.7.1 Service unavailable; Client host [69.94.158.68] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=

May 24 05:02:36 web01.agentur-b-2.de postfix/smtpd[509182]: NOQUEUE: reject: RCPT from unknown[69.94.158.92]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May 24 05:05:46 web01.agentur-b-2.de postfix/smtpd[507167]: NOQUEUE: reject: RCPT from unknown[69.94.158.92]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May 24 05:10:08 web01.agentur-b-2.de postfix/smtpd[502191]: NOQUEUE: reject: RCPT from unknown[69.94.158.92]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
May 24 05:12:05 web01.agentur-b-2.de postfix/smtpd[502191]: NOQUEUE: reject: RCPT from unknown[69.94.158.92]: 450 4.7.1 : Helo command rejected: Host

Email Spam

Apr 30 22:24:29 web01.agentur-b-2.de postfix/smtpd[308782]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 30 22:25:27 web01.agentur-b-2.de postfix/smtpd[311470]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 30 22:27:15 web01.agentur-b-2.de postfix/smtpd[314121]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 30 22:28:36 web01.agentur-b-2.de postfix/smtpd[311518]: NOQUEUE: reject: RCPT from unknown[69.94.158.68]: 450 4.7.1 : Helo command rejected: Host n

Apr 29 14:28:32 mail.srvfarm.net postfix/smtpd[166895]: NOQUEUE: reject: RCPT from unknown[69.94.158.86]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 29 14:30:31 mail.srvfarm.net postfix/smtpd[148816]: NOQUEUE: reject: RCPT from unknown[69.94.158.86]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 29 14:31:05 mail.srvfarm.net postfix/smtpd[169893]: NOQUEUE: reject: RCPT from unknown[69.94.158.86]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 29 14:31:29 mail.srvfarm.net postfix/smtpd[169892]: NOQUEUE: reject: RCPT from unknown[69.94.158.86]: 450 4.1.8 : Sender add

2020-04-25 1jSBUh-00034G-NK H=medical.ifixheal.com \(medical.porkaspk.com\) \[69.94.158.125\] rejected **REMOVED** : REJECTED - You seem to be a spammer!
2020-04-25 1jSCC3-00038E-DK H=medical.ifixheal.com \(medical.porkaspk.com\) \[69.94.158.125\] rejected **REMOVED** : REJECTED - You seem to be a spammer!
2020-04-25 1jSCC3-00038F-DK H=medical.ifixheal.com \(medical.porkaspk.com\) \[69.94.158.125\] rejected **REMOVED** : REJECTED - You seem to be a spammer!

Apr 23 10:12:23 web01.agentur-b-2.de postfix/smtpd[128143]: NOQUEUE: reject: RCPT from unknown[69.94.158.98]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 23 10:13:59 web01.agentur-b-2.de postfix/smtpd[131327]: NOQUEUE: reject: RCPT from unknown[69.94.158.98]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 23 10:15:25 web01.agentur-b-2.de postfix/smtpd[128143]: NOQUEUE: reject: RCPT from unknown[69.94.158.98]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 23 10:16:17 web01.agentur-b-2.de postfix/smtpd[128143]: NOQUEUE: reject: RCPT from unknown[69.94.158.98]: 450

Apr 22 22:41:32 mail.srvfarm.net postfix/smtpd[3565326]: NOQUEUE: reject: RCPT from unknown[69.94.158.117]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 22 22:41:32 mail.srvfarm.net postfix/smtpd[3564410]: NOQUEUE: reject: RCPT from unknown[69.94.158.117]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 22 22:41:32 mail.srvfarm.net postfix/smtpd[3565329]: NOQUEUE: reject: RCPT from unknown[69.94.158.117]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 22 22:41:32 mail.srvfar

Honeypot attack, port: 445, PTR: PTR record not found

445/tcp
[2019-09-25]1pkt

Honeypot attack, port: 23, PTR: host-41.36.124.250.tedata.net.

\[2019-09-25 15:31:57\] NOTICE\[1970\] chan_sip.c: Registration from '\' failed for '163.172.225.71:64783' - Wrong password
\[2019-09-25 15:31:57\] SECURITY\[1978\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-25T15:31:57.297-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="491000",SessionID="0x7f9b34331198",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/163.172.225.71/64783",Challenge="7be19632",ReceivedChallenge="7be19632",ReceivedHash="30d2531fd2e5602a5f4f166f1743821a"
\[2019-09-25 15:35:14\] NOTICE\[1970\] chan_sip.c: Registration from '\' failed for '163.172.225.71:51307' - Wrong password
\[2019-09-25 15:35:14\] SECURITY\[1978\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-25T15:35:14.100-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="22222220",SessionID="0x7f9b34331198",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV

xmlrpc attack

Sep 25 18:30:51 SilenceServices sshd[17022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.252.63
Sep 25 18:30:53 SilenceServices sshd[17022]: Failed password for invalid user princess123 from 217.182.252.63 port 42804 ssh2
Sep 25 18:34:30 SilenceServices sshd[19343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.252.63

Sep 25 05:14:48 friendsofhawaii sshd\[18941\]: Invalid user megan from 180.76.160.147
Sep 25 05:14:48 friendsofhawaii sshd\[18941\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.160.147
Sep 25 05:14:50 friendsofhawaii sshd\[18941\]: Failed password for invalid user megan from 180.76.160.147 port 53518 ssh2
Sep 25 05:19:54 friendsofhawaii sshd\[19354\]: Invalid user ts3server from 180.76.160.147
Sep 25 05:19:54 friendsofhawaii sshd\[19354\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.160.147

$f2bV_matches

Sep 25 14:21:35 aat-srv002 sshd[18753]: Failed password for root from 222.186.15.65 port 39136 ssh2
Sep 25 14:21:52 aat-srv002 sshd[18753]: error: maximum authentication attempts exceeded for root from 222.186.15.65 port 39136 ssh2 [preauth]
Sep 25 14:29:01 aat-srv002 sshd[18879]: Failed password for root from 222.186.15.65 port 20940 ssh2
Sep 25 14:29:17 aat-srv002 sshd[18879]: error: maximum authentication attempts exceeded for root from 222.186.15.65 port 20940 ssh2 [preauth]
...

Sep 25 12:07:42 xtremcommunity sshd\[463635\]: Invalid user jun from 45.77.151.55 port 60464
Sep 25 12:07:42 xtremcommunity sshd\[463635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.77.151.55
Sep 25 12:07:44 xtremcommunity sshd\[463635\]: Failed password for invalid user jun from 45.77.151.55 port 60464 ssh2
Sep 25 12:12:15 xtremcommunity sshd\[463749\]: Invalid user cassidy from 45.77.151.55 port 46492
Sep 25 12:12:15 xtremcommunity sshd\[463749\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.77.151.55
...

Automatic report - Banned IP Access

2323/tcp
[2019-09-25]1pkt

Sep 25 14:04:33 mail sshd[8396]: Invalid user td from 188.165.250.228
Sep 25 14:04:33 mail sshd[8396]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.250.228
Sep 25 14:04:33 mail sshd[8396]: Invalid user td from 188.165.250.228
Sep 25 14:04:35 mail sshd[8396]: Failed password for invalid user td from 188.165.250.228 port 48786 ssh2
Sep 25 14:16:19 mail sshd[26870]: Invalid user direct from 188.165.250.228
...

Automatic report - Port Scan Attack

ssh intrusion attempt