| 192.162.48.99 |
attackspam |
Aug 15 02:35:48 mail.srvfarm.net postfix/smtps/smtpd[968980]: warning: unknown[192.162.48.99]: SASL PLAIN authentication failed:
Aug 15 02:35:48 mail.srvfarm.net postfix/smtps/smtpd[968980]: lost connection after AUTH from unknown[192.162.48.99]
Aug 15 02:39:12 mail.srvfarm.net postfix/smtpd[965955]: warning: unknown[192.162.48.99]: SASL PLAIN authentication failed:
Aug 15 02:39:12 mail.srvfarm.net postfix/smtpd[965955]: lost connection after AUTH from unknown[192.162.48.99]
Aug 15 02:43:48 mail.srvfarm.net postfix/smtps/smtpd[964715]: warning: unknown[192.162.48.99]: SASL PLAIN authentication failed: |
2020-08-15 12:31:15 |
| 179.108.245.25 |
attack |
Aug 15 02:51:06 mail.srvfarm.net postfix/smtps/smtpd[967570]: warning: unknown[179.108.245.25]: SASL PLAIN authentication failed:
Aug 15 02:51:06 mail.srvfarm.net postfix/smtps/smtpd[967570]: lost connection after AUTH from unknown[179.108.245.25]
Aug 15 02:53:32 mail.srvfarm.net postfix/smtps/smtpd[967572]: warning: unknown[179.108.245.25]: SASL PLAIN authentication failed:
Aug 15 02:53:32 mail.srvfarm.net postfix/smtps/smtpd[967572]: lost connection after AUTH from unknown[179.108.245.25]
Aug 15 02:55:27 mail.srvfarm.net postfix/smtpd[970941]: warning: unknown[179.108.245.25]: SASL PLAIN authentication failed: |
2020-08-15 12:37:35 |
| 170.81.19.23 |
attackspam |
Aug 15 02:40:55 mail.srvfarm.net postfix/smtps/smtpd[968949]: warning: unknown[170.81.19.23]: SASL PLAIN authentication failed:
Aug 15 02:40:55 mail.srvfarm.net postfix/smtps/smtpd[968949]: lost connection after AUTH from unknown[170.81.19.23]
Aug 15 02:42:23 mail.srvfarm.net postfix/smtps/smtpd[967571]: warning: unknown[170.81.19.23]: SASL PLAIN authentication failed:
Aug 15 02:42:23 mail.srvfarm.net postfix/smtps/smtpd[967571]: lost connection after AUTH from unknown[170.81.19.23]
Aug 15 02:49:42 mail.srvfarm.net postfix/smtpd[970729]: warning: unknown[170.81.19.23]: SASL PLAIN authentication failed: |
2020-08-15 12:39:54 |
| 212.70.149.82 |
attackbotsspam |
Aug 15 06:15:08 srv01 postfix/smtpd\[32254\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 06:15:15 srv01 postfix/smtpd\[32529\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 06:15:16 srv01 postfix/smtpd\[32638\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 06:15:16 srv01 postfix/smtpd\[32637\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 06:15:37 srv01 postfix/smtpd\[32529\]: warning: unknown\[212.70.149.82\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
... |
2020-08-15 12:28:15 |
| 186.122.148.9 |
attack |
frenzy |
2020-08-15 12:34:35 |
| 185.234.218.84 |
attack |
Aug 15 02:38:42 web01.agentur-b-2.de postfix/smtpd[3367138]: warning: unknown[185.234.218.84]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 02:38:42 web01.agentur-b-2.de postfix/smtpd[3367138]: lost connection after AUTH from unknown[185.234.218.84]
Aug 15 02:41:03 web01.agentur-b-2.de postfix/smtpd[3367138]: warning: unknown[185.234.218.84]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 02:41:03 web01.agentur-b-2.de postfix/smtpd[3367138]: lost connection after AUTH from unknown[185.234.218.84]
Aug 15 02:45:29 web01.agentur-b-2.de postfix/smtpd[3367138]: warning: unknown[185.234.218.84]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 02:45:29 web01.agentur-b-2.de postfix/smtpd[3367138]: lost connection after AUTH from unknown[185.234.218.84] |
2020-08-15 12:35:36 |
| 91.82.114.77 |
attackspam |
Aug 15 02:08:43 mail.srvfarm.net postfix/smtpd[948604]: warning: unknown[91.82.114.77]: SASL PLAIN authentication failed:
Aug 15 02:08:43 mail.srvfarm.net postfix/smtpd[948604]: lost connection after AUTH from unknown[91.82.114.77]
Aug 15 02:14:32 mail.srvfarm.net postfix/smtps/smtpd[963475]: warning: unknown[91.82.114.77]: SASL PLAIN authentication failed:
Aug 15 02:14:32 mail.srvfarm.net postfix/smtps/smtpd[963475]: lost connection after AUTH from unknown[91.82.114.77]
Aug 15 02:16:09 mail.srvfarm.net postfix/smtpd[948604]: warning: unknown[91.82.114.77]: SASL PLAIN authentication failed: |
2020-08-15 12:55:24 |
| 196.1.126.68 |
attackspambots |
Aug 15 02:52:43 mail.srvfarm.net postfix/smtpd[972706]: warning: unknown[196.1.126.68]: SASL PLAIN authentication failed:
Aug 15 02:52:44 mail.srvfarm.net postfix/smtpd[972706]: lost connection after AUTH from unknown[196.1.126.68]
Aug 15 02:52:53 mail.srvfarm.net postfix/smtps/smtpd[968980]: warning: unknown[196.1.126.68]: SASL PLAIN authentication failed:
Aug 15 02:52:54 mail.srvfarm.net postfix/smtps/smtpd[968980]: lost connection after AUTH from unknown[196.1.126.68]
Aug 15 02:54:16 mail.srvfarm.net postfix/smtps/smtpd[968949]: warning: unknown[196.1.126.68]: SASL PLAIN authentication failed: |
2020-08-15 12:30:18 |
| 222.186.15.62 |
attack |
Aug 15 06:17:51 vps639187 sshd\[6925\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.62 user=root
Aug 15 06:17:53 vps639187 sshd\[6925\]: Failed password for root from 222.186.15.62 port 45242 ssh2
Aug 15 06:17:56 vps639187 sshd\[6925\]: Failed password for root from 222.186.15.62 port 45242 ssh2
... |
2020-08-15 12:22:16 |
| 149.72.94.234 |
attackbotsspam |
Aug 15 02:38:25 web01.agentur-b-2.de postfix/smtpd[3350846]: NOQUEUE: reject: RCPT from unknown[149.72.94.234]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Aug 15 02:45:12 web01.agentur-b-2.de postfix/smtpd[3367138]: NOQUEUE: reject: RCPT from unknown[149.72.94.234]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Aug 15 02:45:12 web01.agentur-b-2.de postfix/smtpd[3367138]: lost connection after RCPT from unknown[149.72.94.234]
Aug 15 02:45:45 web01.agentur-b-2.de postfix/smtpd[3350846]: NOQUEUE: reject: RCPT from unknown[149.72.94.234]: 450 4.7.1 : Helo command rejected: Host |
2020-08-15 12:41:02 |
| 191.53.223.152 |
attackspambots |
Aug 15 02:38:39 mail.srvfarm.net postfix/smtps/smtpd[968949]: warning: unknown[191.53.223.152]: SASL PLAIN authentication failed:
Aug 15 02:38:40 mail.srvfarm.net postfix/smtps/smtpd[968949]: lost connection after AUTH from unknown[191.53.223.152]
Aug 15 02:46:10 mail.srvfarm.net postfix/smtpd[966738]: warning: unknown[191.53.223.152]: SASL PLAIN authentication failed:
Aug 15 02:46:10 mail.srvfarm.net postfix/smtpd[966738]: lost connection after AUTH from unknown[191.53.223.152]
Aug 15 02:46:40 mail.srvfarm.net postfix/smtps/smtpd[969052]: warning: unknown[191.53.223.152]: SASL PLAIN authentication failed: |
2020-08-15 12:31:38 |
| 104.236.203.29 |
attackspam |
port scan and connect, tcp 80 (http) |
2020-08-15 12:26:26 |
| 185.234.216.66 |
attack |
Aug 15 02:39:51 web01.agentur-b-2.de postfix/smtpd[3367138]: warning: unknown[185.234.216.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 02:39:51 web01.agentur-b-2.de postfix/smtpd[3367138]: lost connection after AUTH from unknown[185.234.216.66]
Aug 15 02:41:09 web01.agentur-b-2.de postfix/smtpd[3367138]: warning: unknown[185.234.216.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 02:41:09 web01.agentur-b-2.de postfix/smtpd[3367138]: lost connection after AUTH from unknown[185.234.216.66]
Aug 15 02:46:45 web01.agentur-b-2.de postfix/smtpd[3367138]: warning: unknown[185.234.216.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-08-15 12:36:53 |
| 202.52.249.171 |
attackspam |
Aug 15 02:21:26 mail.srvfarm.net postfix/smtpd[963151]: warning: unknown[202.52.249.171]: SASL PLAIN authentication failed:
Aug 15 02:21:27 mail.srvfarm.net postfix/smtpd[963151]: lost connection after AUTH from unknown[202.52.249.171]
Aug 15 02:23:04 mail.srvfarm.net postfix/smtpd[965228]: warning: unknown[202.52.249.171]: SASL PLAIN authentication failed:
Aug 15 02:23:05 mail.srvfarm.net postfix/smtpd[965228]: lost connection after AUTH from unknown[202.52.249.171]
Aug 15 02:26:41 mail.srvfarm.net postfix/smtps/smtpd[963475]: warning: unknown[202.52.249.171]: SASL PLAIN authentication failed: |
2020-08-15 12:47:21 |
| 45.145.67.163 |
attack |
SmallBizIT.US 4 packets to tcp(18064,18440,25519,25854) |
2020-08-15 12:16:07 |