Sep 17 23:50:46 mail.srvfarm.net postfix/smtpd[274691]: warning: unknown[103.207.6.16]: SASL PLAIN authentication failed: 
Sep 17 23:50:46 mail.srvfarm.net postfix/smtpd[274691]: lost connection after AUTH from unknown[103.207.6.16]
Sep 17 23:55:28 mail.srvfarm.net postfix/smtps/smtpd[277889]: warning: unknown[103.207.6.16]: SASL PLAIN authentication failed: 
Sep 17 23:55:28 mail.srvfarm.net postfix/smtps/smtpd[277889]: lost connection after AUTH from unknown[103.207.6.16]
Sep 17 23:59:46 mail.srvfarm.net postfix/smtps/smtpd[275780]: warning: unknown[103.207.6.16]: SASL PLAIN authentication failed:

Sep 17 18:16:38 mail.srvfarm.net postfix/smtps/smtpd[157125]: warning: unknown[103.207.6.16]: SASL PLAIN authentication failed: 
Sep 17 18:16:39 mail.srvfarm.net postfix/smtps/smtpd[157125]: lost connection after AUTH from unknown[103.207.6.16]
Sep 17 18:18:26 mail.srvfarm.net postfix/smtpd[143206]: warning: unknown[103.207.6.16]: SASL PLAIN authentication failed: 
Sep 17 18:18:26 mail.srvfarm.net postfix/smtpd[143206]: lost connection after AUTH from unknown[103.207.6.16]
Sep 17 18:18:42 mail.srvfarm.net postfix/smtps/smtpd[140188]: warning: unknown[103.207.6.16]: SASL PLAIN authentication failed:

smtp probe/invalid login attempt

Sep 16 18:37:22 mail.srvfarm.net postfix/smtpd[3603351]: warning: unknown[103.207.6.243]: SASL PLAIN authentication failed: 
Sep 16 18:37:22 mail.srvfarm.net postfix/smtpd[3603351]: lost connection after AUTH from unknown[103.207.6.243]
Sep 16 18:39:08 mail.srvfarm.net postfix/smtps/smtpd[3603057]: warning: unknown[103.207.6.243]: SASL PLAIN authentication failed: 
Sep 16 18:39:08 mail.srvfarm.net postfix/smtps/smtpd[3603057]: lost connection after AUTH from unknown[103.207.6.243]
Sep 16 18:39:59 mail.srvfarm.net postfix/smtps/smtpd[3600011]: warning: unknown[103.207.6.243]: SASL PLAIN authentication failed:

Sep 16 18:37:22 mail.srvfarm.net postfix/smtpd[3603351]: warning: unknown[103.207.6.243]: SASL PLAIN authentication failed: 
Sep 16 18:37:22 mail.srvfarm.net postfix/smtpd[3603351]: lost connection after AUTH from unknown[103.207.6.243]
Sep 16 18:39:08 mail.srvfarm.net postfix/smtps/smtpd[3603057]: warning: unknown[103.207.6.243]: SASL PLAIN authentication failed: 
Sep 16 18:39:08 mail.srvfarm.net postfix/smtps/smtpd[3603057]: lost connection after AUTH from unknown[103.207.6.243]
Sep 16 18:39:59 mail.srvfarm.net postfix/smtps/smtpd[3600011]: warning: unknown[103.207.6.243]: SASL PLAIN authentication failed:

Sep 13 18:17:01 mail.srvfarm.net postfix/smtps/smtpd[1216379]: warning: unknown[103.207.6.77]: SASL PLAIN authentication failed: 
Sep 13 18:17:01 mail.srvfarm.net postfix/smtps/smtpd[1216379]: lost connection after AUTH from unknown[103.207.6.77]
Sep 13 18:17:46 mail.srvfarm.net postfix/smtps/smtpd[1230770]: warning: unknown[103.207.6.77]: SASL PLAIN authentication failed: 
Sep 13 18:17:47 mail.srvfarm.net postfix/smtps/smtpd[1230770]: lost connection after AUTH from unknown[103.207.6.77]
Sep 13 18:20:54 mail.srvfarm.net postfix/smtps/smtpd[1228782]: warning: unknown[103.207.6.77]: SASL PLAIN authentication failed:

Sep 13 18:17:01 mail.srvfarm.net postfix/smtps/smtpd[1216379]: warning: unknown[103.207.6.77]: SASL PLAIN authentication failed: 
Sep 13 18:17:01 mail.srvfarm.net postfix/smtps/smtpd[1216379]: lost connection after AUTH from unknown[103.207.6.77]
Sep 13 18:17:46 mail.srvfarm.net postfix/smtps/smtpd[1230770]: warning: unknown[103.207.6.77]: SASL PLAIN authentication failed: 
Sep 13 18:17:47 mail.srvfarm.net postfix/smtps/smtpd[1230770]: lost connection after AUTH from unknown[103.207.6.77]
Sep 13 18:20:54 mail.srvfarm.net postfix/smtps/smtpd[1228782]: warning: unknown[103.207.6.77]: SASL PLAIN authentication failed:

Sep 12 18:16:09 mail.srvfarm.net postfix/smtps/smtpd[532199]: warning: unknown[103.207.6.133]: SASL PLAIN authentication failed: 
Sep 12 18:16:10 mail.srvfarm.net postfix/smtps/smtpd[532199]: lost connection after AUTH from unknown[103.207.6.133]
Sep 12 18:18:08 mail.srvfarm.net postfix/smtpd[531922]: warning: unknown[103.207.6.133]: SASL PLAIN authentication failed: 
Sep 12 18:18:08 mail.srvfarm.net postfix/smtpd[531922]: lost connection after AUTH from unknown[103.207.6.133]
Sep 12 18:24:32 mail.srvfarm.net postfix/smtps/smtpd[547816]: warning: unknown[103.207.6.133]: SASL PLAIN authentication failed:

Sep 12 18:16:09 mail.srvfarm.net postfix/smtps/smtpd[532199]: warning: unknown[103.207.6.133]: SASL PLAIN authentication failed: 
Sep 12 18:16:10 mail.srvfarm.net postfix/smtps/smtpd[532199]: lost connection after AUTH from unknown[103.207.6.133]
Sep 12 18:18:08 mail.srvfarm.net postfix/smtpd[531922]: warning: unknown[103.207.6.133]: SASL PLAIN authentication failed: 
Sep 12 18:18:08 mail.srvfarm.net postfix/smtpd[531922]: lost connection after AUTH from unknown[103.207.6.133]
Sep 12 18:24:32 mail.srvfarm.net postfix/smtps/smtpd[547816]: warning: unknown[103.207.6.133]: SASL PLAIN authentication failed:

Brute force attempt

Aug 16 05:34:01 mail.srvfarm.net postfix/smtpd[1888510]: warning: unknown[103.207.6.205]: SASL PLAIN authentication failed: 
Aug 16 05:34:01 mail.srvfarm.net postfix/smtpd[1888510]: lost connection after AUTH from unknown[103.207.6.205]
Aug 16 05:37:12 mail.srvfarm.net postfix/smtpd[1906903]: warning: unknown[103.207.6.205]: SASL PLAIN authentication failed: 
Aug 16 05:37:12 mail.srvfarm.net postfix/smtpd[1906903]: lost connection after AUTH from unknown[103.207.6.205]
Aug 16 05:38:48 mail.srvfarm.net postfix/smtpd[1907841]: warning: unknown[103.207.6.205]: SASL PLAIN authentication failed:

Brute force attempt

Icarus honeypot on github

Aug 11 05:03:40 mail.srvfarm.net postfix/smtpd[2145468]: warning: unknown[103.207.6.54]: SASL PLAIN authentication failed: 
Aug 11 05:03:40 mail.srvfarm.net postfix/smtpd[2145468]: lost connection after AUTH from unknown[103.207.6.54]
Aug 11 05:04:58 mail.srvfarm.net postfix/smtpd[2145463]: warning: unknown[103.207.6.54]: SASL PLAIN authentication failed: 
Aug 11 05:04:59 mail.srvfarm.net postfix/smtpd[2145463]: lost connection after AUTH from unknown[103.207.6.54]
Aug 11 05:10:49 mail.srvfarm.net postfix/smtps/smtpd[2148626]: warning: unknown[103.207.6.54]: SASL PLAIN authentication failed:

(smtpauth) Failed SMTP AUTH login from 103.207.6.207 (IN/India/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-31 08:16:41 plain authenticator failed for ([103.207.6.207]) [103.207.6.207]: 535 Incorrect authentication data (set_id=info@webiranco.com)

Port Scan detected!
...

2019-07-09 06:35:35 1hkhqo-0006V5-70 SMTP connection from \(ln-static-139-255-52-203.link.net.id\) \[139.255.52.203\]:39249 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-07-09 06:35:46 1hkhqz-0006VG-2e SMTP connection from \(ln-static-139-255-52-203.link.net.id\) \[139.255.52.203\]:36139 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-07-09 06:35:54 1hkhr7-0006VN-HF SMTP connection from \(ln-static-139-255-52-203.link.net.id\) \[139.255.52.203\]:48745 I=\[193.107.88.166\]:25 closed by DROP in ACL
...

2019-10-23 11:43:27 1iNDAs-0006Hj-IH SMTP connection from \(\[136.145.249.146\]\) \[136.145.249.146\]:31009 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-10-23 11:43:37 1iNDB2-0006Hx-M1 SMTP connection from \(\[136.145.249.146\]\) \[136.145.249.146\]:31139 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-10-23 11:43:46 1iNDBB-0006IA-4s SMTP connection from \(\[136.145.249.146\]\) \[136.145.249.146\]:31226 I=\[193.107.88.166\]:25 closed by DROP in ACL
...

2019-06-22 04:32:31 1heVpN-00083g-KV SMTP connection from \(fm-dyn-139-194-173-191.fast.net.id\) \[139.194.173.191\]:37483 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-06-22 04:32:48 1heVpd-00083z-Md SMTP connection from \(fm-dyn-139-194-173-191.fast.net.id\) \[139.194.173.191\]:37613 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-06-22 04:33:00 1heVpp-000848-EF SMTP connection from \(fm-dyn-139-194-173-191.fast.net.id\) \[139.194.173.191\]:37704 I=\[193.107.88.166\]:25 closed by DROP in ACL
...

2019-07-08 15:58:32 1hkUA2-0001uf-VK SMTP connection from \(\[139.192.234.141\]\) \[139.192.234.141\]:24856 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-07-08 15:58:37 1hkUA8-0001ui-RE SMTP connection from \(\[139.192.234.141\]\) \[139.192.234.141\]:24914 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-07-08 15:58:44 1hkUAE-0001up-66 SMTP connection from \(\[139.192.234.141\]\) \[139.192.234.141\]:24952 I=\[193.107.88.166\]:25 closed by DROP in ACL
...

Feb  4 22:12:23 gw1 sshd[30146]: Failed password for root from 222.186.30.145 port 26442 ssh2
...

Unauthorized connection attempt detected from IP address 162.243.121.211 to port 2220 [J]

2020-2-4 5:54:46 PM: failed ssh attempt

SQL injection:/newsites/free/pierre/search/searchSVI.php?continentName=EU+-6863+union+all+select+1,1,CONCAT(0x3a6f79753a,0x4244764877697569706b,0x3a70687a3a)1%23&country=276+&prj_typ=all&startdate=&enddate=&from=&page=1&searchSubmission=Recherche

2019-03-04 08:06:50 1h0hgY-00033x-DY SMTP connection from lean.doapex.com \(lean.vevsabooks.space\) \[139.28.219.40\]:47664 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-03-04 08:09:13 1h0hir-00038e-Gn SMTP connection from lean.doapex.com \(lean.vevsabooks.space\) \[139.28.219.40\]:53818 I=\[193.107.90.29\]:25 closed by DROP in ACL
2019-03-04 08:09:39 1h0hjH-000396-38 SMTP connection from lean.doapex.com \(lean.vevsabooks.space\) \[139.28.219.40\]:55592 I=\[193.107.88.166\]:25 closed by DROP in ACL
...

2019-03-02 09:03:10 1gzzby-0002nC-Lp SMTP connection from bleach.doapex.com \(bleach.uttarakarnataka.host\) \[139.28.219.38\]:47244 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-03-02 09:03:10 1gzzby-0002nD-Lr SMTP connection from bleach.doapex.com \(bleach.uttarakarnataka.host\) \[139.28.219.38\]:50398 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-03-02 09:05:28 1gzzeC-0002qt-2H SMTP connection from bleach.doapex.com \(bleach.uttarakarnataka.host\) \[139.28.219.38\]:40613 I=\[193.107.90.29\]:25 closed by DROP in ACL
...

Feb  4 14:03:45 firewall sshd[26920]: Invalid user cnau from 46.101.124.220
Feb  4 14:03:46 firewall sshd[26920]: Failed password for invalid user cnau from 46.101.124.220 port 41948 ssh2
Feb  4 14:06:49 firewall sshd[27014]: Invalid user password from 46.101.124.220
...

Feb  4 17:55:28 lukav-desktop sshd\[4975\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.126.63  user=root
Feb  4 17:55:31 lukav-desktop sshd\[4975\]: Failed password for root from 106.54.126.63 port 43482 ssh2
Feb  4 17:57:32 lukav-desktop sshd\[4996\]: Invalid user bpb from 106.54.126.63
Feb  4 17:57:32 lukav-desktop sshd\[4996\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.126.63
Feb  4 17:57:34 lukav-desktop sshd\[4996\]: Failed password for invalid user bpb from 106.54.126.63 port 56780 ssh2

2019-03-11 20:34:29 H=\(\[138.122.96.80\]\) \[138.122.96.80\]:13237 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-11 20:34:35 H=\(\[138.122.96.80\]\) \[138.122.96.80\]:13332 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
2019-03-11 20:34:41 H=\(\[138.122.96.80\]\) \[138.122.96.80\]:13398 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed
...

2019-07-08 03:23:57 1hkINo-0008Bc-DD SMTP connection from \(fm-dyn-139-0-50-226.fast.net.id\) \[139.0.50.226\]:22857 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-07-08 03:24:07 1hkINy-0008C9-A1 SMTP connection from \(fm-dyn-139-0-50-226.fast.net.id\) \[139.0.50.226\]:22955 I=\[193.107.88.166\]:25 closed by DROP in ACL
2019-07-08 03:24:16 1hkIO7-0008CH-HD SMTP connection from \(fm-dyn-139-0-50-226.fast.net.id\) \[139.0.50.226\]:23011 I=\[193.107.88.166\]:25 closed by DROP in ACL
...

Unauthorized connection attempt detected from IP address 106.12.25.143 to port 2220 [J]