2020-05-07T19:18:12.838374scrat postfix/smtpd[3588456]: NOQUEUE: reject: RCPT from unknown[103.44.13.246]: 450 4.7.25 Client host rejected: cannot find your hostname, [103.44.13.246]; from= to= proto=ESMTP helo=<2cd.us>
2020-05-07T19:18:14.031213scrat postfix/smtpd[3588456]: NOQUEUE: reject: RCPT from unknown[103.44.13.246]: 450 4.7.25 Client host rejected: cannot find your hostname, [103.44.13.246]; from= to= proto=ESMTP helo=<2cd.us>
2020-05-07T19:18:15.209980scrat postfix/smtpd[3588456]: NOQUEUE: reject: RCPT from unknown[103.44.13.246]: 450 4.7.25 Client host rejected: cannot find your hostname, [103.44.13.246]; from= to= proto=ESMTP helo=<2cd.us>
2020-05-07T19:18:16.378713scrat postfix/smtpd[3588456]: NOQUEUE: reject: RCPT from unknown[103.44.13.246]: 450 4.7.25 Client host rejected: cannot find your hostname, [103.44.13.246]; from= to=

postfix

email spam

1576132051 - 12/12/2019 07:27:31 Host: 103.44.138.14/103.44.138.14 Port: 445 TCP Blocked

proto=tcp  .  spt=48682  .  dpt=25  .     (listed on     Github Combined on 3 lists )     (277)

"Account brute force using dictionary attack against Exchange Online"

Jul 19 07:35:43 animalibera sshd[21333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44  user=www-data
Jul 19 07:35:45 animalibera sshd[21333]: Failed password for www-data from 103.44.132.44 port 60640 ssh2
...

Mar 24 17:00:05 vtv3 sshd\[17397\]: Invalid user fei from 103.44.132.44 port 45674
Mar 24 17:00:05 vtv3 sshd\[17397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Mar 24 17:00:07 vtv3 sshd\[17397\]: Failed password for invalid user fei from 103.44.132.44 port 45674 ssh2
Mar 24 17:04:05 vtv3 sshd\[19006\]: Invalid user osadrc from 103.44.132.44 port 58088
Mar 24 17:04:05 vtv3 sshd\[19006\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Mar 30 04:26:03 vtv3 sshd\[27494\]: Invalid user yr from 103.44.132.44 port 52532
Mar 30 04:26:03 vtv3 sshd\[27494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Mar 30 04:26:05 vtv3 sshd\[27494\]: Failed password for invalid user yr from 103.44.132.44 port 52532 ssh2
Mar 30 04:34:56 vtv3 sshd\[30681\]: Invalid user write from 103.44.132.44 port 47708
Mar 30 04:34:56 vtv3 sshd\[30681\]: pam_unix\(sshd

Mar 24 17:00:05 vtv3 sshd\[17397\]: Invalid user fei from 103.44.132.44 port 45674
Mar 24 17:00:05 vtv3 sshd\[17397\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Mar 24 17:00:07 vtv3 sshd\[17397\]: Failed password for invalid user fei from 103.44.132.44 port 45674 ssh2
Mar 24 17:04:05 vtv3 sshd\[19006\]: Invalid user osadrc from 103.44.132.44 port 58088
Mar 24 17:04:05 vtv3 sshd\[19006\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Mar 30 04:26:03 vtv3 sshd\[27494\]: Invalid user yr from 103.44.132.44 port 52532
Mar 30 04:26:03 vtv3 sshd\[27494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Mar 30 04:26:05 vtv3 sshd\[27494\]: Failed password for invalid user yr from 103.44.132.44 port 52532 ssh2
Mar 30 04:34:56 vtv3 sshd\[30681\]: Invalid user write from 103.44.132.44 port 47708
Mar 30 04:34:56 vtv3 sshd\[30681\]: pam_unix\(sshd

Jul 13 18:37:34 mail sshd\[7826\]: Invalid user webuser from 103.44.132.44 port 45200
Jul 13 18:37:34 mail sshd\[7826\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Jul 13 18:37:35 mail sshd\[7826\]: Failed password for invalid user webuser from 103.44.132.44 port 45200 ssh2
Jul 13 18:41:40 mail sshd\[8650\]: Invalid user michael from 103.44.132.44 port 56902
Jul 13 18:41:40 mail sshd\[8650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44

Jul  5 01:57:10 unicornsoft sshd\[14937\]: Invalid user user from 103.44.132.44
Jul  5 01:57:10 unicornsoft sshd\[14937\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Jul  5 01:57:11 unicornsoft sshd\[14937\]: Failed password for invalid user user from 103.44.132.44 port 49644 ssh2

Jul  4 20:42:57 lnxmysql61 sshd[23667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Jul  4 20:42:57 lnxmysql61 sshd[23667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44

Automated report - ssh fail2ban:
Jul 3 18:33:35 authentication failure 
Jul 3 18:33:37 wrong password, user=angus, port=50950, ssh2
Jul 3 19:05:20 authentication failure

Jul  3 09:12:24 ip-172-31-62-245 sshd\[27881\]: Invalid user speedtest from 103.44.132.44\
Jul  3 09:12:26 ip-172-31-62-245 sshd\[27881\]: Failed password for invalid user speedtest from 103.44.132.44 port 54840 ssh2\
Jul  3 09:14:56 ip-172-31-62-245 sshd\[27903\]: Invalid user gitblit from 103.44.132.44\
Jul  3 09:14:58 ip-172-31-62-245 sshd\[27903\]: Failed password for invalid user gitblit from 103.44.132.44 port 46242 ssh2\
Jul  3 09:17:24 ip-172-31-62-245 sshd\[27931\]: Invalid user um from 103.44.132.44\

Jul  2 23:55:47 localhost sshd\[8404\]: Invalid user weng123 from 103.44.132.44 port 58594
Jul  2 23:55:47 localhost sshd\[8404\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
Jul  2 23:55:49 localhost sshd\[8404\]: Failed password for invalid user weng123 from 103.44.132.44 port 58594 ssh2
Jul  2 23:57:42 localhost sshd\[8473\]: Invalid user 123 from 103.44.132.44 port 48808
Jul  2 23:57:42 localhost sshd\[8473\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.44.132.44
...

2019-10-02T03:28:22.142054tmaserv sshd\[13298\]: Invalid user ftpuser from 103.31.82.122 port 54026
2019-10-02T03:28:22.146157tmaserv sshd\[13298\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.31.82.122
2019-10-02T03:28:24.194199tmaserv sshd\[13298\]: Failed password for invalid user ftpuser from 103.31.82.122 port 54026 ssh2
2019-10-02T03:33:15.453557tmaserv sshd\[13506\]: Invalid user ilanji from 103.31.82.122 port 46018
2019-10-02T03:33:15.456949tmaserv sshd\[13506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.31.82.122
2019-10-02T03:33:17.394699tmaserv sshd\[13506\]: Failed password for invalid user ilanji from 103.31.82.122 port 46018 ssh2
...

Port scan

Unauthorized connection attempt from IP address 216.8.239.29 on Port 445(SMB)

Oct  2 02:29:35 vps691689 sshd[14815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.65.92
Oct  2 02:29:37 vps691689 sshd[14815]: Failed password for invalid user web1 from 62.234.65.92 port 36571 ssh2
...

Unauthorized connection attempt from IP address 171.88.134.148 on Port 445(SMB)

Oct  2 03:33:49 server sshd\[9738\]: Invalid user smb from 200.201.217.104 port 57052
Oct  2 03:33:49 server sshd\[9738\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.201.217.104
Oct  2 03:33:51 server sshd\[9738\]: Failed password for invalid user smb from 200.201.217.104 port 57052 ssh2
Oct  2 03:38:58 server sshd\[26211\]: Invalid user teamspeak from 200.201.217.104 port 41830
Oct  2 03:38:58 server sshd\[26211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.201.217.104

Oct  2 01:24:09 rotator sshd\[3248\]: Failed password for root from 23.129.64.195 port 44146 ssh2Oct  2 01:24:12 rotator sshd\[3248\]: Failed password for root from 23.129.64.195 port 44146 ssh2Oct  2 01:24:14 rotator sshd\[3248\]: Failed password for root from 23.129.64.195 port 44146 ssh2Oct  2 01:24:17 rotator sshd\[3248\]: Failed password for root from 23.129.64.195 port 44146 ssh2Oct  2 01:24:20 rotator sshd\[3248\]: Failed password for root from 23.129.64.195 port 44146 ssh2Oct  2 01:24:23 rotator sshd\[3248\]: Failed password for root from 23.129.64.195 port 44146 ssh2
...

Automatic report - XMLRPC Attack

Oct  2 02:09:57 nextcloud sshd\[24958\]: Invalid user antivirus from 37.59.37.201
Oct  2 02:09:57 nextcloud sshd\[24958\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.37.201
Oct  2 02:09:59 nextcloud sshd\[24958\]: Failed password for invalid user antivirus from 37.59.37.201 port 52205 ssh2
...

Unauthorized connection attempt from IP address 77.60.16.15 on Port 445(SMB)

Feb  5 01:44:09 vtv3 sshd\[18080\]: Invalid user ts3 from 139.59.84.55 port 47058
Feb  5 01:44:09 vtv3 sshd\[18080\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.84.55
Feb  5 01:44:11 vtv3 sshd\[18080\]: Failed password for invalid user ts3 from 139.59.84.55 port 47058 ssh2
Feb  5 01:49:15 vtv3 sshd\[19490\]: Invalid user nathaniel from 139.59.84.55 port 50882
Feb  5 01:49:15 vtv3 sshd\[19490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.84.55
Feb 10 10:41:00 vtv3 sshd\[828\]: Invalid user bernd from 139.59.84.55 port 51868
Feb 10 10:41:00 vtv3 sshd\[828\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.84.55
Feb 10 10:41:01 vtv3 sshd\[828\]: Failed password for invalid user bernd from 139.59.84.55 port 51868 ssh2
Feb 10 10:46:49 vtv3 sshd\[2508\]: Invalid user vh from 139.59.84.55 port 41938
Feb 10 10:46:49 vtv3 sshd\[2508\]: pam_unix\(sshd:auth\): au

Unauthorized connection attempt from IP address 118.69.70.222 on Port 445(SMB)

2019-10-01T20:11:03.5493461495-001 sshd\[3772\]: Invalid user hoge from 2.4.46.210 port 54638
2019-10-01T20:11:03.5524301495-001 sshd\[3772\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=lfbn-mon-1-710-210.w2-4.abo.wanadoo.fr
2019-10-01T20:11:05.9626901495-001 sshd\[3772\]: Failed password for invalid user hoge from 2.4.46.210 port 54638 ssh2
2019-10-01T20:14:56.4826991495-001 sshd\[4040\]: Invalid user ij from 2.4.46.210 port 39540
2019-10-01T20:14:56.4857481495-001 sshd\[4040\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=lfbn-mon-1-710-210.w2-4.abo.wanadoo.fr
2019-10-01T20:14:58.6793531495-001 sshd\[4040\]: Failed password for invalid user ij from 2.4.46.210 port 39540 ssh2
...

Unauthorized connection attempt from IP address 197.155.233.242 on Port 445(SMB)

Oct  2 00:38:29 server sshd\[15407\]: Invalid user rajadhidevi from 51.158.185.198 port 33306
Oct  2 00:38:29 server sshd\[15407\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.185.198
Oct  2 00:38:31 server sshd\[15407\]: Failed password for invalid user rajadhidevi from 51.158.185.198 port 33306 ssh2
Oct  2 00:42:30 server sshd\[14583\]: Invalid user do from 51.158.185.198 port 46338
Oct  2 00:42:30 server sshd\[14583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.158.185.198