| 94.74.133.234 |
attackbots |
Jun 5 15:11:23 mail.srvfarm.net postfix/smtps/smtpd[3108734]: warning: unknown[94.74.133.234]: SASL PLAIN authentication failed:
Jun 5 15:11:23 mail.srvfarm.net postfix/smtps/smtpd[3108734]: lost connection after AUTH from unknown[94.74.133.234]
Jun 5 15:14:17 mail.srvfarm.net postfix/smtpd[3109366]: warning: unknown[94.74.133.234]: SASL PLAIN authentication failed:
Jun 5 15:14:17 mail.srvfarm.net postfix/smtpd[3109366]: lost connection after AUTH from unknown[94.74.133.234]
Jun 5 15:15:56 mail.srvfarm.net postfix/smtpd[3109220]: warning: unknown[94.74.133.234]: SASL PLAIN authentication failed: |
2020-06-08 01:00:21 |
| 138.68.107.225 |
attack |
2020-06-07T09:30:50.818720linuxbox-skyline sshd[198339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.107.225 user=root
2020-06-07T09:30:52.692877linuxbox-skyline sshd[198339]: Failed password for root from 138.68.107.225 port 33360 ssh2
... |
2020-06-08 01:16:08 |
| 106.13.163.39 |
attackbots |
Lines containing failures of 106.13.163.39
Jun 7 11:55:58 zabbix sshd[60280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.163.39 user=r.r
Jun 7 11:55:59 zabbix sshd[60280]: Failed password for r.r from 106.13.163.39 port 37864 ssh2
Jun 7 11:55:59 zabbix sshd[60280]: Received disconnect from 106.13.163.39 port 37864:11: Bye Bye [preauth]
Jun 7 11:55:59 zabbix sshd[60280]: Disconnected from authenticating user r.r 106.13.163.39 port 37864 [preauth]
Jun 7 12:08:43 zabbix sshd[61266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.163.39 user=r.r
Jun 7 12:08:45 zabbix sshd[61266]: Failed password for r.r from 106.13.163.39 port 42862 ssh2
Jun 7 12:08:46 zabbix sshd[61266]: Received disconnect from 106.13.163.39 port 42862:11: Bye Bye [preauth]
Jun 7 12:08:46 zabbix sshd[61266]: Disconnected from authenticating user r.r 106.13.163.39 port 42862 [preauth]
Jun 7 12:13:1........
------------------------------ |
2020-06-08 01:10:25 |
| 179.171.103.134 |
attack |
Jun 7 09:04:59 ws12vmsma01 sshd[28536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.171.103.134 user=root
Jun 7 09:05:01 ws12vmsma01 sshd[28536]: Failed password for root from 179.171.103.134 port 38053 ssh2
Jun 7 09:05:02 ws12vmsma01 sshd[28545]: Invalid user ubnt from 179.171.103.134
... |
2020-06-08 01:22:18 |
| 109.196.240.132 |
attackbotsspam |
Jun 5 15:40:31 mail.srvfarm.net postfix/smtps/smtpd[3114307]: warning: ip-109-196-240-132.static.system77.pl[109.196.240.132]: SASL PLAIN authentication failed:
Jun 5 15:40:31 mail.srvfarm.net postfix/smtps/smtpd[3114307]: lost connection after AUTH from ip-109-196-240-132.static.system77.pl[109.196.240.132]
Jun 5 15:48:28 mail.srvfarm.net postfix/smtps/smtpd[3115645]: warning: ip-109-196-240-132.static.system77.pl[109.196.240.132]: SASL PLAIN authentication failed:
Jun 5 15:48:28 mail.srvfarm.net postfix/smtps/smtpd[3115645]: lost connection after AUTH from ip-109-196-240-132.static.system77.pl[109.196.240.132]
Jun 5 15:49:11 mail.srvfarm.net postfix/smtpd[3113153]: warning: ip-109-196-240-132.static.system77.pl[109.196.240.132]: SASL PLAIN authentication failed: |
2020-06-08 00:50:50 |
| 178.217.115.154 |
attackspambots |
Jun 5 15:37:12 mail.srvfarm.net postfix/smtps/smtpd[3113844]: warning: unknown[178.217.115.154]: SASL PLAIN authentication failed:
Jun 5 15:37:12 mail.srvfarm.net postfix/smtps/smtpd[3113844]: lost connection after AUTH from unknown[178.217.115.154]
Jun 5 15:40:01 mail.srvfarm.net postfix/smtps/smtpd[3114111]: warning: unknown[178.217.115.154]: SASL PLAIN authentication failed:
Jun 5 15:40:01 mail.srvfarm.net postfix/smtps/smtpd[3114111]: lost connection after AUTH from unknown[178.217.115.154]
Jun 5 15:42:20 mail.srvfarm.net postfix/smtps/smtpd[3114349]: warning: unknown[178.217.115.154]: SASL PLAIN authentication failed: |
2020-06-08 00:47:47 |
| 157.245.34.59 |
attack |
Port scan: Attack repeated for 24 hours |
2020-06-08 01:13:37 |
| 49.235.39.217 |
attackspambots |
(sshd) Failed SSH login from 49.235.39.217 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 7 13:59:46 elude sshd[5957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.39.217 user=root
Jun 7 13:59:49 elude sshd[5957]: Failed password for root from 49.235.39.217 port 49834 ssh2
Jun 7 14:03:27 elude sshd[6532]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.39.217 user=root
Jun 7 14:03:29 elude sshd[6532]: Failed password for root from 49.235.39.217 port 34160 ssh2
Jun 7 14:05:43 elude sshd[6870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.39.217 user=root |
2020-06-08 00:37:28 |
| 186.216.71.26 |
attackbotsspam |
Jun 5 15:19:31 mail.srvfarm.net postfix/smtps/smtpd[3110631]: warning: unknown[186.216.71.26]: SASL PLAIN authentication failed:
Jun 5 15:19:32 mail.srvfarm.net postfix/smtps/smtpd[3110631]: lost connection after AUTH from unknown[186.216.71.26]
Jun 5 15:25:25 mail.srvfarm.net postfix/smtps/smtpd[3108732]: warning: unknown[186.216.71.26]: SASL PLAIN authentication failed:
Jun 5 15:25:25 mail.srvfarm.net postfix/smtps/smtpd[3108732]: lost connection after AUTH from unknown[186.216.71.26]
Jun 5 15:29:14 mail.srvfarm.net postfix/smtpd[3109485]: warning: unknown[186.216.71.26]: SASL PLAIN authentication failed: |
2020-06-08 00:57:27 |
| 149.72.43.118 |
attack |
Jun 5 16:19:20 web01.agentur-b-2.de postfix/smtpd[242238]: NOQUEUE: reject: RCPT from unknown[149.72.43.118]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 5 16:19:20 web01.agentur-b-2.de postfix/smtpd[242238]: lost connection after RCPT from unknown[149.72.43.118]
Jun 5 16:19:55 web01.agentur-b-2.de postfix/smtpd[242238]: NOQUEUE: reject: RCPT from unknown[149.72.43.118]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 5 16:19:55 web01.agentur-b-2.de postfix/smtpd[242238]: lost connection after RCPT from unknown[149.72.43.118]
Jun 5 16:20:59 web01.agentur-b-2.de postfix/smtpd[231463]: NOQUEUE: reject: RC |
2020-06-08 00:49:12 |
| 31.170.61.73 |
attackspambots |
$f2bV_matches |
2020-06-08 01:16:51 |
| 87.246.7.111 |
attackspambots |
Jun 7 16:00:04 lnxmail61 postfix/smtpd[28331]: warning: unknown[87.246.7.111]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 7 16:00:04 lnxmail61 postfix/smtpd[28331]: lost connection after AUTH from unknown[87.246.7.111]
Jun 7 16:00:17 lnxmail61 postfix/smtpd[28331]: warning: unknown[87.246.7.111]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 7 16:00:17 lnxmail61 postfix/smtpd[28331]: lost connection after AUTH from unknown[87.246.7.111]
Jun 7 16:00:34 lnxmail61 postfix/smtpd[28331]: warning: unknown[87.246.7.111]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun 7 16:00:34 lnxmail61 postfix/smtpd[28331]: lost connection after AUTH from unknown[87.246.7.111] |
2020-06-08 00:51:53 |
| 210.16.88.38 |
attackspambots |
Jun 5 16:02:48 mail.srvfarm.net postfix/smtpd[3113153]: warning: unknown[210.16.88.38]: SASL PLAIN authentication failed:
Jun 5 16:02:48 mail.srvfarm.net postfix/smtpd[3113153]: lost connection after AUTH from unknown[210.16.88.38]
Jun 5 16:09:08 mail.srvfarm.net postfix/smtps/smtpd[3129519]: warning: unknown[210.16.88.38]: SASL PLAIN authentication failed:
Jun 5 16:09:08 mail.srvfarm.net postfix/smtps/smtpd[3129519]: lost connection after AUTH from unknown[210.16.88.38]
Jun 5 16:10:40 mail.srvfarm.net postfix/smtpd[3129213]: warning: unknown[210.16.88.38]: SASL PLAIN authentication failed: |
2020-06-08 00:42:59 |
| 187.65.101.248 |
attack |
SSH Brute-Forcing (server2) |
2020-06-08 01:15:36 |
| 46.163.60.196 |
attackbotsspam |
Jun 5 15:36:59 mail.srvfarm.net postfix/smtps/smtpd[3113907]: warning: unknown[46.163.60.196]: SASL PLAIN authentication failed:
Jun 5 15:36:59 mail.srvfarm.net postfix/smtps/smtpd[3113907]: lost connection after AUTH from unknown[46.163.60.196]
Jun 5 15:41:35 mail.srvfarm.net postfix/smtps/smtpd[3113843]: warning: unknown[46.163.60.196]: SASL PLAIN authentication failed:
Jun 5 15:41:35 mail.srvfarm.net postfix/smtps/smtpd[3113843]: lost connection after AUTH from unknown[46.163.60.196]
Jun 5 15:42:42 mail.srvfarm.net postfix/smtps/smtpd[3114268]: warning: unknown[46.163.60.196]: SASL PLAIN authentication failed: |
2020-06-08 00:54:04 |