Fail2Ban Ban Triggered

Automatic report - Port Scan Attack

Nov 26 21:03:11 xzibhostname postfix/smtpd[27245]: warning: hostname ip-113-124.4vendeta.com does not resolve to address 78.128.113.124: Name or service not known
Nov 26 21:03:11 xzibhostname postfix/smtpd[27245]: connect from unknown[78.128.113.124]
Nov 26 21:03:12 xzibhostname postfix/smtpd[27245]: warning: unknown[78.128.113.124]: SASL LOGIN authentication failed: authentication failure
Nov 26 21:03:12 xzibhostname postfix/smtpd[27245]: lost connection after AUTH from unknown[78.128.113.124]
Nov 26 21:03:12 xzibhostname postfix/smtpd[27245]: disconnect from unknown[78.128.113.124]
Nov 26 21:03:12 xzibhostname postfix/smtpd[27245]: warning: hostname ip-113-124.4vendeta.com does not resolve to address 78.128.113.124: Name or service not known
Nov 26 21:03:12 xzibhostname postfix/smtpd[27245]: connect from unknown[78.128.113.124]
Nov 26 21:03:14 xzibhostname postfix/smtpd[27245]: warning: unknown[78.128.113.124]: SASL LOGIN authentication failed: authentication failure
........
-------------------------------

port scan and connect, tcp 23 (telnet)

Nov 30 15:38:22 srv206 sshd[29372]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.193  user=root
Nov 30 15:38:25 srv206 sshd[29372]: Failed password for root from 218.92.0.193 port 13609 ssh2
...

Nov 30 15:38:41 sso sshd[27785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.128.126
Nov 30 15:38:43 sso sshd[27785]: Failed password for invalid user calvet from 119.29.128.126 port 59788 ssh2
...

2019-11-30T14:05:41.305973abusebot-3.cloudsearch.cf sshd\[14888\]: Invalid user huddleston from 111.200.195.73 port 40431

Nov 30 04:31:10 kapalua sshd\[4940\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.79.90.72  user=www-data
Nov 30 04:31:13 kapalua sshd\[4940\]: Failed password for www-data from 103.79.90.72 port 46018 ssh2
Nov 30 04:34:52 kapalua sshd\[4979\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.79.90.72  user=root
Nov 30 04:34:54 kapalua sshd\[4979\]: Failed password for root from 103.79.90.72 port 35081 ssh2
Nov 30 04:38:26 kapalua sshd\[5034\]: Invalid user sengupta from 103.79.90.72
Nov 30 04:38:26 kapalua sshd\[5034\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.79.90.72

Invalid user icq from 34.83.184.206 port 45844

Nov 30 15:34:19 sd-53420 sshd\[17512\]: Invalid user happy from 219.148.37.34
Nov 30 15:34:19 sd-53420 sshd\[17512\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.148.37.34
Nov 30 15:34:20 sd-53420 sshd\[17512\]: Failed password for invalid user happy from 219.148.37.34 port 49681 ssh2
Nov 30 15:38:21 sd-53420 sshd\[18104\]: User root from 219.148.37.34 not allowed because none of user's groups are listed in AllowGroups
Nov 30 15:38:21 sd-53420 sshd\[18104\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=219.148.37.34  user=root
...

Canada Goose Counterfeit Spam

Received: from sxw.dadimy.cn (104.223.225.95)
Date: Thu, 28 Nov 2019 20:50:59 +0100
Return-Path: bounce-4_____8@dadimy.cn
From: Canada Goose 
Reply-to: Canada Goose 
Subject: Black Friday Best Deals: Winter Coats 70% OFF Ends Soon!
Message-ID: <1_____c@localhost>

RetailMeNot
2019 Black Friday Sale is Open Now!
Canada Goose
Canada Goose
Canada Goose Black Friday Sale Up To 70% OFF & Worldwide Free Shipping!
Expires Soon!
Get Deal
See More Deals
facebooktwitterg+ pinterest
If you do not wish to receive any further communications of this type, unsubscribe.
Get the latest on savings, finance, couponing... Goose Outlet Store
Some of these deals feature products with limited quantities. Prices and quantities may be subject to change by retailers at their discretion.
Copyright 2019 RetailMeNot, Inc., 301 Congress Avenue Suite 700, Austin, TX, 78701 USA

2019-11-30T14:51:07.888305abusebot-6.cloudsearch.cf sshd\[19191\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.131  user=root

Nov 30 15:38:42 dedicated sshd[16238]: Invalid user pris from 80.91.176.139 port 33460

Oct  2 19:09:15 vtv3 sshd[17735]: Failed password for invalid user cod2 from 68.183.127.93 port 45356 ssh2
Oct  2 19:13:28 vtv3 sshd[19822]: Invalid user bandit from 68.183.127.93 port 58164
Oct  2 19:13:28 vtv3 sshd[19822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.127.93
Oct  2 19:26:00 vtv3 sshd[26796]: Invalid user suporte from 68.183.127.93 port 40128
Oct  2 19:26:01 vtv3 sshd[26796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.127.93
Oct  2 19:26:02 vtv3 sshd[26796]: Failed password for invalid user suporte from 68.183.127.93 port 40128 ssh2
Oct  2 19:30:14 vtv3 sshd[28883]: Invalid user brad from 68.183.127.93 port 52940
Oct  2 19:30:14 vtv3 sshd[28883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.127.93
Oct  2 19:42:41 vtv3 sshd[2647]: Invalid user steven from 68.183.127.93 port 34906
Oct  2 19:42:41 vtv3 sshd[2647]: pam_unix(sshd:auth): authenticat

2019-11-30T07:21:38.181777abusebot-6.cloudsearch.cf sshd\[17194\]: Invalid user test from 143.208.181.32 port 49488