45 172.94.9.163
45 172.94.9.150
40 212.227.245.164
40 172.94.9.152
32 138.121.139.154
24 45.176.26.163
18 74.176.216.24
14 178.16.55.50
6 200.229.79.127
2 121.73.162.132
2 118.123.116.93
1 98.98.240.47
1 98.102.148.242
1 95.79.57.221
1 95.79.108.51
1 93.145.152.138
1 91.146.24.164
1 90.173.78.90
1 89.68.245.7
1 89.175.199.86
45 [email protected] 45 [email protected] 40 [email protected] 15 [email protected] 9 [email protected] 7 contato 6 [email protected] 6 [email protected] 6 financeiro 5 [email protected] 5 [email protected] 5 adilson.francisco 4 [email protected] 4 [email protected] 4 [email protected] 4 [email protected] 4 [email protected] 4 [email protected] 4 [email protected] 4 postmaster
A/D IP address Port Dir Time To Live Comment DENY 172.94.9.163 * inout 40m 31s lfd - (smtpauth) Failed SMTP AUTH login from 172.94.9.163 (GB/United Kingdom/-): 5 in the last 3600 secs DENY 212.227.245.164 * inout 42m 21s lfd - (smtpauth) Failed SMTP AUTH login from 212.227.245.164 (DE/Germany/-): 5 in the last 3600 secs DENY 172.94.9.152 * inout 47m 26s lfd - (smtpauth) Failed SMTP AUTH login from 172.94.9.152 (GB/United Kingdom/-): 5 in the last 3600 secs DENY 172.94.9.150 * inout 49m 6s lfd - (smtpauth) Failed SMTP AUTH login from 172.94.9.150 (GB/United Kingdom/-): 5 in the last 3600 secs ALLOW 172.18.17.2 * inout 21h 30m 13s Manually added: 172.18.17.2 (-)
Jun 9 09:34:26 mail postfix/smtpd[1922564]: warning: unknown[172.94.9.152]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Jun 9 09:35:07 mail postfix/smtpd[1928211]: warning: unknown[172.94.9.150]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Jun 9 09:35:40 mail postfix/smtpd[1922564]: warning: unknown[172.94.9.152]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Jun 9 09:36:28 mail postfix/smtpd[1947321]: Anonymous TLS connection established from ar.boxenv17.email[45.145.220.142]: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256 Jun 9 09:36:28 mail postfix/smtpd[1947321]: A31561800370: client=ar.boxenv17.email[45.145.220.142] Jun 9 09:37:15 mail postfix/smtpd[1949590]: Anonymous TLS connection established from b6b.ro-w7nc.c.ya-n96bl.2.saphira.blacknigth2000.de[46.105.36.212]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jun 9 09:39:05 mail postfix/smtpd[1954575]: warning: unknown[172.94.9.152]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Jun 9 09:39:15 mail postfix/smtpd[1947321]: Anonymous TLS connection established from b6b.ro-w7nc.c.ya-n96bl.2.saphira.blacknigth2000.de[46.105.36.212]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jun 9 09:39:16 mail postfix/smtpd[1954575]: warning: unknown[172.94.9.150]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Jun 9 09:40:44 mail postfix/smtpd[1954575]: warning: unknown[172.94.9.150]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Jun 9 09:41:15 mail postfix/smtpd[1960813]: Anonymous TLS connection established from 138.204.226.37-static.host.exo.net.br[138.204.226.37]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jun 9 09:41:15 mail postfix/smtpd[1954575]: Anonymous TLS connection established from 138.204.226.37-static.host.exo.net.br[138.204.226.37]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jun 9 09:42:15 mail postfix/smtpd[1963568]: Anonymous TLS connection established from b6b.ro-w7nc.c.ya-n96bl.2.saphira.blacknigth2000.de[46.105.36.212]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jun 9 09:42:29 mail postfix/smtpd[1959748]: Anonymous TLS connection established from unknown[72.227.136.237]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jun 9 09:42:35 mail postfix/smtpd[1959748]: warning: unknown[72.227.136.237]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Jun 9 09:42:35 mail postfix/smtpd[1954575]: Anonymous TLS connection established from unknown[200.229.79.127]: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256 Jun 9 09:42:37 mail postfix/smtpd[1954575]: warning: unknown[200.229.79.127]: SASL PLAIN authentication failed: (reason unavailable), [email protected] Jun 9 09:42:40 mail postfix/smtpd[1959748]: Anonymous TLS connection established from unknown[149.34.191.39]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jun 9 09:42:43 mail postfix/smtpd[1954575]: warning: unknown[200.229.79.127]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Jun 9 09:42:46 mail postfix/smtpd[1959748]: warning: unknown[149.34.191.39]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=ivan.bortolotti Jun 9 09:44:42 mail postfix/smtpd[1970408]: Anonymous TLS connection established from cat.boxenv29.email[45.145.220.212]: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256 Jun 9 09:44:43 mail postfix/smtpd[1970408]: 608521800370: client=cat.boxenv29.email[45.145.220.212] Jun 9 09:44:48 mail postfix/smtpd[1970675]: Anonymous TLS connection established from unknown[122.187.231.172]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jun 9 09:44:54 mail postfix/smtpd[1970675]: warning: unknown[122.187.231.172]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Jun 9 09:44:57 mail postfix/smtpd[1970675]: Anonymous TLS connection established from unknown[200.153.86.250]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jun 9 09:45:02 mail postfix/smtpd[1970675]: warning: unknown[200.153.86.250]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=adilson.francisco Jun 9 09:45:23 mail postfix/smtpd[1972317]: Anonymous TLS connection established from unknown[27.121.83.84]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jun 9 09:45:30 mail postfix/smtpd[1972317]: warning: unknown[27.121.83.84]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Jun 9 09:45:40 mail postfix/smtpd[1970675]: Anonymous TLS connection established from unknown[128.185.187.2]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jun 9 09:45:46 mail postfix/smtpd[1970675]: warning: unknown[128.185.187.2]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=operacional Jun 9 09:46:28 mail postfix/smtpd[1975574]: Anonymous TLS connection established from 138.204.226.37-static.host.exo.net.br[138.204.226.37]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jun 9 09:46:28 mail postfix/smtpd[1975573]: Anonymous TLS connection established from 138.204.226.37-static.host.exo.net.br[138.204.226.37]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jun 9 09:46:29 mail postfix/smtpd[1975576]: Anonymous TLS connection established from 138.204.226.37-static.host.exo.net.br[138.204.226.37]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jun 9 09:47:15 mail postfix/smtpd[1977701]: Anonymous TLS connection established from b6b.ro-w7nc.c.ya-n96bl.2.saphira.blacknigth2000.de[46.105.36.212]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jun 9 09:50:15 mail postfix/smtpd[1986758]: Anonymous TLS connection established from b6b.ro-w7nc.c.ya-n96bl.2.saphira.blacknigth2000.de[46.105.36.212]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jun 9 00:01:23 mail lfd[504817]: Incoming IP 172.94.9.163 temporary block removed Jun 9 00:01:23 mail lfd[504817]: Outgoing IP 172.94.9.163 temporary block removed Jun 9 00:01:48 mail lfd[506032]: Incoming IP 172.94.9.150 temporary block removed Jun 9 00:01:48 mail lfd[506032]: Outgoing IP 172.94.9.150 temporary block removed Jun 9 00:04:39 mail lfd[514229]: (smtpauth) Failed SMTP AUTH login from 172.94.9.163 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 00:10:14 mail lfd[530553]: (smtpauth) Failed SMTP AUTH login from 172.94.9.150 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 00:33:30 mail lfd[598248]: Incoming IP 172.94.9.152 temporary block removed Jun 9 00:33:30 mail lfd[598248]: Outgoing IP 172.94.9.152 temporary block removed Jun 9 00:39:16 mail lfd[614975]: (smtpauth) Failed SMTP AUTH login from 172.94.9.152 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 00:59:37 mail lfd[672456]: Incoming IP 212.227.245.164 temporary block removed Jun 9 00:59:37 mail lfd[672456]: Outgoing IP 212.227.245.164 temporary block removed Jun 9 01:04:42 mail lfd[686221]: Incoming IP 172.94.9.163 temporary block removed Jun 9 01:04:42 mail lfd[686221]: Outgoing IP 172.94.9.163 temporary block removed Jun 9 01:05:02 mail lfd[687147]: (smtpauth) Failed SMTP AUTH login from 212.227.245.164 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 01:08:27 mail lfd[696076]: (smtpauth) Failed SMTP AUTH login from 172.94.9.163 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 01:10:18 mail lfd[701079]: Incoming IP 172.94.9.150 temporary block removed Jun 9 01:10:18 mail lfd[701079]: Outgoing IP 172.94.9.150 temporary block removed Jun 9 01:21:28 mail lfd[731303]: (smtpauth) Failed SMTP AUTH login from 172.94.9.150 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 01:39:19 mail lfd[779879]: Incoming IP 172.94.9.152 temporary block removed Jun 9 01:39:19 mail lfd[779879]: Outgoing IP 172.94.9.152 temporary block removed Jun 9 01:50:35 mail lfd[810626]: (smtpauth) Failed SMTP AUTH login from 172.94.9.152 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 02:05:06 mail lfd[850160]: Incoming IP 212.227.245.164 temporary block removed Jun 9 02:05:06 mail lfd[850160]: Outgoing IP 212.227.245.164 temporary block removed Jun 9 02:08:31 mail lfd[859465]: Incoming IP 172.94.9.163 temporary block removed Jun 9 02:08:31 mail lfd[859465]: Outgoing IP 172.94.9.163 temporary block removed Jun 9 02:11:02 mail lfd[866294]: (smtpauth) Failed SMTP AUTH login from 212.227.245.164 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 02:14:12 mail lfd[874902]: (smtpauth) Failed SMTP AUTH login from 172.94.9.163 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 02:21:32 mail lfd[894827]: Incoming IP 172.94.9.150 temporary block removed Jun 9 02:21:32 mail lfd[894827]: Outgoing IP 172.94.9.150 temporary block removed Jun 9 02:32:43 mail lfd[925279]: (smtpauth) Failed SMTP AUTH login from 172.94.9.150 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 02:50:39 mail lfd[973965]: Incoming IP 172.94.9.152 temporary block removed Jun 9 02:50:39 mail lfd[973965]: Outgoing IP 172.94.9.152 temporary block removed Jun 9 03:02:50 mail lfd[1006914]: (smtpauth) Failed SMTP AUTH login from 172.94.9.152 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 03:11:05 mail lfd[1029227]: Incoming IP 212.227.245.164 temporary block removed Jun 9 03:11:05 mail lfd[1029227]: Outgoing IP 212.227.245.164 temporary block removed Jun 9 03:14:16 mail lfd[1037870]: Incoming IP 172.94.9.163 temporary block removed Jun 9 03:14:16 mail lfd[1037870]: Outgoing IP 172.94.9.163 temporary block removed Jun 9 03:16:51 mail lfd[1044943]: (smtpauth) Failed SMTP AUTH login from 212.227.245.164 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 03:18:56 mail lfd[1050595]: (smtpauth) Failed SMTP AUTH login from 172.94.9.163 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 03:32:47 mail lfd[1089109]: Incoming IP 172.94.9.150 temporary block removed Jun 9 03:32:47 mail lfd[1089109]: Outgoing IP 172.94.9.150 temporary block removed Jun 9 03:42:38 mail lfd[1115466]: (smtpauth) Failed SMTP AUTH login from 172.94.9.150 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 04:02:54 mail lfd[1169854]: Incoming IP 172.94.9.152 temporary block removed Jun 9 04:02:54 mail lfd[1169854]: Outgoing IP 172.94.9.152 temporary block removed Jun 9 04:13:05 mail lfd[1197103]: (smtpauth) Failed SMTP AUTH login from 172.94.9.152 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 04:16:55 mail lfd[1207427]: Incoming IP 212.227.245.164 temporary block removed Jun 9 04:16:55 mail lfd[1207427]: Outgoing IP 212.227.245.164 temporary block removed Jun 9 04:19:00 mail lfd[1213064]: Incoming IP 172.94.9.163 temporary block removed Jun 9 04:19:00 mail lfd[1213064]: Outgoing IP 172.94.9.163 temporary block removed Jun 9 04:23:15 mail lfd[1224351]: (smtpauth) Failed SMTP AUTH login from 212.227.245.164 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 04:25:26 mail lfd[1230215]: (smtpauth) Failed SMTP AUTH login from 172.94.9.163 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 04:42:42 mail lfd[1276644]: Incoming IP 172.94.9.150 temporary block removed Jun 9 04:42:42 mail lfd[1276644]: Outgoing IP 172.94.9.150 temporary block removed Jun 9 04:51:37 mail lfd[1300557]: (smtpauth) Failed SMTP AUTH login from 172.94.9.150 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 05:13:09 mail lfd[1358580]: Incoming IP 172.94.9.152 temporary block removed Jun 9 05:13:09 mail lfd[1358580]: Outgoing IP 172.94.9.152 temporary block removed Jun 9 05:22:24 mail lfd[1383695]: (smtpauth) Failed SMTP AUTH login from 172.94.9.152 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 05:23:19 mail lfd[1386181]: Incoming IP 212.227.245.164 temporary block removed Jun 9 05:23:19 mail lfd[1386181]: Outgoing IP 212.227.245.164 temporary block removed Jun 9 05:25:29 mail lfd[1392116]: Incoming IP 172.94.9.163 temporary block removed Jun 9 05:25:29 mail lfd[1392116]: Outgoing IP 172.94.9.163 temporary block removed Jun 9 05:28:40 mail lfd[1400684]: (smtpauth) Failed SMTP AUTH login from 172.94.9.163 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 05:30:25 mail lfd[1405411]: (smtpauth) Failed SMTP AUTH login from 212.227.245.164 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 05:51:41 mail lfd[1463029]: Incoming IP 172.94.9.150 temporary block removed Jun 9 05:51:41 mail lfd[1463029]: Outgoing IP 172.94.9.150 temporary block removed Jun 9 06:00:42 mail lfd[1487424]: (smtpauth) Failed SMTP AUTH login from 172.94.9.150 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 06:22:28 mail lfd[1546379]: Incoming IP 172.94.9.152 temporary block removed Jun 9 06:22:28 mail lfd[1546379]: Outgoing IP 172.94.9.152 temporary block removed Jun 9 06:28:44 mail lfd[1563419]: Incoming IP 172.94.9.163 temporary block removed Jun 9 06:28:44 mail lfd[1563419]: Outgoing IP 172.94.9.163 temporary block removed Jun 9 06:30:29 mail lfd[1568228]: Incoming IP 212.227.245.164 temporary block removed Jun 9 06:30:29 mail lfd[1568228]: Outgoing IP 212.227.245.164 temporary block removed Jun 9 06:31:39 mail lfd[1571317]: (smtpauth) Failed SMTP AUTH login from 172.94.9.152 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 06:35:29 mail lfd[1581860]: (smtpauth) Failed SMTP AUTH login from 172.94.9.163 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 06:37:34 mail lfd[1587467]: (smtpauth) Failed SMTP AUTH login from 212.227.245.164 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 07:00:46 mail lfd[1650230]: Incoming IP 172.94.9.150 temporary block removed Jun 9 07:00:46 mail lfd[1650230]: Outgoing IP 172.94.9.150 temporary block removed Jun 9 07:10:57 mail lfd[1677643]: (smtpauth) Failed SMTP AUTH login from 172.94.9.150 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 08:21:09 mail lfd[1709780]: Incoming IP 172.94.9.152 temporary block removed Jun 9 08:21:09 mail lfd[1709780]: Outgoing IP 172.94.9.152 temporary block removed Jun 9 08:21:10 mail lfd[1709780]: Incoming IP 172.94.9.163 temporary block removed Jun 9 08:21:10 mail lfd[1709780]: Outgoing IP 172.94.9.163 temporary block removed Jun 9 08:21:10 mail lfd[1709780]: Incoming IP 212.227.245.164 temporary block removed Jun 9 08:21:10 mail lfd[1709780]: Outgoing IP 212.227.245.164 temporary block removed Jun 9 08:21:10 mail lfd[1709780]: Incoming IP 172.94.9.150 temporary block removed Jun 9 08:21:10 mail lfd[1709780]: Outgoing IP 172.94.9.150 temporary block removed Jun 9 08:21:24 mail lfd[1710552]: *SSH login* from 172.18.17.2 into the root account using password authentication Jun 9 08:25:14 mail lfd[1721388]: *SSH login* from 172.18.17.2 into the root account using password authentication Jun 9 08:27:10 mail lfd[1727274]: (smtpauth) Failed SMTP AUTH login from 172.94.9.163 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 08:27:35 mail lfd[1728514]: (smtpauth) Failed SMTP AUTH login from 212.227.245.164 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 08:30:20 mail lfd[1736803]: (smtpauth) Failed SMTP AUTH login from 172.94.9.152 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 08:31:10 mail lfd[1739324]: (smtpauth) Failed SMTP AUTH login from 172.94.9.150 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 09:27:10 mail lfd[1919280]: Incoming IP 172.94.9.163 temporary block removed Jun 9 09:27:10 mail lfd[1919280]: Outgoing IP 172.94.9.163 temporary block removed Jun 9 09:27:35 mail lfd[1921209]: Incoming IP 212.227.245.164 temporary block removed Jun 9 09:27:35 mail lfd[1921209]: Outgoing IP 212.227.245.164 temporary block removed Jun 9 09:30:20 mail lfd[1930376]: Incoming IP 172.94.9.152 temporary block removed Jun 9 09:30:20 mail lfd[1930376]: Outgoing IP 172.94.9.152 temporary block removed Jun 9 09:31:10 mail lfd[1932670]: Incoming IP 172.94.9.150 temporary block removed Jun 9 09:31:10 mail lfd[1932670]: Outgoing IP 172.94.9.150 temporary block removed Jun 9 09:32:11 mail lfd[1935459]: (smtpauth) Failed SMTP AUTH login from 172.94.9.163 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 09:34:01 mail lfd[1940503]: (smtpauth) Failed SMTP AUTH login from 212.227.245.164 (DE/Germany/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 09:39:06 mail lfd[1954785]: (smtpauth) Failed SMTP AUTH login from 172.94.9.152 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 09:40:46 mail lfd[1959455]: (smtpauth) Failed SMTP AUTH login from 172.94.9.150 (GB/United Kingdom/-): 5 in the last 3600 secs - *Blocked in csf* for 3600 secs [LF_SMTPAUTH] Jun 9 09:51:37 mail lfd[1990862]: *SSH login* from 172.18.17.2 into the root account using password authentication