Attempt to extort using email [email protected] to bitcoin address 15J3ZhZ6q6n2146Gdk5ncjqW ...
show moreAttempt to extort using email [email protected] to bitcoin address 15J3ZhZ6q6n2146Gdk5ncjqWaN84rNtvMd
Nov 6 14:25:05 XXXXXX postfix/smtpd[469475]: disconnect from 168-194-186-17.dedicado.r2conect.com.br[168.194.186.17] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
show less
Extortion: "However, don't worry, there is still a way to resolve this:
You need to carry out a $12 ...
show moreExtortion: "However, don't worry, there is still a way to resolve this:
You need to carry out a $1250 USD transfer to my wallet (equivalent amount in bitcoins
1E4Ek9N68 mogRZq9x4 hiRQ4W2k 3iiDehYk"
show less
SMTP hacking
May 16 13:29:46 XXXXXX postfix/smtpd[448132]: disconnect from unknown[98.126.219.97] e ...
show moreSMTP hacking
May 16 13:29:46 XXXXXX postfix/smtpd[448132]: disconnect from unknown[98.126.219.97] ehlo=1 mail=1 rcpt=0/1 data=0/1 quit=1 commands=3/5
May 16 13:19:40 XXXXXX postfix/smtpd[447805]: disconnect from unknown[98.126.219.97] ehlo=1 mail=1 rcpt=0/1 data=0/1 quit=1 commands=3/5
May 16 13:09:34 XXXXXX postfix/smtpd[447548]: disconnect from unknown[98.126.219.97] ehlo=1 mail=1 rcpt=0/1 data=0/1 quit=1 commands=3/5
show less
About 40 of these log entries today
May 4 11:41:52 XXXXXX postfix/smtpd[32360]: disconnect from un ...
show moreAbout 40 of these log entries today
May 4 11:41:52 XXXXXX postfix/smtpd[32360]: disconnect from unknown[2.58.115.16] ehlo=1 mail=1 rcpt=0/1 data=0/1 quit=1 commands=3/5
May 4 11:35:57 XXXXXX postfix/smtpd[32192]: disconnect from unknown[162.243.149.9] unknown=0/1 commands=0/1
May 4 08:28:26 XXXXXX postfix/smtpd[26761]: disconnect from unknown[2.58.115.16] ehlo=1 mail=1 rcpt=0/1 data=0/1 quit=1 commands=3/5
show less
50 or more records like the following:
May 3 06:50:20 XXXXXX postfix/smtpd[183014]: disconnect fro ...
show more50 or more records like the following:
May 3 06:50:20 XXXXXX postfix/smtpd[183014]: disconnect from unknown[107.182.131.167] ehlo=2 starttls=1 auth=0/1 commands=3/4
May 3 06:49:41 XXXXXX postfix/smtpd[182734]: disconnect from unknown[107.182.131.167] ehlo=2 starttls=1 auth=0/1 commands=3/4
May 3 06:49:04 XXXXXX postfix/smtpd[182734]: disconnect from unknown[107.182.131.167] ehlo=2 starttls=1 auth=0/1 commands=3/4
show less
I will be blocking the 64.40.0.0/16 because other IPs in the group were doing the same thing.
Apr ...
show moreI will be blocking the 64.40.0.0/16 because other IPs in the group were doing the same thing.
Apr 4 20:23:50 XXXXXX postfix/smtpd[924503]: disconnect from unknown[64.40.154.71] ehlo=1 mail=1 rcpt=0/1 data=0/1 quit=1 commands=3/5
Apr 4 20:13:49 XXXXXX postfix/smtpd[924357]: disconnect from unknown[64.40.154.71] ehlo=1 mail=1 rcpt=0/1 data=0/1 quit=1 commands=3/5
show less
Mar 2 17:55:17 XXXXXX postfix/smtpd[1475196]: disconnect from unknown[113.31.103.87] ehlo=1 mail=1 ...
show moreMar 2 17:55:17 XXXXXX postfix/smtpd[1475196]: disconnect from unknown[113.31.103.87] ehlo=1 mail=1 rcpt=0/1 data=0/1 quit=1 commands=3/5
Mar 2 17:55:17 XXXXXX postfix/smtpd[1475196]: NOQUEUE: reject: RCPT from unknown[113.31.103.87]: 450 4.7.25 Client host rejected: cannot find your hostname, [113.31.103.87]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<server1.rkdhf.fun>
Mar 2 17:55:17 XXXXXX postfix/smtpd[1475196]: discarding EHLO keywords: CHUNKING
Mar 2 17:55:17 XXXXXX postfix/smtpd[1475196]: connect from unknown[113.31.103.87]
Mar 2 17:55:17 XXXXXX postfix/smtpd[1475196]: warning: hostname uihgf.xyz does not resolve to address 113.31.103.87: Name or service not known
Similar records occurred over 50 time on Mar 2
show less
Feb 13 21:31:49 LucasCo postfix/smtpd[719279]: disconnect from unknown[109.206.240.225] ehlo=1 auth= ...
show moreFeb 13 21:31:49 LucasCo postfix/smtpd[719279]: disconnect from unknown[109.206.240.225] ehlo=1 auth=0/1 quit=1 commands=2/3
Feb 13 21:30:22 LucasCo postfix/smtpd[719279]: disconnect from unknown[109.206.240.225] ehlo=1 auth=0/1 quit=1 commands=2/3
Feb 13 21:28:59 LucasCo postfix/smtpd[719279]: disconnect from unknown[109.206.240.225] ehlo=1 auth=0/1 quit=1 commands=2/3
show less
Hello,
We have found instances of child pornography accessed from your IP address. This is a puni ...
show moreHello,
We have found instances of child pornography accessed from your IP address. This is a punishable offence under The Child Pornography Prevention Act of 1996 . For now we are blacklisting your IP address and if there is any further action from Microsoft you will be informed via email.
If this was not you and you suspect potential hack or id theft contact Microsoft Support Team at +1-(808)-353-6306
Microsoft Support
+1-808-353-6306
Feb 1 10:19:45 XXXXXXX postfix/anvil[156710]: statistics: max connection rate 1/60s for (smtp:159.183.70.214) at Feb 1 10:16:24
Feb 1 10:16:25 XXXXXXX postfix/qmgr[1733]: CA7204185125: removed
Feb 1 10:16:25 XXXXXXX postfix/local[156713]: CA7204185125: to=<[email protected]>, relay=local, delay=0.33, delays=0.26/0.01/0/0.06, dsn=2.0.0, status=sent (delivered to mailbox)
Feb 1 10:16:25 XXXXXXX postfix/smtpd[156708]: disconnect from wfbtqsds.outbound-mail.sendgrid.net[159.183.70.214] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
show less
Sending email as Microsoft and threatening about child pornography.
Jan 31 16:08:35 xxx postfix/qmg ...
show moreSending email as Microsoft and threatening about child pornography.
Jan 31 16:08:35 xxx postfix/qmgr[1733]: CA3384185125: from=<[email protected]>, size=21848, nrcpt=1 (queue active)
Jan 31 16:08:35 xxx postfix/cleanup[135438]: CA3384185125: message-id=<DIb3PJrNT3yJVQanqA7jNA@geopod-ismtpd-3-4>
Jan 31 16:08:34 xxx postfix/smtpd[135434]: CA3384185125: client=wrqvftsb.outbound-mail.sendgrid.net[149.72.247.107]
Jan 31 16:08:34 xxx postfix/smtpd[135434]: discarding EHLO keywords: CHUNKING
Jan 31 16:08:34 xxx postfix/smtpd[135434]: discarding EHLO keywords: CHUNKING
Jan 31 16:08:34 xxx postfix/smtpd[135434]: connect from wrqvftsb.outbound-mail.sendgrid.net[149.72.247.107]
show less
postfix smtpd qmgr local email sent attempting extortion to bitcoin: 15mSqySLsJ8MZqNQ7RfXiq54HGyt7uh ...
show morepostfix smtpd qmgr local email sent attempting extortion to bitcoin: 15mSqySLsJ8MZqNQ7RfXiq54HGyt7uh3Cn
show less
Fraud OrdersEmail SpamSpoofing
By clicking βAccept allβ, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.