🇩🇪
yitzhaq
2026-10-11 12:47:22
UTC ·
(1 month ago)
Oct 11 14:47:05 [host] vpopmail[262174]: vchkpw-imap: vpopmail user not found [email]:102.129.52.160
Oct 11 14:47:12 [host] vpopmail[262182]: vchkpw-imap: vpopmail user not found [email]:102.129.52.160
Oct 11 14:47:18 [host] vpopmail[262194]: vchkpw- ...
show more
Oct 11 14:47:05 [host] vpopmail[262174]: vchkpw-imap: vpopmail user not found [email]:102.129.52.160
Oct 11 14:47:12 [host] vpopmail[262182]: vchkpw-imap: vpopmail user not found [email]:102.129.52.160
Oct 11 14:47:18 [host] vpopmail[262194]: vchkpw-imap: vpopmail user not found [email]:102.129.52.160
show less
Brute-Force
2026-09-24 01:30:06
UTC ·
(1 month ago)
Repeated inbound connection attempts blocked by firewall. Observed at least twice within 24 hours.
Hacking
2026-08-20 01:32:44
UTC ·
(2 months ago)
Authentication failure
Brute-Force
🇮🇩
sockominfo
2026-08-19 23:00:53
UTC ·
(2 months ago)
Zimbra: Login failures from malicious IP: 102.129.52.160. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and ...
show more
Zimbra: Login failures from malicious IP: 102.129.52.160. Threat Score: 6.4/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
2026-08-13 18:18:14
UTC ·
(3 months ago)
2026-08-13T19:18:13.679291+01:00 [masked] dovecot[1870051]: imap-login: Login aborted: Connection closed (auth failed, 3 attempts in 28 secs) (auth_failed): user=<oreillynet.com>, method=PLAIN, rip=102.129.52.160, lip=192.168.1.160, TLS, session=<Dlm ...
show more
2026-08-13T19:18:13.679291+01:00 [masked] dovecot[1870051]: imap-login: Login aborted: Connection closed (auth failed, 3 attempts in 28 secs) (auth_failed): user=<oreillynet.com>, method=PLAIN, rip=102.129.52.160, lip=192.168.1.160, TLS, session=<Dlm+t/FYBeBmgTSg>
...
show less
Brute-Force
🇦🇺
AWW-Admin
2026-08-12 12:11:51
UTC ·
(3 months ago)
(imapd) Failed IMAP login from 102.129.52.160 (ms-52-160.megasurf.co.za)
Brute-Force
🇬🇧
D3monite
2026-08-12 11:48:49
UTC ·
(3 months ago)
Attempted Brute Force (dovecot)
Brute-Force
🇩🇪
it-ngo.com
2026-08-12 11:20:56
UTC ·
(3 months ago)
RdpGuard detected brute-force attempt on IMAP
Brute-Force
🇵🇦
iphezimbra
2026-08-12 06:16:43
UTC ·
(3 months ago)
Fail2Ban reported IP from jail zimbra-web on <hostname>
Brute-Force
SSH
2026-08-12 05:00:22
UTC ·
(3 months ago)
BruteForce IMAP/POP3/SMTP
Brute-Force
🇦🇹
AustrianSimon
2026-07-10 19:38:50
UTC ·
(4 months ago)
10 Jul 2026 19:38:50UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 102.129.52.160
Brute-Force
🇷🇴
gtheo99
2026-07-01 03:30:42
UTC ·
(4 months ago)
(imapd) Failed IMAP login from 102.129.52.160 (ZA/South Africa/ms-52-160.megasurf.co.za): 3 in the last 900 secs
Brute-Force
Email Spam
🇮🇩
sockominfo
2026-06-29 09:00:53
UTC ·
(4 months ago)
Zimbra: Login failures from malicious IP: 102.129.52.160. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and ...
show more
Zimbra: Login failures from malicious IP: 102.129.52.160. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-06-29 08:00:53
UTC ·
(4 months ago)
Zimbra: Login failures from malicious IP: 102.129.52.160. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and ...
show more
Zimbra: Login failures from malicious IP: 102.129.52.160. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-06-29 07:00:09
UTC ·
(4 months ago)
Zimbra: Login failures from malicious IP: 102.129.52.160. Threat Score: 6/10 (MEDIUM). Reported by TangerangKota-CSIRT
Hacking
Web App Attack
