๐บ๐ธ
TheMadBeaker
2026-07-07 16:29:46
(18 hours ago)
Fail2Ban - SMTP Bruteforce Attempt
Email Spam
Brute-Force
๐ซ๐ท
dblanque
2026-07-07 07:32:46
(1 day ago)
Fail2ban - SASL Ban Event Triggered. (IP: 104.166.171.94)
Email Spam
Brute-Force
๐ฎ๐ฉ
xveil
2026-07-07 07:05:57
(1 day ago)
2026-07-07T14:05:55.489898 mail-honeypot postfix/submission/smtpd[8013]: warning: unknown[104.166.17 ...
show more
2026-07-07T14:05:55.489898 mail-honeypot postfix/submission/smtpd[8013]: warning: unknown[104.166.171.94]: SASL PLAIN authentication failed: authentication failure
...
show less
Brute-Force
๐ฌ๐ง
iss-security-operations
2026-07-06 12:00:18
(1 day ago)
Seen attempting a bruteforce against SMTP services
Brute-Force
๐ฌ๐ง
iss-security-operations
2026-07-05 12:00:15
(2 days ago)
Seen attempting a bruteforce against SMTP services
Brute-Force
Anonymous
2026-07-05 11:59:09
(2 days ago)
(smtpauth) Failed SMTP AUTH login from 104.166.171.94 (IT/Italy/-)
Brute-Force
๐ฎ๐ฉ
xveil
2026-07-04 20:28:17
(3 days ago)
2026-07-05T03:28:14.877995 mail-honeypot postfix/submission/smtpd[23825]: warning: unknown[104.166.1 ...
show more
2026-07-05T03:28:14.877995 mail-honeypot postfix/submission/smtpd[23825]: warning: unknown[104.166.171.94]: SASL PLAIN authentication failed: authentication failure
...
show less
Brute-Force
๐ต๐ฆ
iphezimbra
2026-07-04 16:31:45
(3 days ago)
Fail2Ban reported IP from jail zimbra-smtp on <hostname>
Brute-Force
SSH
๐ฉ๐ช
Scimetrica
2026-07-03 16:00:02
(4 days ago)
Reported automatically by fail2ban on mail.scimetrica.com
Hacking
๐ฌ๐ง
iss-security-operations
2026-07-03 12:00:14
(4 days ago)
Seen attempting a bruteforce against SMTP services
Brute-Force
๐ง๐ท
SvrAdmin
2026-07-03 10:28:13
(5 days ago)
[101] (smtpauth) Failed SMTP AUTH login from 104.166.171.94 (IT/Italy/-): 5 in the last 3600 secs; P ...
show more
[101] (smtpauth) Failed SMTP AUTH login from 104.166.171.94 (IT/Italy/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-07-03 07:27:58 dovecot_plain authenticator failed for H=(cpanel01.staybox.com.br) [104.166.171.94]:61496: 535 Incorrect authentication data ([email protected] )
2026-07-03 07:28:03 dovecot_plain authenticator failed for H=(cpanel01.staybox.com.br) [104.166.171.94]:61510: 535 Incorrect authentication data ([email protected] )
2026-07-03 07:28:04 dovecot_plain authenticator failed for H=(cpanel01.staybox.com.br) [104.166.171.94]:61496: 535 Incorrect authentication data ([email protected] )
2026-07-03 07:28:09 dovecot_plain authenticator failed for H=(cpanel01.staybox.com.br) [104.166.171.94]:61510: 535 Incorrect authentication data ([email protected] )
2026-07-03 07:28:10 dovecot_plain authenticator failed for H=(cpanel01.staybox.com.br) [104.166.171.94]:61496: 535 Incorrect authentication data (set_id=dorki)
show less
Port Scan
Hacking
Brute-Force
Exploited Host
๐ฎ๐ฉ
xveil
2026-07-03 07:55:10
(5 days ago)
2026-07-03T14:55:07.697074 mail-honeypot postfix/submission/smtpd[7572]: warning: unknown[104.166.17 ...
show more
2026-07-03T14:55:07.697074 mail-honeypot postfix/submission/smtpd[7572]: warning: unknown[104.166.171.94]: SASL PLAIN authentication failed: authentication failure
...
show less
Brute-Force
๐จ๐ญ
Elysium Security
2026-07-02 23:23:18
(5 days ago)
Mass scanning for Web CVE
Web App Attack
๐ต๐พ
SecOpsSL
2026-07-02 20:29:49
(5 days ago)
Jul 2 16:15:33 mail postfix/smtps/smtpd[8263]: warning: unknown[104.166.171.94]: SASL PLAIN authent ...
show more
Jul 2 16:15:33 mail postfix/smtps/smtpd[8263]: warning: unknown[104.166.171.94]: SASL PLAIN authentication failed: authentication failure
show less
Email Spam
Brute-Force
๐บ๐ธ
bigscoots.com
2026-07-02 18:40:06
(5 days ago)
(smtpauth) Failed SMTP AUTH login from 104.166.171.94 (IT/Italy/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 104.166.171.94 (IT/Italy/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-07-02 14:39:52 dovecot_plain authenticator failed for H=(mail.perrla.com) [104.166.171.94]:62850: 535 Incorrect authentication data ([email protected] )
2026-07-02 14:39:56 dovecot_plain authenticator failed for H=(mail.perrla.com) [104.166.171.94]:62851: 535 Incorrect authentication data ([email protected] )
2026-07-02 14:39:56 dovecot_plain authenticator failed for H=(mail.perrla.com) [104.166.171.94]:62849: 535 Incorrect authentication data ([email protected] )
2026-07-02 14:39:58 dovecot_plain authenticator failed for H=(mail.perrla.com) [104.166.171.94]:62850: 535 Incorrect authentication data ([email protected] )
2026-07-02 14:40:02 dovecot_plain authenticator failed for H=(mail.perrla.com) [104.166.171.94]:62849: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH