🇩🇪
vcis.de
2026-09-02 19:56:22
(26 minutes ago)
SMTP brute force attack detected from [122.139.223.25]
Brute-Force
🇺🇦
MakselPr
2026-09-02 19:11:46
(1 hour ago)
Sep 2 17:28:56 mail postfix/smtps/smtpd[1748488]: warning: unknown[122.139.223.25]: SASL LOGIN auth ...
show more
Sep 2 17:28:56 mail postfix/smtps/smtpd[1748488]: warning: unknown[122.139.223.25]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
Sep 2 22:11:46 mail postfix/smtps/smtpd[1761636]: warning: unknown[122.139.223.25]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
...
show less
Brute-Force
🇮🇩
aaKenshin
2026-09-02 18:49:20
(1 hour ago)
Suspicious activity detected from IP 122.139.223.25 based on mailserver logs.
Sample logs:
2026-09-0 ...
show more
Suspicious activity detected from IP 122.139.223.25 based on mailserver logs.
Sample logs:
2026-09-03 02:29:22,354 INFO [qtp2102534528-312710] [ip=172.16.0.182;oip=122.139.223.25;oport=11998;oproto=smtp;port=52244;soapId=36651b7d;] account - Error occurred during authentication: authentication failed for [**]. Reason: account not found.
2026-09-03 02:29:22,354 INFO [qtp2102534528-312710] [ip=172.16.0.182;oip=122.139.223.25;oport=11998;oproto=smtp;port=52244;soapId=36651b7d;] SoapEngine - handler exception: authentication failed for [**], account not found
2026-09-03 02:29:22,354 INFO [qtp2102534528-312710] [ip=172.16.0.182;oip=122.139.223.25;oport=11998;oproto=smtp;port=52244;soapId=36651b7d;] soap - AuthRequest elapsed=0
2026-09-03 02:49:10,652 INFO [qtp2102534528-312854] [name=**@*.id;ip=172.16.0.182;oip=122.139.223.25;oport=12130;oproto=smtp;port=55436;soapId=36651ba7;] SoapEngine - handler exception: authentication failed for [**], LDAP error: - unable to ldap authenticate: in
show less
Brute-Force
🇫🇷
adlp.org
2026-09-02 17:59:56
(2 hours ago)
Brute-Force
🇩🇪
Paul Smith
2026-09-02 17:30:58
(2 hours ago)
Email Auth Brute force attack 7/6 in last day
Brute-Force
🇩🇪
DAUGDE
2026-09-02 16:39:24
(3 hours ago)
2026-09-02T17:05:33.293956+02:00 v2202104133598150667 9275893e7080[1040]: Sep 2 17:05:33 9275893e70 ...
show more
2026-09-02T17:05:33.293956+02:00 v2202104133598150667 9275893e7080[1040]: Sep 2 17:05:33 9275893e7080 postfix/submission/smtpd[122716]: warning: unknown[122.139.223.25]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=office
2026-09-02T17:05:34.428650+02:00 v2202104133598150667 9275893e7080[1040]: Sep 2 17:05:34 9275893e7080 postfix/submission/smtpd[122716]: lost connection after AUTH from unknown[122.139.223.25]
2026-09-02T18:39:23.970807+02:00 v2202104133598150667 9275893e7080[1040]: Sep 2 18:39:23 9275893e7080 postfix/smtps/smtpd[123652]: lost connection after CONNECT from unknown[122.139.223.25]
...
show less
Email Spam
Spoofing
Brute-Force
🇩🇪
FeG Deutschland
2026-09-02 16:06:04
(4 hours ago)
Mail: - login with unknown user - bruteforce
Brute-Force
🇩🇪
kreativstrecke
2026-09-02 15:30:29
(4 hours ago)
2026-09-02T17:30:28.210014+02:00 srv03 postfix/smtps/smtpd[2929564]: warning: unknown[122.139.223.25 ...
show more
2026-09-02T17:30:28.210014+02:00 srv03 postfix/smtps/smtpd[2929564]: warning: unknown[122.139.223.25]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
...
show less
Brute-Force
🇩🇪
rd1742
2026-09-02 15:16:31
(5 hours ago)
Sep 2 15:16:30 quad dovecot: auth-worker(490185): sql(
[email protected] ,122.139.223.25): unknown user
Brute-Force
Exploited Host
🇺🇸
mnogoweb
2026-09-02 15:09:08
(5 hours ago)
(smtpauth) Failed SMTP AUTH login from 122.139.223.25 (CN/China/25.223.139.122.adsl-pool.jlccptt.net ...
show more
(smtpauth) Failed SMTP AUTH login from 122.139.223.25 (CN/China/25.223.139.122.adsl-pool.jlccptt.net.cn): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-02 08:17:03 login authenticator failed for ([71.19.205.135]) [122.139.223.25]: 535 Incorrect authentication data ([email protected] )
2026-09-02 08:17:20 login authenticator failed for ([71.19.205.135]) [122.139.223.25]: 535 Incorrect authentication data ([email protected] )
2026-09-02 08:24:22 login authenticator failed for ([128.134.83.141]) [122.139.223.25]: 535 Incorrect authentication data (set_id=poli)
2026-09-02 09:01:15 login authenticator failed for ([103.121.27.218]) [122.139.223.25]: 535 Incorrect authentication data ([email protected] )
2026-09-02 09:09:03 login authenticator failed for ([212.73.75.82]) [122.139.223.25]: 535 Incorrect authentication data (set_id=maxturner)
show less
Port Scan
🇺🇸
mnogoweb
2026-09-02 14:01:04
(6 hours ago)
(smtpauth) Failed SMTP AUTH login from 122.139.223.25 (CN/China/25.223.139.122.adsl-pool.jlccptt.net ...
show more
(smtpauth) Failed SMTP AUTH login from 122.139.223.25 (CN/China/25.223.139.122.adsl-pool.jlccptt.net.cn): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-02 07:32:36 login authenticator failed for (208-96-233-67.resi.cgocable.ca) [122.139.223.25]: 535 Incorrect authentication data ([email protected] )
2026-09-02 07:32:43 login authenticator failed for (208-96-233-67.resi.cgocable.ca) [122.139.223.25]: 535 Incorrect authentication data (set_id=davejones)
2026-09-02 07:37:59 login authenticator failed for ([149.54.62.162]) [122.139.223.25]: 535 Incorrect authentication data ([email protected] )
2026-09-02 08:00:04 login authenticator failed for (azteca-comunicaciones.com) [122.139.223.25]: 535 Incorrect authentication data ([email protected] )
2026-09-02 08:01:01 login authenticator failed for (azteca-comunicaciones.com) [122.139.223.25]: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
🇫🇮
23p02732
2026-09-02 13:59:58
(6 hours ago)
Mailserver and mailaccount attacks
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
mnogoweb
2026-09-02 13:03:44
(7 hours ago)
(smtpauth) Failed SMTP AUTH login from 122.139.223.25 (CN/China/25.223.139.122.adsl-pool.jlccptt.net ...
show more
(smtpauth) Failed SMTP AUTH login from 122.139.223.25 (CN/China/25.223.139.122.adsl-pool.jlccptt.net.cn): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-02 06:47:32 login authenticator failed for ([61.61.8.12]) [122.139.223.25]: 535 Incorrect authentication data (set_id=emilywalker)
2026-09-02 06:55:21 login authenticator failed for (biophormula.static.gvt.net.br) [122.139.223.25]: 535 Incorrect authentication data ([email protected] )
2026-09-02 06:58:07 login authenticator failed for ([41.128.181.196]) [122.139.223.25]: 535 Incorrect authentication data (set_id=johndavis)
2026-09-02 07:02:54 login authenticator failed for ([201.28.176.31]) [122.139.223.25]: 535 Incorrect authentication data ([email protected] )
2026-09-02 07:03:44 login authenticator failed for (azteca-comunicaciones.com) [122.139.223.25]: 535 Incorrect authentication data (set_id=harperrobinson)
show less
Port Scan
🇺🇸
mnogoweb
2026-09-02 12:25:27
(7 hours ago)
(smtpauth) Failed SMTP AUTH login from 122.139.223.25 (CN/China/25.223.139.122.adsl-pool.jlccptt.net ...
show more
(smtpauth) Failed SMTP AUTH login from 122.139.223.25 (CN/China/25.223.139.122.adsl-pool.jlccptt.net.cn): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-02 05:56:54 login authenticator failed for ([59.120.179.121]) [122.139.223.25]: 535 Incorrect authentication data ([email protected] )
2026-09-02 05:57:39 login authenticator failed for ([59.120.179.121]) [122.139.223.25]: 535 Incorrect authentication data ([email protected] )
2026-09-02 05:58:51 login authenticator failed for (189-20-109-209.customer.tdatabrasil.net.br) [122.139.223.25]: 535 Incorrect authentication data (set_id=hhpzz)
2026-09-02 06:18:39 login authenticator failed for ([59.120.179.121]) [122.139.223.25]: 535 Incorrect authentication data (set_id=emilyhill)
2026-09-02 06:25:21 login authenticator failed for (biophormula.static.gvt.net.br) [122.139.223.25]: 535 Incorrect authentication data (set_id=nathanharris)
show less
Port Scan
2026-09-02 12:10:23
(8 hours ago)
2 Login Attempts
Port Scan
Brute-Force