๐ง๐ท
SvrAdmin
2023-08-29 15:24:13
(3 years ago)
Time: Sun Aug 13 17:30:34 2023 -0300
IP: 172.162.240.1 (CH/Switzerland/-)
Failures: 5 (s ...
show more
Time: Sun Aug 13 17:30:34 2023 -0300
IP: 172.162.240.1 (CH/Switzerland/-)
Failures: 5 (smtpauth)
Interval: 3600 seconds
Blocked: Permanent Block [LF_SMTPAUTH]
Log entries:
Aug 13 16:55:39 cwp01 postfix/smtpd[10526]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 13 17:04:59 cwp01 postfix/smtpd[12374]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 13 17:13:29 cwp01 postfix/smtpd[14004]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 13 17:21:59 cwp01 postfix/smtpd[15327]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 13 17:30:32 cwp01 postfix/smtpd[16711]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Hacking
Brute-Force
๐ง๐ท
websync
2023-08-21 11:52:48
(3 years ago)
Kept connecting and disconnecting without issuing any commands
DDoS Attack
๐ง๐ท
SvrAdmin
2023-08-19 06:15:02
(3 years ago)
Sat, 19 Aug 2023 06:14:55 GMT
] โ Excessive Number of Failed Login Attempts from 172.162.240.1 (Unit ...
show more
Sat, 19 Aug 2023 06:14:55 GMT
] โ Excessive Number of Failed Login Attempts from 172.162.240.1 (United States:US)
show less
Hacking
Brute-Force
๐ง๐ท
SvrAdmin
2023-08-19 04:19:27
(3 years ago)
[101] (smtpauth) Failed SMTP AUTH login from 172.162.240.1 (CH/Switzerland/-): 5 in the last 3600 se ...
show more
[101] (smtpauth) Failed SMTP AUTH login from 172.162.240.1 (CH/Switzerland/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2023-08-19 01:08:51 dovecot_login authenticator failed for (ADMIN) [172.162.240.1]:33136: 535 Incorrect authentication data ([email protected] )
2023-08-19 01:10:10 dovecot_login authenticator failed for (ADMIN) [172.162.240.1]:41620: 535 Incorrect authentication data ([email protected] )
2023-08-19 01:10:55 dovecot_login authenticator failed for (ADMIN) [172.162.240.1]:41838: 535 Incorrect authentication data ([email protected] )
2023-08-19 01:14:35 dovecot_login authenticator failed for (ADMIN) [172.162.240.1]:36926: 535 Incorrect authentication data ([email protected] )
2023-08-19 01:19:22 dovecot_login authenticator failed for (ADMIN) [172.162.240.1]:47906: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
Hacking
Brute-Force
Exploited Host
Anonymous
2023-08-18 14:41:33
(3 years ago)
<comment>
Email Spam
๐ง๐ท
SvrAdmin
2023-08-17 04:15:02
(3 years ago)
Thu, 17 Aug 2023 04:11:31 GMT
] โ Excessive Number of Failed Login Attempts from 172.162.240.1 (Unit ...
show more
Thu, 17 Aug 2023 04:11:31 GMT
] โ Excessive Number of Failed Login Attempts from 172.162.240.1 (United States:US)
show less
Hacking
Brute-Force
๐ง๐ท
SvrAdmin
2023-08-15 07:22:58
(3 years ago)
[272] (smtpauth) Failed SMTP AUTH login from 172.162.240.1 (CH/Switzerland/-): 5 in the last 3600 se ...
show more
[272] (smtpauth) Failed SMTP AUTH login from 172.162.240.1 (CH/Switzerland/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Aug 15 03:40:06 cwp01 postfix/smtpd[17344]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 03:51:03 cwp01 postfix/smtpd[18290]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 04:01:32 cwp01 postfix/smtpd[19296]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 04:12:13 cwp01 postfix/smtpd[20211]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 15 04:22:56 cwp01 postfix/smtpd[21379]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Port Scan
Hacking
Brute-Force
Exploited Host
๐บ๐ธ
FABIO EGAS
2023-08-14 03:47:07
(3 years ago)
(PERMBLOCK) 172.162.240.1 (CH/Switzerland/-) has had more than 4 temp blocks
Hacking
๐บ๐ธ
FABIO EGAS
2023-08-13 20:31:19
(3 years ago)
(smtpauth) Failed SMTP AUTH login from 172.162.240.1 (CH/Switzerland/-)
Brute-Force
๐ง๐ท
SvrAdmin
2023-08-13 20:25:26
(3 years ago)
[138] (smtpauth) Failed SMTP AUTH login from 172.162.240.1 (CH/Switzerland/-): 5 in the last 3600 se ...
show more
[138] (smtpauth) Failed SMTP AUTH login from 172.162.240.1 (CH/Switzerland/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Aug 13 16:26:03 cwp postfix/smtpd[27077]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 13 16:54:12 cwp postfix/smtpd[5024]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 13 17:04:43 cwp postfix/smtpd[8819]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 13 17:15:10 cwp postfix/smtpd[12950]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 13 17:25:23 cwp postfix/smtpd[16849]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Port Scan
Hacking
Brute-Force
Exploited Host
๐ง๐ท
SvrAdmin
2023-08-13 19:48:14
(3 years ago)
[315] (smtpauth) Failed SMTP AUTH login from 172.162.240.1 (CH/Switzerland/-): 5 in the last 3600 se ...
show more
[315] (smtpauth) Failed SMTP AUTH login from 172.162.240.1 (CH/Switzerland/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Aug 13 16:11:54 cwp01 postfix/smtpd[26766]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 13 16:22:09 cwp01 postfix/smtpd[27242]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 13 16:27:28 cwp01 postfix/smtpd[27671]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 13 16:42:45 cwp01 postfix/smtpd[28405]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug 13 16:48:11 cwp01 postfix/smtpd[29006]: warning: unknown[172.162.240.1]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Port Scan
Hacking
Brute-Force
Exploited Host
๐ง๐ท
LM Security
2023-08-13 19:15:02
(3 years ago)
2023-08-13 16:02:16 dovecot_login authenticator failed for (ADMIN) [172.162.240.1]:50952: 535 Incorr ...
show more
2023-08-13 16:02:16 dovecot_login authenticator failed for (ADMIN) [172.162.240.1]:50952: 535 Incorrect authentication data (set_id=promo@[redacted].com.br)
2023-08-13 16:01:13 dovecot_login authenticator failed for (ADMIN) [172.162.240.1]:45762: 535 Incorrect authentication data (set_id=sac@[redacted].com.br)
show less
Brute-Force
๐ง๐ท
SvrAdmin
2023-08-13 18:27:40
(3 years ago)
[101] (smtpauth) Failed SMTP AUTH login from 172.162.240.1 (CH/Switzerland/-): 5 in the last 3600 se ...
show more
[101] (smtpauth) Failed SMTP AUTH login from 172.162.240.1 (CH/Switzerland/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2023-08-13 15:19:19 dovecot_login authenticator failed for (ADMIN) [172.162.240.1]:49964: 535 Incorrect authentication data ([email protected] )
2023-08-13 15:20:26 dovecot_login authenticator failed for (ADMIN) [172.162.240.1]:53144: 535 Incorrect authentication data ([email protected] )
2023-08-13 15:20:48 dovecot_login authenticator failed for (ADMIN) [172.162.240.1]:42056: 535 Incorrect authentication data ([email protected] )
2023-08-13 15:23:42 dovecot_login authenticator failed for (ADMIN) [172.162.240.1]:33128: 535 Incorrect authentication data ([email protected] )
2023-08-13 15:27:38 dovecot_login authenticator failed for (ADMIN) [172.162.240.1]:43384: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
Hacking
Brute-Force
Exploited Host
๐บ๐ธ
hostseries
2023-08-13 18:23:59
(3 years ago)
Trigger: LF_SMTPAUTH
Brute-Force
๐บ๐ธ
kernelmanic
2023-08-13 04:54:50
(3 years ago)
multiple unauthorized attempts to authenticate to email accounts
Hacking
Brute-Force