Anonymous
2026-05-03 14:02:32
UTC ·
(6 months ago)
Portscan: TCP/80, TCP/443, TCP/587, TCP/465, TCP/2525, TCP/25
Port Scan
🇫🇷
SpaceHost-Server
2026-05-02 12:05:41
UTC ·
(6 months ago)
May 2 14:05:40 pegasus postfix/smtpd[846297]: warning: unknown[172.94.9.216]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
May 2 14:05:40 pegasus postfix/smtpd[846297]: warning: unknown[172 ...
show more
May 2 14:05:40 pegasus postfix/smtpd[846297]: warning: unknown[172.94.9.216]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
May 2 14:05:40 pegasus postfix/smtpd[846297]: warning: unknown[172.94.9.216]: SASL PLAIN authentication failed: authentication failure, [email protected]
May 2 14:05:40 pegasus postfix/smtpd[846297]: warning: unknown[172.94.9.216]: SASL LOGIN authentication failed: authentication failure, [email protected]
show less
Hacking
Brute-Force
🇮🇹
www.tana.it
2026-05-02 09:14:45
UTC ·
(6 months ago)
SMTP auth dictionary attack
Brute-Force
🇩🇪
_ArminS_
2026-05-02 07:53:10
UTC ·
(6 months ago)
WEB-Scan 63140:80 detected 2026.05.02 09:53:10
blocked until 2026.06.21 02:55:57
Port Scan
🇩🇪
4server
2026-05-02 01:14:10
UTC ·
(6 months ago)
[SatMay0203:14:05.9279192026][security2:error][pid469404:tid469477][client172.94.9.216:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"Mozilla/4\\\\\\\\.0\\\\\\\\\(compatible\;Synapse\\\\\\\\\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/ ...
show more
[SatMay0203:14:05.9279192026][security2:error][pid469404:tid469477][client172.94.9.216:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"Mozilla/4\\\\\\\\.0\\\\\\\\\(compatible\;Synapse\\\\\\\\\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_rules/20_asl_useragents.conf\"][line\"115\"][id\"334009\"][rev\"2\"][msg\"Atomicorp.comWAFRules:PotentiallyMaliciousOpenProxyConnectionAttempt\"][severity\"CRITICAL\"][hostname\"martinairsagl.ch\"][uri\"/mail/config-v1.1.xml\"][unique_id\"afVP3eZ2advSCir3rDwWuQAAAMg\"]
show less
Port Scan
Brute-Force
Web App Attack
🇬🇧
openstrike.co.uk
2026-05-01 22:51:13
UTC ·
(6 months ago)
Email auth failures (6)
Brute-Force
🇫🇷
SpaceHost-Server
2026-05-01 21:50:09
UTC ·
(6 months ago)
May 1 23:50:08 dev postfix/smtpd[3940545]: warning: unknown[172.94.9.216]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
May 1 23:50:08 dev postfix/smtpd[3940545]: warning: unknown[172.94.9.216]: SASL PLAIN ...
show more
May 1 23:50:08 dev postfix/smtpd[3940545]: warning: unknown[172.94.9.216]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
May 1 23:50:08 dev postfix/smtpd[3940545]: warning: unknown[172.94.9.216]: SASL PLAIN authentication failed: authentication failure, [email protected]
May 1 23:50:08 dev postfix/smtpd[3940545]: warning: unknown[172.94.9.216]: SASL LOGIN authentication failed: authentication failure, [email protected]
show less
Hacking
Brute-Force
🇫🇷
SpaceHost-Server
2026-05-01 21:25:38
UTC ·
(6 months ago)
May 1 23:25:37 pegasus postfix/smtpd[4136461]: warning: unknown[172.94.9.216]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
May 1 23:25:37 pegasus postfix/smtpd[4136461]: warning: unknown[172.94.9.216]: SAS ...
show more
May 1 23:25:37 pegasus postfix/smtpd[4136461]: warning: unknown[172.94.9.216]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
May 1 23:25:37 pegasus postfix/smtpd[4136461]: warning: unknown[172.94.9.216]: SASL PLAIN authentication failed: authentication failure, [email protected]
May 1 23:25:37 pegasus postfix/smtpd[4136461]: warning: unknown[172.94.9.216]: SASL LOGIN authentication failed: authentication failure, [email protected]
show less
Hacking
Brute-Force
🇫🇷
SpaceHost-Server
2026-05-01 21:08:34
UTC ·
(6 months ago)
May 1 23:08:32 dev postfix/smtpd[3906832]: warning: unknown[172.94.9.216]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
May 1 23:08:33 dev postfix/smtpd[3906832]: warning: unknown[172.94.9.216]: SA ...
show more
May 1 23:08:32 dev postfix/smtpd[3906832]: warning: unknown[172.94.9.216]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
May 1 23:08:33 dev postfix/smtpd[3906832]: warning: unknown[172.94.9.216]: SASL PLAIN authentication failed: authentication failure, [email protected]
May 1 23:08:33 dev postfix/smtpd[3906832]: warning: unknown[172.94.9.216]: SASL LOGIN authentication failed: authentication failure, [email protected]
show less
Hacking
Brute-Force
Anonymous
2026-05-01 20:55:08
UTC ·
(6 months ago)
12x Postfix SASL LOGIN authentication failed
Brute-Force
🇩🇪
FeG Deutschland
2026-05-01 18:28:07
UTC ·
(6 months ago)
Mail: - login with unknown user - bruteforce
Brute-Force
🇦🇹
AustrianSimon
2026-05-01 17:59:42
UTC ·
(6 months ago)
01 May 2026 17:59:42UTC:Distributed Brute Force Password Attack (smtp, ftp, imap, pop, ssh) including ip address 172.94.9.216
Brute-Force
🇵🇦
iphezimbra
2026-05-01 17:49:50
UTC ·
(6 months ago)
Fail2Ban reported IP from jail zimbra-smtp on <hostname>
Brute-Force
SSH
Anonymous
2026-05-01 15:16:55
UTC ·
(6 months ago)
bruteforce
Brute-Force
🇮🇩
xveil
2026-05-01 13:44:50
UTC ·
(6 months ago)
2026-05-01T20:44:46.974153 mail-honeypot postfix/submission/smtpd[17683]: warning: unknown[172.94.9.216]: SASL PLAIN authentication failed: authentication failure
...
Brute-Force