🇩🇪
FeG Deutschland
2026-08-28 16:44:03
(16 hours ago)
Mail: - login with unknown user - bruteforce
Brute-Force
🇿🇦
hostsec_za
2026-08-27 18:00:11
(1 day ago)
IMAP/POP3 Auth Attack. 10 failed logins in 6 hours.
Brute-Force
🇬🇧
D3monite
2026-08-27 14:04:21
(1 day ago)
Attempted Brute Force (dovecot)
Brute-Force
🇩🇪
filstal.org
2026-08-27 10:32:26
(1 day ago)
Brute-force/Enumeration: Multiple login attempts for non-existent mail accounts (Honeytrap).
Email Spam
Brute-Force
🇩🇪
FeG Deutschland
2026-08-06 13:56:09
(3 weeks ago)
Mail: - login with unknown user - bruteforce
Brute-Force
🇩🇪
ksol-hostmaster
2026-08-04 02:59:25
(3 weeks ago)
Aug 4 04:59:24 ksol dovecot[83114]: auth-worker(76373): conn unix:auth-worker (uid=143): auth-worke ...
show more
Aug 4 04:59:24 ksol dovecot[83114]: auth-worker(76373): conn unix:auth-worker (uid=143): auth-worker<2>: sql(anonymized@email,194.44.140.135,<t8SY1y9YaOfCLIyH>): unknown user (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD)
...
show less
Brute-Force
🇫🇷
solution.it
2026-08-03 19:42:32
(3 weeks ago)
Aug 3 21:42:32 vps789997 dovecot: imap-login: Disconnected (auth failed, 2 attempts in 13 secs): us ...
show more
Aug 3 21:42:32 vps789997 dovecot: imap-login: Disconnected (auth failed, 2 attempts in 13 secs): user=<[email protected] >, method=PLAIN, rip=194.44.140.135, lip=51.77.194.251, TLS, session=<y7t+vClYOpXCLIyH>
show less
Brute-Force
🇮🇩
sockominfo
2026-08-01 05:00:52
(4 weeks ago)
Zimbra: Login failures from malicious IP: 194.44.140.135. Threat Score: 5.9/10 (MEDIUM). Confidence: ...
show more
Zimbra: Login failures from malicious IP: 194.44.140.135. Threat Score: 5.9/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-08-01 04:00:52
(4 weeks ago)
Zimbra: Login failures from malicious IP: 194.44.140.135. Threat Score: 6/10 (MEDIUM). Confidence: 4 ...
show more
Zimbra: Login failures from malicious IP: 194.44.140.135. Threat Score: 6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Moderate. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-08-01 03:00:53
(4 weeks ago)
Zimbra: Login failures from malicious IP: 194.44.140.135. Threat Score: 6.1/10 (MEDIUM). Confidence: ...
show more
Zimbra: Login failures from malicious IP: 194.44.140.135. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-08-01 02:00:52
(4 weeks ago)
Zimbra: Login failures from malicious IP: 194.44.140.135. Threat Score: 6.3/10 (MEDIUM). Confidence: ...
show more
Zimbra: Login failures from malicious IP: 194.44.140.135. Threat Score: 6.3/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.6/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1083 (File and Directory Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-08-01 01:00:09
(4 weeks ago)
Zimbra: Login failures from malicious IP: 194.44.140.135. Threat Score: 4.8/10 (MEDIUM). Reported by ...
show more
Zimbra: Login failures from malicious IP: 194.44.140.135. Threat Score: 4.8/10 (MEDIUM). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇩🇪
FeG Deutschland
2026-07-31 01:44:02
(4 weeks ago)
Mail: - login with unknown user - bruteforce
Brute-Force
🇿🇦
hostsec_za
2026-07-30 18:00:03
(4 weeks ago)
IMAP/POP3 Auth Attack. 10 failed logins in 6 hours.
Brute-Force
🇷🇴
clauss
2026-07-28 12:40:10
(1 month ago)
IP reached maximum auth failures for a one day block
Brute-Force