🇩🇪
marcelhalls
2026-09-16 03:00:04
(11 hours ago)
Repeated attacks detected by Fail2Ban in recidive jail
Hacking
🇩🇪
BlueWire Hosting
2026-09-16 01:12:13
(13 hours ago)
SMTP brute force attempt
Brute-Force
🇨🇦
Dunham Support
2026-09-16 00:57:22
(13 hours ago)
(smtpauth) Failed SMTP AUTH login from 20.79.8.6 (DE/Germany/-)
Brute-Force
🇧🇷
govfacil.app
2026-09-16 00:51:39
(14 hours ago)
(smtpauth) Failed SMTP AUTH login from 20.79.8.6 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; ...
show more
(smtpauth) Failed SMTP AUTH login from 20.79.8.6 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-15 21:45:20 dovecot_login authenticator failed for H=(ADMIN) [20.79.8.6]:55242: 535 Incorrect authentication data ([email protected] )
2026-09-15 21:45:34 dovecot_login authenticator failed for H=(ADMIN) [20.79.8.6]:37718: 535 Incorrect authentication data ([email protected] )
2026-09-15 21:48:52 dovecot_login authenticator failed for H=(ADMIN) [20.79.8.6]:33748: 535 Incorrect authentication data ([email protected] )
2026-09-15 21:49:01 dovecot_login authenticator failed for H=(ADMIN) [20.79.8.6]:58598: 535 Incorrect authentication data ([email protected] )
2026-09-15 21:51:37 dovecot_login authenticator failed for H=(ADMIN) [20.79.8.6]:58162: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
🇹🇭
thaizone.com
2026-09-16 00:45:03
(14 hours ago)
Password guessing attack (SM11) #2
Email Spam
Brute-Force
2026-09-16 00:44:52
(14 hours ago)
Authentication failure
Brute-Force
🇹🇭
thaizone.com
2026-09-15 23:33:44
(15 hours ago)
Password guessing attack (SM11) #1
Email Spam
Brute-Force
🇩🇪
marcelhalls
2026-09-15 03:00:03
(1 day ago)
SMTP brute-force detected by Fail2Ban in plesk-postfix jail
Email Spam
Brute-Force
🇧🇷
SvrAdmin
2026-09-15 02:00:43
(1 day ago)
[138] (smtpauth) Failed SMTP AUTH login from 20.79.8.6 (DE/Germany/-): 5 in the last 3600 secs; Port ...
show more
[138] (smtpauth) Failed SMTP AUTH login from 20.79.8.6 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Sep 14 22:46:43 cwp postfix/smtpd[27981]: warning: unknown[20.79.8.6]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 14 22:50:34 cwp postfix/smtpd[781]: warning: unknown[20.79.8.6]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 14 22:53:50 cwp postfix/smtpd[5135]: warning: unknown[20.79.8.6]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 14 22:57:29 cwp postfix/smtpd[9994]: warning: unknown[20.79.8.6]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 14 23:00:42 cwp postfix/smtpd[14246]: warning: unknown[20.79.8.6]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Port Scan
Hacking
Brute-Force
Exploited Host
2026-09-15 01:48:03
(1 day ago)
...
Brute-Force
🇬🇧
Aetherweb Ark
2026-09-13 18:05:13
(2 days ago)
(smtpauth) Failed SMTP AUTH login from 20.79.8.6 (DE/Germany/-): N in the last X secs
Brute-Force
🇵🇹
WebTejo
2026-09-13 17:59:29
(2 days ago)
Detected multiple authentication failures and invalid user attempts in LF_SMTPAUTH from IP address 2 ...
show more
Detected multiple authentication failures and invalid user attempts in LF_SMTPAUTH from IP address 20.79.8.6 on [PT] Tucano Node.
show less
Brute-Force
SSH
🇺🇸
hostmach
2026-09-13 17:50:58
(2 days ago)
(smtpauth) Failed SMTP AUTH login from 20.79.8.6 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; ...
show more
(smtpauth) Failed SMTP AUTH login from 20.79.8.6 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-13 17:09:34 dovecot_login authenticator failed for H=(ADMIN) [20.79.8.6]:45954: 535 Incorrect authentication data ([email protected] )
2026-09-13 17:47:16 dovecot_login authenticator failed for H=(ADMIN) [20.79.8.6]:49266: 535 Incorrect authentication data ([email protected] )
2026-09-13 17:47:16 dovecot_login authenticator failed for H=(ADMIN) [20.79.8.6]:49258: 535 Incorrect authentication data ([email protected] )
2026-09-13 17:50:40 dovecot_login authenticator failed for H=(ADMIN) [20.79.8.6]:53020: 535 Incorrect authentication data ([email protected] )
2026-09-13 17:50:54 dovecot_login authenticator failed for H=(ADMIN) [20.79.8.6]:37402: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH
🇺🇸
brianbgv
2026-09-13 17:48:24
(2 days ago)
Dovecot mail abuse detected by Fail2Ban
Port Scan
Hacking
SSH
2026-09-13 16:31:37
(2 days ago)
2026-09-13T17:31:36.231864+01:00 [masked] postfix/smtps/smtpd[379893]: warning: unknown[20.79.8.6]: ...
show more
2026-09-13T17:31:36.231864+01:00 [masked] postfix/smtps/smtpd[379893]: warning: unknown[20.79.8.6]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=magnani.imoveis@[masked]
...
show less
Brute-Force