Total reports
7 from
4 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
🇫🇮
saamkuu
|
|
DDoS botnet: TCP connection flood, 27 connections to port 443.
|
DDoS Attack
|
|
Anonymous
|
|
denied traffic to a honeypot network. destination port 22.
|
Port Scan
Hacking
|
|
Anonymous
|
|
denied traffic to a non-approved destination port. destination port 46307.
|
Port Scan
|
|
🇧🇷
SvrAdmin
|
|
[315] (smtpauth) Failed SMTP AUTH login from 200.52.28.119 (BR/Brazil/200-52-28-119.dynamic.ultrawave.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Dec 2 21:42:03 cwp01 postfix/smtpd[24056]: warning: unkno ...
show more
[315] (smtpauth) Failed SMTP AUTH login from 200.52.28.119 (BR/Brazil/200-52-28-119.dynamic.ultrawave.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Dec 2 21:42:03 cwp01 postfix/smtpd[24056]: warning: unknown[200.52.28.119]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 2 21:53:02 cwp01 postfix/smtpd[26687]: warning: unknown[200.52.28.119]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 2 22:18:06 cwp01 postfix/smtpd[26687]: warning: unknown[200.52.28.119]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 2 22:24:57 cwp01 postfix/smtpd[26687]: warning: unknown[200.52.28.119]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Dec 2 22:25:07 cwp01 postfix/smtpd[27495]: warning: unknown[200.52.28.119]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
|
Port Scan
Hacking
Brute-Force
Exploited Host
|
|
🇧🇷
LM Security
|
|
2023-12-02 21:59:49 dovecot_login authenticator failed for (ADMIN) [200.52.28.119]:57524: 535 Incorrect authentication data (set_id=wesslei.machado@[redacted].com.br)
2023-12-02 21:59:13 dovecot_login authenticator failed for (ADMIN) [200.52.28.119]: ...
show more
2023-12-02 21:59:49 dovecot_login authenticator failed for (ADMIN) [200.52.28.119]:57524: 535 Incorrect authentication data (set_id=wesslei.machado@[redacted].com.br)
2023-12-02 21:59:13 dovecot_login authenticator failed for (ADMIN) [200.52.28.119]:54446: 535 Incorrect authentication data (set_id=paula.nunes@[redacted].com.br)
show less
|
Brute-Force
|
|
🇧🇷
SvrAdmin
|
|
[101] (smtpauth) Failed SMTP AUTH login from 200.52.28.119 (BR/Brazil/200-52-28-119.dynamic.ultrawave.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2023-12-02 21:23:39 dovecot_login authenticator failed for ...
show more
[101] (smtpauth) Failed SMTP AUTH login from 200.52.28.119 (BR/Brazil/200-52-28-119.dynamic.ultrawave.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2023-12-02 21:23:39 dovecot_login authenticator failed for (ADMIN) [200.52.28.119]:10241: 535 Incorrect authentication data ([email protected])
2023-12-02 21:25:43 dovecot_login authenticator failed for (ADMIN) [200.52.28.119]:57650: 535 Incorrect authentication data ([email protected])
2023-12-02 21:27:59 dovecot_login authenticator failed for (ADMIN) [200.52.28.119]:24604: 535 Incorrect authentication data ([email protected])
2023-12-02 21:31:51 dovecot_login authenticator failed for (ADMIN) [200.52.28.119]:57733: 535 Incorrect authentication data ([email protected])
2023-12-02 21:32:40 dovecot_login authenticator failed for (ADMIN) [200.52.28.119]:9475: 535 Incorrect authentication data ([email protected])
show less
|
Port Scan
Hacking
Brute-Force
Exploited Host
|
|
🇧🇷
SvrAdmin
|
|
[101] (smtpauth) Failed SMTP AUTH login from 200.52.28.119 (BR/Brazil/200-52-28-119.dynamic.ultrawave.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2023-11-27 12:32:59 dovecot_login authenticator failed for ...
show more
[101] (smtpauth) Failed SMTP AUTH login from 200.52.28.119 (BR/Brazil/200-52-28-119.dynamic.ultrawave.com.br): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2023-11-27 12:32:59 dovecot_login authenticator failed for (ADMIN) [200.52.28.119]:62326: 535 Incorrect authentication data ([email protected])
2023-11-27 12:33:32 dovecot_login authenticator failed for (ADMIN) [200.52.28.119]:28939: 535 Incorrect authentication data ([email protected])
2023-11-27 12:34:32 dovecot_login authenticator failed for (ADMIN) [200.52.28.119]:4400: 535 Incorrect authentication data ([email protected])
2023-11-27 12:34:44 dovecot_login authenticator failed for (ADMIN) [200.52.28.119]:11463: 535 Incorrect authentication data ([email protected])
2023-11-27 12:35:12 dovecot_login authenticator failed for (ADMIN) [200.52.28.119]:52943: 535 Incorrect authentication data ([email protected])
show less
|
Port Scan
Hacking
Brute-Force
Exploited Host
|
