(smtpauth) Failed SMTP AUTH login from 212.56.48.19 (NL/The Netherlands/-): 5 in the last 3600 secs; ...
show more(smtpauth) Failed SMTP AUTH login from 212.56.48.19 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-02-11 12:38:49 dovecot_plain authenticator failed for H=([10.17.18.247]) [212.56.48.19]:28393: 535 Incorrect authentication data ([email protected])
2026-02-11 12:38:55 dovecot_login authenticator failed for H=([10.17.18.247]) [212.56.48.19]:28393: 535 Incorrect authentication data ([email protected])
2026-02-11 12:39:02 dovecot_plain authenticator failed for H=([10.17.18.247]) [212.56.48.19]:61704: 535 Incorrect authentication data ([email protected])
2026-02-11 12:39:04 dovecot_login authenticator failed for H=([10.17.18.247]) [212.56.48.19]:61704: 535 Incorrect authentication data ([email protected])
2026-02-11 12:39:14 dovecot_plain authenticator failed for H=([10.17.18.247]) [212.56.48.19]:52280: 535 Incorrect authentication data ([email protected])
show less
Brute-Force
SSH
Anonymous
(smtpauth) Failed SMTP AUTH login from 212.56.48.19 (NL/The Netherlands/North Holland/Amsterdam/-/[r ...
show more(smtpauth) Failed SMTP AUTH login from 212.56.48.19 (NL/The Netherlands/North Holland/Amsterdam/-/[redacted])
show less
Brute-Force
Anonymous
2026-02-09T09:59:06.619901+02:00 soli-gate postfix/submission/smtpd[1702823]: warning: unknown[212.5 ...
show more2026-02-09T09:59:06.619901+02:00 soli-gate postfix/submission/smtpd[1702823]: warning: unknown[212.56.48.19]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
...
show less
924 requests with user_agent.original Mozilla/5.0 (Linux; Android 6.0.1; SM-G532MT Build/MMB29T; wv ...
show more924 requests with user_agent.original Mozilla/5.0 (Linux; Android 6.0.1; SM-G532MT Build/MMB29T; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/99.0.4844.88 Mobile Safari/537.36 [FB_IAB/FB4A;FBAV/436.0.0.35.101;]
905 requests with user_agent.original Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/102.0.5143.178 Chrome/102.0.5143.178 Safari/537.36
884 requests with user_agent.original Mozilla/5.0 (iPhone; CPU iPhone OS 16_1_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148 [LinkedInApp]/9.28.7586
884 requests with user_agent.original Mozilla/5.0 (X11; Linux x86_64; SMARTEMB Build/3.12.9076) AppleWebKit/537.36 (KHTML, like Gecko) Chromium/103.0.5060.129 Chrome/103.0.5060.129 Safari/537.36
878 requests with user_agent.original Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.2.1) Gecko/20021208 Debian/1.2.1-2
878 requests with user_agent.original Mozilla/5.0 (X11; U; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium
show less
Brute-Force
Bad Web Bot
Anonymous
Botnet - login attempts with leaked random user/pass lists