🇫🇷
mapik
2026-04-19 06:42:46
(2 months ago)
srv=Mapik host=multi.mapik.cz / send 2026-04-19 08:42:46 | SASL_FAST=5 / SASL_SLOW=5 / Recidive=14 ...
show more
srv=Mapik host=multi.mapik.cz / send 2026-04-19 08:42:46 | SASL_FAST=5 / SASL_SLOW=5 / Recidive=14 /
show less
Brute-Force
🇨🇿
lp
2026-04-16 15:19:43
(2 months ago)
Email account brute force: 6 attempts were recorded from 212.56.49.142
2026-04-16T16:44:07+02:00 war ...
show more
Email account brute force: 6 attempts were recorded from 212.56.49.142
2026-04-16T16:44:07+02:00 warning: unknown[212.56.49.142]: SASL PLAIN authentication failed: authentication failure, [email protected]
2026-04-16T16:44:07+02:00 warning: unknown[212.56.49.142]: SASL LOGIN authentication failed: authentication failure, [email protected]
2026-04-16T16:44:08+02:00 warning: unknown[212.56.49.142]: SASL PLAIN authentication failed: authentication failure, [email protected]
2026-04-16T16:44:09+02:00 warning: unknown[212.56.49.142]: SASL LOGIN authentication failed: authentication failure, [email protected]
2026-04-16T16:45:17+02:00 warning: unknown[212.56.49.142]: SASL PLAIN authentication failed: authentication failure, [email protected]
2026-04-16T16:45:17+02:00 warning: unknown[212.56.49.142]: SASL LOGIN authentication failed: authen
show less
Brute-Force
🇦🇺
jalim
2026-04-16 14:38:28
(2 months ago)
Fail2Ban (11cc81a08e1b): 3 attempts from 212.56.49.142 triggered postfix-sasl jail. Ban time: 3600s. ...
show more
Fail2Ban (11cc81a08e1b): 3 attempts from 212.56.49.142 triggered postfix-sasl jail. Ban time: 3600s. Attack patterns detected in mail server logs.
show less
Brute-Force
2026-04-16 14:11:34
(2 months ago)
Authentication failure
Brute-Force
🇧🇷
SvrAdmin
2026-04-16 13:30:45
(2 months ago)
[101] (smtpauth) Failed SMTP AUTH login from 212.56.49.142 (CA/Canada/-): 5 in the last 3600 secs; P ...
show more
[101] (smtpauth) Failed SMTP AUTH login from 212.56.49.142 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-04-16 10:29:50 dovecot_plain authenticator failed for H=([10.13.18.230]) [212.56.49.142]:47207: 535 Incorrect authentication data ([email protected] )
2026-04-16 10:29:56 dovecot_login authenticator failed for H=([10.13.18.230]) [212.56.49.142]:47207: 535 Incorrect authentication data ([email protected] )
2026-04-16 10:30:03 dovecot_plain authenticator failed for H=([10.13.18.230]) [212.56.49.142]:56705: 535 Incorrect authentication data ([email protected] )
2026-04-16 10:30:05 dovecot_login authenticator failed for H=([10.13.18.230]) [212.56.49.142]:56705: 535 Incorrect authentication data ([email protected] )
2026-04-16 10:30:40 dovecot_plain authenticator failed for H=([10.13.18.230]) [212.56.49.142]:54054: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
Hacking
Brute-Force
Exploited Host
🇹🇭
thaizone.com
2026-04-15 23:13:52
(2 months ago)
Mail credential brute-force attack (SM6) #1
Email Spam
Brute-Force
2026-03-28 04:31:16
(3 months ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇸🇮
basing
2026-03-26 16:33:35
(3 months ago)
2026-03-26 17:33:35 bs SASL PLAIN auth failed: rhost=212.56.49.142...
Brute-Force
🇨🇿
lp
2026-03-20 09:32:56
(3 months ago)
Email account brute force: 5 attempts were recorded from 212.56.49.142
2026-03-18T05:03:46+01:00 war ...
show more
Email account brute force: 5 attempts were recorded from 212.56.49.142
2026-03-18T05:03:46+01:00 warning: unknown[212.56.49.142]: SASL PLAIN authentication failed: authentication failure, [email protected]
2026-03-18T05:03:47+01:00 warning: unknown[212.56.49.142]: SASL LOGIN authentication failed: authentication failure, [email protected]
2026-03-18T05:03:48+01:00 warning: unknown[212.56.49.142]: SASL PLAIN authentication failed: authentication failure, [email protected]
2026-03-18T05:03:48+01:00 warning: unknown[212.56.49.142]: SASL LOGIN authentication failed: authentication failure, [email protected]
2026-03-18T05:04:52+01:00 warning: unknown[212.56.49.142]: SASL PLAIN authentication failed: authentication failure, [email protected]
show less
Brute-Force
🇺🇸
bigscoots.com
2026-03-19 09:48:59
(3 months ago)
(smtpauth) Failed SMTP AUTH login from 212.56.49.142 (CA/Canada/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 212.56.49.142 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-03-19 05:27:43 dovecot_login authenticator failed for H=([10.13.18.61]) [212.56.49.142]:57032: 535 Incorrect authentication data ([email protected] )
2026-03-19 05:48:39 dovecot_plain authenticator failed for H=([10.13.18.49]) [212.56.49.142]:36261: 535 Incorrect authentication data ([email protected] )
2026-03-19 05:48:45 dovecot_login authenticator failed for H=([10.13.18.49]) [212.56.49.142]:36261: 535 Incorrect authentication data ([email protected] )
2026-03-19 05:48:51 dovecot_plain authenticator failed for H=([10.13.18.49]) [212.56.49.142]:39291: 535 Incorrect authentication data ([email protected] )
2026-03-19 05:48:57 dovecot_login authenticator failed for H=([10.13.18.49]) [212.56.49.142]:39291: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH
🇨🇴
conexcol
2026-03-19 09:32:51
(3 months ago)
Brute-Force
🇺🇸
bigscoots.com
2026-03-19 09:27:42
(3 months ago)
(smtpauth) Failed SMTP AUTH login from 212.56.49.142 (CA/Canada/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 212.56.49.142 (CA/Canada/-): 5 in the last 3600 secs; Ports: 25,465,587; Direction: 0; Trigger: LF_SMTPAUTH; Logs: 2026-03-19 05:27:18 dovecot_plain authenticator failed for H=([10.13.18.61]) [212.56.49.142]:18326: 535 Incorrect authentication data ([email protected] )
2026-03-19 05:27:24 dovecot_login authenticator failed for H=([10.13.18.61]) [212.56.49.142]:18326: 535 Incorrect authentication data ([email protected] )
2026-03-19 05:27:31 dovecot_plain authenticator failed for H=([10.13.18.61]) [212.56.49.142]:48397: 535 Incorrect authentication data ([email protected] )
2026-03-19 05:27:33 dovecot_login authenticator failed for H=([10.13.18.61]) [212.56.49.142]:48397: 535 Incorrect authentication data ([email protected] )
2026-03-19 05:27:41 dovecot_plain authenticator failed for H=([10.13.18.61]) [212.56.49.142]:57032: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH
🇮🇩
aaKenshin
2026-03-18 04:23:21
(3 months ago)
Suspicious activity detected from IP 212.56.49.142 based on mailserver logs.
Sample logs:
2026-03-18 ...
show more
Suspicious activity detected from IP 212.56.49.142 based on mailserver logs.
Sample logs:
2026-03-18 12:22:59,763 INFO [qtp2102534528-156389] [ip=172.16.0.182;oip=212.56.49.142;oport=11380;oproto=smtp;port=42596;soapId=2e797b5f;] SoapEngine - handler exception: authentication failed for [**], account not found
2026-03-18 12:22:59,763 INFO [qtp2102534528-156389] [ip=172.16.0.182;oip=212.56.49.142;oport=11380;oproto=smtp;port=42596;soapId=2e797b5f;] soap - AuthRequest elapsed=0
2026-03-18 12:23:12,317 INFO [qtp2102534528-156420] [ip=172.16.0.182;oip=212.56.49.142;oport=31996;oproto=smtp;port=39128;soapId=2e797b60;] account - Error occurred during authentication: authentication failed for [**]. Reason: account not found.
2026-03-18 12:23:12,317 INFO [qtp2102534528-156420] [ip=172.16.0.182;oip=212.56.49.142;oport=31996;oproto=smtp;port=39128;soapId=2e797b60;] SoapEngine - handler exception: authentication failed for [**], account not found
2026-03-18 12:23:12,317 INFO [qtp2102534528-1
show less
Brute-Force
🇪🇸
Nudisco
2026-03-18 03:41:41
(3 months ago)
Brute-Force
🇬🇧
Steve
2026-03-18 03:38:01
(3 months ago)
Attempts against SMTP/SSMTP
Brute-Force