Total reports
8 from
5 distinct
reporters
First reported
September 7th 2026
Most recent report
4 days ago
Last 60 days
Top reporter locations
🇵🇱
Poland
4
🇩🇪
Germany
1
🇷🇴
Romania
1
Most common categories
Web App Attack
4
Bad Web Bot
3
Hacking
2
Brute-Force
1
Email Spam
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
filstal.org
2026-11-05 07:06:04
UTC ·
(4 days ago)
CrowdSec: crowdsecurity/postfix-non-smtp-command
Email Spam
Hacking
🇷🇴
Anonim-Ro
2026-11-05 05:51:00
UTC ·
(4 days ago)
"SMTPD" 37860 54 "2026-11-04 22:09:27.378" "2406:da14:14c8:ac00:927a:5fb2:46c8:9e78" "RECEIVED: AUTH PLAIN ;VsQHdvcmtwYWdlLnJv ***";"SMTPD" 37860 54 "2026-11-04 22:09:27.378" "2406:da14:14c8:ac00:927a:5fb2:46c8:9e78" "SENT: 535 Authentication failed. ...
show more
"SMTPD" 37860 54 "2026-11-04 22:09:27.378" "2406:da14:14c8:ac00:927a:5fb2:46c8:9e78" "RECEIVED: AUTH PLAIN ;VsQHdvcmtwYWdlLnJv ***";"SMTPD" 37860 54 "2026-11-04 22:09:27.378" "2406:da14:14c8:ac00:927a:5fb2:46c8:9e78" "SENT: 535 Authentication failed. Restarting authentication process."
"SMTPD" 45720 54 "2026-11-04 22:09:27.858" "2406:da14:14c8:ac00:927a:5fb2:46c8:9e78" "RECEIVED: *"
"SMTPD" 45720 54 "2026-11-04 22:09:27.858" "2406:da14:14c8:ac00:927a:5fb2:46c8:9e78" "SENT: 503 Bad sequence of commands"
"SMTPD" 37860 54 "2026-11-04 22:09:28.580" "2406:da14:14c8:ac00:927a:5fb2:46c8:9e78" "RECEIVED: AUTH LOGIN ZGFjb2dldHVsQHdvcmtwYWdlLnJv"
"SMTPD" 37860 54 "2026-11-04 22:09:28.580" "2406:da14:14c8:ac00:927a:5fb2:46c8:9e78" "SENT: 334 UGFzc3dvcmQ6"
"SMTPD" 37860 54 "2026-11-04 22:09:29.068" "2406:da14:14c8:ac00:927a:5fb2:46c8:9e78" "RECEIVED: ***"
"SMTPD" 37860 54 "2026-11-04 22:09:29.068" "2406:da14:14c8:ac00:927a:5fb2:46c8:9e78" "SENT: 535 Authentication failed. Restarting authentication process."
"SMT
show less
Brute-Force
🇵🇱
Budyn
2026-10-11 12:21:12
UTC ·
(4 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: ssh.teddypot.pro | URI: /.env.dev | UA: Mozilla/5 ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: ssh.teddypot.pro | URI: /.env.dev | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-10 12:39:25
UTC ·
(4 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: gitlab.teddypot.tech | URI: /app/.env | UA: Mo ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: gitlab.teddypot.tech | URI: /app/.env | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-10-10 08:21:28
UTC ·
(4 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: minio.teddypot.pro | URI: /.env.sample | UA: Mozi ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: minio.teddypot.pro | URI: /.env.sample | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-10 03:44:41
UTC ·
(4 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: jenkins.goblinpot.space | URI: /.env.sample | UA: ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: jenkins.goblinpot.space | URI: /.env.sample | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
tinect
2026-09-07 18:41:24
UTC ·
(2 months ago)
Gets ban for 4h for triggering crowdsecurity/postfix-non-smtp-command at root1.
Web App Attack
🇩🇪
jasperedv.de
2026-09-07 03:14:18
UTC ·
(2 months ago)
Failed SMTP Login - Brutforcing
Email Spam
Brute-Force
