Honeypot hit: Brute-force attack detected on 23/TELNET
โข Credentials: GET / HTTP/1.1:Host: 159.196.1 ...
show moreHoneypot hit: Brute-force attack detected on 23/TELNET
โข Credentials: GET / HTTP/1.1:Host: 159.196.130.39:23, User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36:Accept-Encoding: gzip, *1:$4, OPTIONS rtsp://example.com RTSP/1.0:Cseq: 6484
โข Number of login attempts: 4
โข 1 command(s) were executed during the session
show less
May 7 19:28:39 home postfix/postscreen[3935926]: PREGREET 18 after 0.01 from [34.14.56.203]:38812: ...
show moreMay 7 19:28:39 home postfix/postscreen[3935926]: PREGREET 18 after 0.01 from [34.14.56.203]:38812: EHLO example.com\r\n
...
show less
2026-05-07T17:09:12.492038+00:00 nbg01-02-mail postfix/smtpd[31371]: lost connection after EHLO from ...
show more2026-05-07T17:09:12.492038+00:00 nbg01-02-mail postfix/smtpd[31371]: lost connection after EHLO from 203.56.14.34.bc.googleusercontent.com[34.14.56.203]
2026-05-07T17:10:51.685964+00:00 nbg01-02-mail postfix/smtpd[31371]: lost connection after EHLO from 203.56.14.34.bc.googleusercontent.com[34.14.56.203]
2026-05-07T17:10:51.701701+00:00 nbg01-02-mail postfix/smtpd[31371]: improper command pipelining after CONNECT from 203.56.14.34.bc.googleusercontent.com[34.14.56.203]: HELP\r\n
...
show less
2026-05-07 12:08:36 SMTP protocol synchronization error \(input sent without waiting for greeting\): ...
show more2026-05-07 12:08:36 SMTP protocol synchronization error \(input sent without waiting for greeting\): rejected connection from H=203.56.14.34.bc.googleusercontent.com \[34.14.56.203\] input="\026\003\001\005\304\001"
2026-05-07 12:08:38 SMTP protocol synchronization error \(input sent without waiting for greeting\): rejected connection from H=203.56.14.34.bc.googleusercontent.com \[34.14.56.203\] input="\;"
2026-05-07 12:08:43 SMTP protocol synchronization error \(input sent without waiting for greeting\): rejected connection from H=203.56.14.34.bc.googleusercontent.com \[34.14.56.203\] input="GET / HTTP/1.1\r\nHost: 162.212.158.192:25\r\nUser-Agent: Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/127.0.0."
...
show less