🇵🇹
WebTejo
2026-11-10 02:53:30
UTC ·
(1 day ago)
Detected multiple authentication failures and invalid user attempts in LF_SMTPAUTH from IP address 4.222.185.246 on [PT] Tucano Node.
Brute-Force
SSH
🇧🇷
tiwanetbr
2026-11-10 02:53:04
UTC ·
(1 day ago)
Fail2Ban: Unauthorized connection / brute-force attempt detected (protocol: SMTP/Mail, failed attempts: 5).
Brute-Force
Hacking
Anonymous
2026-11-10 02:52:34
UTC ·
(1 day ago)
(smtpauth) Failed SMTP AUTH login from 4.222.185.246 (ZA/South Africa/Gauteng/Johannesburg/-/[redacted])
Brute-Force
🇧🇷
tiwanetbr
2026-11-09 18:48:31
UTC ·
(1 day ago)
Fail2Ban: Unauthorized connection / brute-force attempt detected (protocol: SMTP/Mail, failed attempts: 11).
Brute-Force
Hacking
🇫🇷
vhnmn
2026-11-09 18:09:28
UTC ·
(1 day ago)
spam/brute force attack blocked attempt from fail2ban
...
Email Spam
Brute-Force
🇺🇸
agenciahypelab.com.br
2026-11-09 17:47:03
UTC ·
(1 day ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇧🇷
SvrAdmin
2026-11-09 17:45:25
UTC ·
(1 day ago)
[293] (smtpauth) Failed SMTP AUTH login from 4.222.185.246 (ZA/South Africa/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Nov 9 14:19:58 cwp01 postfix/smtpd[7480]: warning: unknown[4.222.185.246]: SASL LOGIN au ...
show more
[293] (smtpauth) Failed SMTP AUTH login from 4.222.185.246 (ZA/South Africa/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Nov 9 14:19:58 cwp01 postfix/smtpd[7480]: warning: unknown[4.222.185.246]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov 9 14:26:33 cwp01 postfix/smtpd[9116]: warning: unknown[4.222.185.246]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov 9 14:32:31 cwp01 postfix/smtpd[10223]: warning: unknown[4.222.185.246]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov 9 14:38:22 cwp01 postfix/smtpd[11325]: warning: unknown[4.222.185.246]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov 9 14:45:24 cwp01 postfix/smtpd[12978]: warning: unknown[4.222.185.246]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
show less
Port Scan
Hacking
Brute-Force
Exploited Host
🇧🇷
govfacil.app
2026-11-09 17:43:11
UTC ·
(1 day ago)
(smtpauth) Failed SMTP AUTH login from 4.222.185.246 (ZA/South Africa/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-11-09 14:17:44 dovecot_login authenticator failed for H=(ADMIN) [4.222.185.246]:54356: 535 ...
show more
(smtpauth) Failed SMTP AUTH login from 4.222.185.246 (ZA/South Africa/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-11-09 14:17:44 dovecot_login authenticator failed for H=(ADMIN) [4.222.185.246]:54356: 535 Incorrect authentication data ([email protected] )
2026-11-09 14:24:41 dovecot_login authenticator failed for H=(ADMIN) [4.222.185.246]:59556: 535 Incorrect authentication data ([email protected] )
2026-11-09 14:30:28 dovecot_login authenticator failed for H=(ADMIN) [4.222.185.246]:41222: 535 Incorrect authentication data ([email protected] )
2026-11-09 14:36:13 dovecot_login authenticator failed for H=(ADMIN) [4.222.185.246]:42698: 535 Incorrect authentication data ([email protected] )
2026-11-09 14:43:05 dovecot_login authenticator failed for H=(ADMIN) [4.222.185.246]:45582: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
Anonymous
2026-11-09 17:26:50
UTC ·
(1 day ago)
2026-11-09T14:05:08.359852-03:00 web postfix/submissions/smtpd[969482]: warning: unknown[4.222.185.246]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
2026-11-09T14:20:37.343397-03:00 web postfix/sub ...
show more
2026-11-09T14:05:08.359852-03:00 web postfix/submissions/smtpd[969482]: warning: unknown[4.222.185.246]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
2026-11-09T14:20:37.343397-03:00 web postfix/submissions/smtpd[971255]: warning: unknown[4.222.185.246]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
2026-11-09T14:26:50.176927-03:00 web postfix/submissions/smtpd[971711]: warning: unknown[4.222.185.246]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
...
show less
Phishing
Web Spam
Email Spam
Hacking
Spoofing
Brute-Force
Bad Web Bot
🇺🇸
brianbgv
2026-11-09 17:24:22
UTC ·
(1 day ago)
Dovecot mail abuse detected by Fail2Ban
Port Scan
Hacking
SSH
🇧🇷
Host One
2026-11-08 16:15:24
UTC ·
(2 days ago)
Attack blocked by firewall: SMTP authentication brute-force. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 25, 465, 587 (SMTP). Automated report.
Email Spam
Brute-Force
🇧🇷
dominioz
2026-11-07 17:26:43
UTC ·
(3 days ago)
4.222.185.246 [36CC] 14:22:39 Authentication [SMTP] - Result=0, [email protected] , Method=0
4.222.185.246 [0AA8] 14:22:43 Authentication [SMTP] - Result=0, [email protected] , Method=0
4.222.185.246 [0AA8] 14:26:40 Aut ...
show more
4.222.185.246 [36CC] 14:22:39 Authentication [SMTP] - Result=0, [email protected] , Method=0
4.222.185.246 [0AA8] 14:22:43 Authentication [SMTP] - Result=0, [email protected] , Method=0
4.222.185.246 [0AA8] 14:26:40 Authentication [SMTP] - Result=0, [email protected] , Method=0
...
show less
Brute-Force
🇺🇸
hostmach
2026-11-07 16:53:07
UTC ·
(3 days ago)
(smtpauth) Failed SMTP AUTH login from 4.222.185.246 (ZA/South Africa/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-11-07 16:32:03 dovecot_login authenticator failed for H=(ADMIN) [4.222.185.246]:52222: 535 ...
show more
(smtpauth) Failed SMTP AUTH login from 4.222.185.246 (ZA/South Africa/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-11-07 16:32:03 dovecot_login authenticator failed for H=(ADMIN) [4.222.185.246]:52222: 535 Incorrect authentication data ([email protected] )
2026-11-07 16:37:46 dovecot_login authenticator failed for H=(ADMIN) [4.222.185.246]:37798: 535 Incorrect authentication data ([email protected] )
2026-11-07 16:42:51 dovecot_login authenticator failed for H=(ADMIN) [4.222.185.246]:39146: 535 Incorrect authentication data ([email protected] )
2026-11-07 16:48:00 dovecot_login authenticator failed for H=(ADMIN) [4.222.185.246]:58012: 535 Incorrect authentication data ([email protected] )
2026-11-07 16:53:02 dovecot_login authenticator failed for H=(ADMIN) [4.222.185.246]:43166: 535 Incorrect authentication data ([email protected] )
show less
Brute-Force
SSH
Anonymous
2026-11-07 16:33:05
UTC ·
(3 days ago)
Authentication failure
Brute-Force
🇧🇷
Host One
2026-11-07 16:04:39
UTC ·
(3 days ago)
Attack blocked by firewall: SMTP authentication brute-force. Blocked by firewall on 5 different hosting servers. Protocol TCP, port 25, 465, 587 (SMTP). Automated report.
Email Spam
Brute-Force