🇩🇪
edgeshield
2026-09-11 17:32:15
(2 days ago)
Automated web request flooding / proxy abuse (EdgeShield WAF).
Open Proxy
DDoS Attack
🇩🇪
NewGastroline
2026-09-11 02:17:06
(2 days ago)
Malicious request blocked by CrowdSec on gastro-prod1.boreus.de
Bad Web Bot
Web App Attack
🇺🇸
mnogoweb
2026-09-09 18:12:45
(4 days ago)
(smtpauth) Failed SMTP AUTH login from 40.160.136.215 (US/United States/vps-5f4f2586.vps.ovh.us): 5 ...
show more
(smtpauth) Failed SMTP AUTH login from 40.160.136.215 (US/United States/vps-5f4f2586.vps.ovh.us): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-09 11:55:30 login authenticator failed for vps-5f4f2586.vps.ovh.us [40.160.136.215]: 535 Incorrect authentication data ([email protected] )
2026-09-09 11:55:39 login authenticator failed for vps-5f4f2586.vps.ovh.us [40.160.136.215]: 535 Incorrect authentication data ([email protected] )
2026-09-09 12:04:43 login authenticator failed for vps-5f4f2586.vps.ovh.us [40.160.136.215]: 535 Incorrect authentication data ([email protected] )
2026-09-09 12:11:38 login authenticator failed for vps-5f4f2586.vps.ovh.us [40.160.136.215]: 535 Incorrect authentication data ([email protected] )
2026-09-09 12:12:40 login authenticator failed for vps-5f4f2586.vps.ovh.us [40.160.136.215]: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
🇩🇰
powerhostingdk
2026-09-09 13:45:01
(4 days ago)
[mailserver] CrowdSec detected crowdsecurity/postscreen-rbl (1 events). Automated abuse report.
Email Spam
Brute-Force
🇮🇩
sockominfo
2026-09-09 11:01:00
(4 days ago)
Email: Login failures from Bad Reputation IP: 40.160.136.215. Threat Score: 6.2/10 (MEDIUM). Confide ...
show more
Email: Login failures from Bad Reputation IP: 40.160.136.215. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
🇮🇩
sockominfo
2026-09-09 10:00:09
(4 days ago)
Email: Login failures from Bad Reputation IP: 40.160.136.215. Threat Score: 5.7/10 (MEDIUM). Reporte ...
show more
Email: Login failures from Bad Reputation IP: 40.160.136.215. Threat Score: 5.7/10 (MEDIUM). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
🇮🇩
xveil
2026-09-09 07:19:49
(4 days ago)
2026-09-09T14:19:47.662624 mail-honeypot postfix/submission/smtpd[14655]: warning: vps-5f4f2586.vps. ...
show more
2026-09-09T14:19:47.662624 mail-honeypot postfix/submission/smtpd[14655]: warning: vps-5f4f2586.vps.ovh.us[40.160.136.215]: SASL PLAIN authentication failed: authentication failure
...
show less
Brute-Force
🇺🇸
mnogoweb
2026-09-08 05:33:42
(5 days ago)
(smtpauth) Failed SMTP AUTH login from 40.160.136.215 (US/United States/vps-5f4f2586.vps.ovh.us): 5 ...
show more
(smtpauth) Failed SMTP AUTH login from 40.160.136.215 (US/United States/vps-5f4f2586.vps.ovh.us): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-07 22:34:02 login authenticator failed for vps-5f4f2586.vps.ovh.us [40.160.136.215]: 535 Incorrect authentication data ([email protected] )
2026-09-07 22:37:57 plain authenticator failed for vps-5f4f2586.vps.ovh.us (32x9x1zwz8ewvedptcsy74h) [40.160.136.215]: 535 Incorrect authentication data ([email protected] )
2026-09-07 23:18:58 login authenticator failed for vps-5f4f2586.vps.ovh.us [40.160.136.215]: 535 Incorrect authentication data ([email protected] )
2026-09-07 23:26:40 login authenticator failed for vps-5f4f2586.vps.ovh.us [40.160.136.215]: 535 Incorrect authentication data ([email protected] )
2026-09-07 23:33:39 login authenticator failed for vps-5f4f2586.vps.ovh.us [40.160.136.215]: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
Anonymous
2026-09-08 01:48:01
(5 days ago)
...
Brute-Force
🇺🇸
mnogoweb
2026-09-08 01:01:36
(5 days ago)
(smtpauth) Failed SMTP AUTH login from 40.160.136.215 (US/United States/vps-5f4f2586.vps.ovh.us): 5 ...
show more
(smtpauth) Failed SMTP AUTH login from 40.160.136.215 (US/United States/vps-5f4f2586.vps.ovh.us): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-07 18:42:26 login authenticator failed for vps-5f4f2586.vps.ovh.us [40.160.136.215]: 535 Incorrect authentication data ([email protected] )
2026-09-07 18:45:48 login authenticator failed for vps-5f4f2586.vps.ovh.us [40.160.136.215]: 535 Incorrect authentication data ([email protected] )
2026-09-07 18:50:19 login authenticator failed for vps-5f4f2586.vps.ovh.us [40.160.136.215]: 535 Incorrect authentication data ([email protected] )
2026-09-07 19:00:37 login authenticator failed for vps-5f4f2586.vps.ovh.us [40.160.136.215]: 535 Incorrect authentication data ([email protected] )
2026-09-07 19:01:34 login authenticator failed for vps-5f4f2586.vps.ovh.us [40.160.136.215]: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
🇿🇦
maximonline.co.za
2026-09-07 08:10:12
(6 days ago)
Brute Force SMTP AUTH Attack
Brute-Force
🇷🇸
Smel
2026-09-07 07:04:10
(6 days ago)
Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -
Email Spam
Hacking
Brute-Force
🇩🇪
NewGastroline
2026-09-06 06:40:58
(1 week ago)
Malicious request blocked by CrowdSec on gastro-prod1.boreus.de
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-05 20:40:04
(1 week ago)
Detected mail brute force attack from different servers
Brute-Force