🇺🇸
TAY
2026-09-30 04:13:37
(1 day ago)
2026-09-30 12:13:18 auth-worker(26395): Info: sql(cat.info,41.139.0.134,<6NnPhKtcH9kpiwCG>): unknown ...
show more
2026-09-30 12:13:18 auth-worker(26395): Info: sql(cat.info,41.139.0.134,<6NnPhKtcH9kpiwCG>): unknown user
2026-09-30 12:13:26 auth-worker(26395): Info: sql(cat.info,41.139.0.134,<6NnPhKtcH9kpiwCG>): unknown user
2026-09-30 12:13:32 auth-worker(26395): Info: sql(cat.info,41.139.0.134,<6NnPhKtcH9kpiwCG>): unknown user
2026-09-30 12:13:36 imap-login: Info: Disconnected (auth failed, 3 attempts in 19 secs): user=<cat.info>, method=PLAIN, rip=41.139.0.134, lip=162.220.160.187, TLS, session=<6NnPhKtcH9kpiwCG>
...
show less
Brute-Force
🇺🇸
chrisj
2026-09-29 18:33:40
(2 days ago)
2026-09-29T18:33:22.111832+00:00 aws.vandogh.org auth[10382]: pam_unix(dovecot:auth): authentication ...
show more
2026-09-29T18:33:22.111832+00:00 aws.vandogh.org auth[10382]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=barb rhost=41.139.0.134 user=barb
2026-09-29T18:33:31.666834+00:00 aws.vandogh.org auth[10382]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=barb rhost=41.139.0.134 user=barb
2026-09-29T18:33:39.551353+00:00 aws.vandogh.org auth[10382]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=barb rhost=41.139.0.134 user=barb
...
show less
Brute-Force
🇸🇰
Schomburg
2026-09-27 22:17:03
(4 days ago)
RdpGuard detected brute-force attempt on POP3
Brute-Force
🇫🇮
inlink.ltd
2026-09-26 06:25:04
(5 days ago)
SMTP AUTH attack
Brute-Force
🇮🇹
Inartis
2026-09-22 13:50:20
(1 week ago)
2026-09-22T15:50:20.086489+02:00 mail dovecot: imap-login: Disconnected: Connection closed (auth fai ...
show more
2026-09-22T15:50:20.086489+02:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 24 secs): user=<carlo.fiorenza>, method=PLAIN, rip=41.139.0.134, lip=93.39.247.175, TLS, session=<odlQpBJcpbcpiwCG>
2026-09-22T15:50:20.086489+02:00 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 24 secs): user=<carlo.fiorenza>, method=PLAIN, rip=41.139.0.134, lip=93.39.247.175, TLS, session=<odlQpBJcpbcpiwCG>
...
show less
Port Scan
Brute-Force
🇵🇾
SecOpsSL
2026-09-22 07:57:29
(1 week ago)
2026-09-22 04:57:28,826 WARN [ImapSSLServer-1516] [ip=192.168.0.25;oip=41.139.0.134;via=192.168.0.2 ...
show more
2026-09-22 04:57:28,826 WARN [ImapSSLServer-1516] [ip=192.168.0.25;oip=41.139.0.134;via=192.168.0.25(nginx/1.20.0);ua=Zimbra/8.8.15_GA_4717;cid=20500;] security - cmd=Auth; [email protected] ; protocol=imap; error=authentication failed for [[email protected] ], invalid password;
show less
Email Spam
Brute-Force
🇩🇪
FeG Deutschland
2026-09-20 15:04:03
(1 week ago)
Mail: - login with unknown user - bruteforce
Brute-Force
2026-09-20 08:11:14
(1 week ago)
IMAP password guessing
Brute-Force
🇺🇸
TAY
2026-09-18 22:28:52
(1 week ago)
2026-09-19 06:28:33 auth-worker(13364): Info: sql([email protected] ,41.139.0.134,<3oW ...
show more
2026-09-19 06:28:33 auth-worker(13364): Info: sql([email protected] ,41.139.0.134,<3oWsa8lbseIpiwCG>): unknown user
2026-09-19 06:28:41 auth-worker(13364): Info: sql([email protected] ,41.139.0.134,<3oWsa8lbseIpiwCG>): unknown user
2026-09-19 06:28:47 auth-worker(13364): Info: sql([email protected] ,41.139.0.134,<3oWsa8lbseIpiwCG>): unknown user
2026-09-19 06:28:52 imap-login: Info: Disconnected (auth failed, 3 attempts in 19 secs): user=<[email protected] >, method=PLAIN, rip=41.139.0.134, lip=162.220.160.187, TLS, session=<3oWsa8lbseIpiwCG>
...
show less
Brute-Force
🇸🇪
triplecode
2026-09-17 13:51:05
(2 weeks ago)
Reported from hMailServer
Hacking
🇨🇦
Mediashaker
2026-09-17 11:42:14
(2 weeks ago)
(imapd) Failed IMAP login from 41.139.0.134 (GH/Ghana/-)
Brute-Force
🇦🇺
AWW-Admin
2026-09-17 02:38:56
(2 weeks ago)
(imapd) Failed IMAP login from 41.139.0.134 (GH/Ghana/-)
Brute-Force
🇨🇦
Julio Covolato
2026-09-14 14:40:02
(2 weeks ago)
Imap or Submission login brute-force attacks.
Brute-Force
🇨🇦
Mediashaker
2026-09-12 05:00:23
(2 weeks ago)
(pop3d) Failed POP3 login from 41.139.0.134 (GH/Ghana/-)
Brute-Force
🇮🇩
sockominfo
2026-09-09 23:00:53
(3 weeks ago)
Email: Login failures from Bad Reputation IP: 41.139.0.134. Threat Score: 6.1/10 (MEDIUM). Confidenc ...
show more
Email: Login failures from Bad Reputation IP: 41.139.0.134. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
