Yesterday, this IP was the source of 32 failed authentications targeting 9 unique usernames on our M ...
show moreYesterday, this IP was the source of 32 failed authentications targeting 9 unique usernames on our Mail Server at 216.21.193.119.
show less
Suspicious activity detected from IP 46.246.122.76 based on mailserver logs.
Sample logs:
2026-02-28 ...
show moreSuspicious activity detected from IP 46.246.122.76 based on mailserver logs.
Sample logs:
2026-02-28 04:03:37,430 INFO [qtp2102534528-83623] [ip=172.16.0.182;oip=46.246.122.76;oport=15490;oproto=smtp;port=60388;soapId=2e791ddb;] SoapEngine - handler exception: authentication failed for [**], account not found
2026-02-28 04:03:37,430 INFO [qtp2102534528-83623] [ip=172.16.0.182;oip=46.246.122.76;oport=15490;oproto=smtp;port=60388;soapId=2e791ddb;] soap - AuthRequest elapsed=1
2026-02-28 04:03:38,040 INFO [qtp2102534528-83584] [ip=172.16.0.182;oip=46.246.122.76;oport=15490;oproto=smtp;port=60390;soapId=2e791ddc;] account - Error occurred during authentication: authentication failed for [**]. Reason: account not found.
2026-02-28 04:03:38,040 INFO [qtp2102534528-83584] [ip=172.16.0.182;oip=46.246.122.76;oport=15490;oproto=smtp;port=60390;soapId=2e791ddc;] SoapEngine - handler exception: authentication failed for [**], account not found
2026-02-28 04:03:38,040 INFO [qtp2102534528-83584
show less
Feb 27 16:46:48 mail.srvfarm.net postfix/submission/smtpd[1415429]: lost connection after CONNECT fr ...
show moreFeb 27 16:46:48 mail.srvfarm.net postfix/submission/smtpd[1415429]: lost connection after CONNECT from unknown[46.246.122.76]
Feb 27 16:46:50 mail.srvfarm.net postfix/submission/smtpd[1414668]: warning: unknown[46.246.122.76]: SASL PLAIN authentication failed: (reason unavailable), [email protected]
Feb 27 16:46:56 mail.srvfarm.net postfix/submission/smtpd[1414668]: warning: unknown[46.246.122.76]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
Feb 27 16:46:56 mail.srvfarm.net postfix/submission/smtpd[1414668]: disconnect from unknown[46.246.122.76] ehlo=2 starttls=1 auth=0/2 quit=1 commands=4/6
Feb 27 16:46:56 mail.srvfarm.net postfix/smtps/smtpd[1415125]: lost connection after CONNECT from unknown[46.246.122.76]
show less