๐ฉ๐ช
ghostwarriors
2026-06-09 16:20:24
(4 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
exxos
2025-09-30 19:03:01
(1 year ago)
Attacks with Bad user agents
Hacking
๐บ๐ธ
hostseries
2024-05-11 03:02:54
(2 years ago)
Trigger: LF_SMTPAUTH
Brute-Force
๐จ๐ฟ
lp
2024-05-07 08:25:03
(2 years ago)
Email account brute force: 5 attempts were recorded from 78.163.119.229
2024-05-07T10:24:46+02:00 wa ...
show more
Email account brute force: 5 attempts were recorded from 78.163.119.229
2024-05-07T10:24:46+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
2024-05-07T10:24:47+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
2024-05-07T10:24:47+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
2024-05-07T10:24:48+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
2024-05-07T10:24:49+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
show less
Brute-Force
๐ซ๐ท
UM3
2024-05-07 07:33:00
(2 years ago)
Exim Auth Failed
Brute-Force
๐บ๐ธ
wavellan
2024-05-04 18:59:00
(2 years ago)
Running a Yulia Kadulia SCAM - https://pastebin.com/NGLJrtUB
Phishing
Email Spam
๐ธ๐ฌ
club77
2024-05-03 03:07:26
(2 years ago)
2024-05-03T11:07:06.188193+08:00 raindance postfix/smtps/smtpd[102453]: warning: unknown[78.163.119. ...
show more
2024-05-03T11:07:06.188193+08:00 raindance postfix/smtps/smtpd[102453]: warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: generic failure
2024-05-03T11:07:10.806350+08:00 raindance postfix/smtps/smtpd[102453]: warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: generic failure
2024-05-03T11:07:19.513246+08:00 raindance postfix/smtps/smtpd[102453]: warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: generic failure
2024-05-03T11:07:22.176590+08:00 raindance postfix/smtps/smtpd[102453]: warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: generic failure
2024-05-03T11:07:26.177485+08:00 raindance postfix/smtps/smtpd[102453]: warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: generic failure
...
show less
Brute-Force
Anonymous
2024-05-02 06:04:22
(2 years ago)
(smtpauth) Failed SMTP AUTH login from 78.163.119.229 (TR/Turkey/78.163.119.229.dynamic.ttnet.com.tr ...
show more
(smtpauth) Failed SMTP AUTH login from 78.163.119.229 (TR/Turkey/78.163.119.229.dynamic.ttnet.com.tr): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2024-05-02 13:03:03 dovecot_login authenticator failed for (JipozWBDiO) [78.163.119.229]:10830: 535 Incorrect authentication data (set_id=ditdoktni)
2024-05-02 13:03:12 dovecot_login authenticator failed for (j9JhJL) [78.163.119.229]:10783: 535 Incorrect authentication data (set_id=ditdoktni)
2024-05-02 13:03:30 dovecot_login authenticator failed for (DYhpCk1EDr) [78.163.119.229]:11547: 535 Incorrect authentication data (set_id=ditdoktni)
2024-05-02 13:03:52 dovecot_login authenticator failed for (SJMztJQNSq) [78.163.119.229]:10540: 535 Incorrect authentication data (set_id=ditdoktni)
2024-05-02 13:04:14 dovecot_login authenticator failed for (upKeePTtC) [78.163.119.229]:9584: 535 Incorrect authentication data (set_id=ditdoktni)
show less
Port Scan
๐ฎ๐ช
tines_bot
2024-04-30 02:00:17
(2 years ago)
This IOC was found in a paste: https://pastebin.com/bzeX90RM with the title "20240428_PHISHING_SCAM_ ...
show more
This IOC was found in a paste: https://pastebin.com/bzeX90RM with the title "20240428_PHISHING_SCAM_1" by wavellan
For more information, or to report interesting/incorrect findings, contact us - [email protected]
show less
Phishing
Email Spam
๐จ๐ฟ
lp
2024-04-21 15:57:29
(2 years ago)
Email account brute force: 5 attempts were recorded from 78.163.119.229
2024-04-21T14:47:30+02:00 wa ...
show more
Email account brute force: 5 attempts were recorded from 78.163.119.229
2024-04-21T14:47:30+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
2024-04-21T17:57:16+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
2024-04-21T17:57:17+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
2024-04-21T17:57:18+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
2024-04-21T17:57:18+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
show less
Brute-Force
Anonymous
2024-04-21 14:15:48
(2 years ago)
RdpGuard detected brute-force attempt on SMTP
Brute-Force
Anonymous
2024-04-21 11:39:16
(2 years ago)
Ports: 25,110,143,993,995; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
๐จ๐ฟ
lp
2024-04-21 09:24:40
(2 years ago)
Email account brute force: 5 attempts were recorded from 78.163.119.229
2024-04-21T04:05:43+02:00 wa ...
show more
Email account brute force: 5 attempts were recorded from 78.163.119.229
2024-04-21T04:05:43+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
2024-04-21T11:24:31+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
2024-04-21T11:24:31+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
2024-04-21T11:24:32+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
2024-04-21T11:24:34+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
show less
Brute-Force
๐จ๐ญ
Kepler-1649c
2024-04-21 08:42:00
(2 years ago)
SMTP Authentication errors
Hacking
Brute-Force
๐จ๐ฟ
lp
2024-04-20 23:01:42
(2 years ago)
Email account brute force: 5 attempts were recorded from 78.163.119.229
2024-04-21T01:01:23+02:00 wa ...
show more
Email account brute force: 5 attempts were recorded from 78.163.119.229
2024-04-21T01:01:23+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
2024-04-21T01:01:23+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
2024-04-21T01:01:24+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
2024-04-21T01:01:25+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
2024-04-21T01:01:26+02:00 warning: unknown[78.163.119.229]: SASL LOGIN authentication failed: authentication failure, [email protected]
show less
Brute-Force