| 191.53.52.96 |
attackbots |
(smtpauth) Failed SMTP AUTH login from 191.53.52.96 (BR/Brazil/191-53-52-96.vze-wr.mastercabo.com.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-09-18 11:49:55 plain authenticator failed for ([191.53.52.96]) [191.53.52.96]: 535 Incorrect authentication data (set_id=info) |
2020-09-18 17:55:59 |
| 170.83.188.64 |
attack |
Sep 17 18:17:59 mail.srvfarm.net postfix/smtpd[157365]: warning: unknown[170.83.188.64]: SASL PLAIN authentication failed:
Sep 17 18:17:59 mail.srvfarm.net postfix/smtpd[157365]: lost connection after AUTH from unknown[170.83.188.64]
Sep 17 18:19:12 mail.srvfarm.net postfix/smtps/smtpd[155676]: warning: unknown[170.83.188.64]: SASL PLAIN authentication failed:
Sep 17 18:19:13 mail.srvfarm.net postfix/smtps/smtpd[155676]: lost connection after AUTH from unknown[170.83.188.64]
Sep 17 18:21:36 mail.srvfarm.net postfix/smtpd[143214]: warning: unknown[170.83.188.64]: SASL PLAIN authentication failed: |
2020-09-18 18:01:28 |
| 52.172.207.135 |
attackbotsspam |
Sep 17 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 2 attempts in 8 secs\): user=\<**REMOVED**@**REMOVED**.de\>, method=PLAIN, rip=52.172.207.135, lip=**REMOVED**, TLS: Disconnected, session=\
Sep 17 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 2 attempts in 8 secs\): user=\<**REMOVED**@**REMOVED**.de\>, method=PLAIN, rip=52.172.207.135, lip=**REMOVED**, TLS: Disconnected, session=\<8BE3sYOvZ+40rM+H\>
Sep 17 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 4 attempts in 35 secs\): user=\<**REMOVED**@**REMOVED**.de\>, method=PLAIN, rip=52.172.207.135, lip=**REMOVED**, TLS: Disconnected, session=\ |
2020-09-18 18:18:03 |
| 103.19.201.125 |
attackspambots |
Sep 17 18:32:50 mail.srvfarm.net postfix/smtpd[156674]: warning: unknown[103.19.201.125]: SASL PLAIN authentication failed:
Sep 17 18:32:50 mail.srvfarm.net postfix/smtpd[156674]: lost connection after AUTH from unknown[103.19.201.125]
Sep 17 18:36:25 mail.srvfarm.net postfix/smtpd[161687]: warning: unknown[103.19.201.125]: SASL PLAIN authentication failed:
Sep 17 18:36:25 mail.srvfarm.net postfix/smtpd[161687]: lost connection after AUTH from unknown[103.19.201.125]
Sep 17 18:39:51 mail.srvfarm.net postfix/smtpd[157369]: warning: unknown[103.19.201.125]: SASL PLAIN authentication failed: |
2020-09-18 18:02:31 |
| 141.98.80.188 |
attackspambots |
Sep 17 20:03:36 mail.srvfarm.net postfix/smtpd[200752]: warning: unknown[141.98.80.188]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 17 20:03:36 mail.srvfarm.net postfix/smtpd[200752]: lost connection after AUTH from unknown[141.98.80.188]
Sep 17 20:03:41 mail.srvfarm.net postfix/smtpd[185313]: lost connection after AUTH from unknown[141.98.80.188]
Sep 17 20:03:46 mail.srvfarm.net postfix/smtpd[185313]: lost connection after AUTH from unknown[141.98.80.188]
Sep 17 20:03:50 mail.srvfarm.net postfix/smtpd[200752]: lost connection after AUTH from unknown[141.98.80.188] |
2020-09-18 18:11:37 |
| 185.129.193.221 |
attackspam |
Sep 17 18:00:08 mail.srvfarm.net postfix/smtps/smtpd[139803]: warning: unknown[185.129.193.221]: SASL PLAIN authentication failed:
Sep 17 18:00:08 mail.srvfarm.net postfix/smtps/smtpd[139803]: lost connection after AUTH from unknown[185.129.193.221]
Sep 17 18:00:15 mail.srvfarm.net postfix/smtps/smtpd[137969]: warning: unknown[185.129.193.221]: SASL PLAIN authentication failed:
Sep 17 18:00:15 mail.srvfarm.net postfix/smtps/smtpd[137969]: lost connection after AUTH from unknown[185.129.193.221]
Sep 17 18:07:15 mail.srvfarm.net postfix/smtps/smtpd[140188]: warning: unknown[185.129.193.221]: SASL PLAIN authentication failed: |
2020-09-18 18:08:30 |
| 191.53.105.99 |
attack |
Attempted Brute Force (dovecot) |
2020-09-18 17:55:45 |
| 2002:c1a9:fd88::c1a9:fd88 |
attackbotsspam |
Sep 17 19:18:23 web01.agentur-b-2.de postfix/smtpd[1726692]: warning: unknown[2002:c1a9:fd88::c1a9:fd88]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 17 19:18:23 web01.agentur-b-2.de postfix/smtpd[1726692]: lost connection after AUTH from unknown[2002:c1a9:fd88::c1a9:fd88]
Sep 17 19:19:32 web01.agentur-b-2.de postfix/smtpd[1741399]: warning: unknown[2002:c1a9:fd88::c1a9:fd88]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 17 19:19:32 web01.agentur-b-2.de postfix/smtpd[1741399]: lost connection after AUTH from unknown[2002:c1a9:fd88::c1a9:fd88]
Sep 17 19:19:48 web01.agentur-b-2.de postfix/smtpd[1741741]: warning: unknown[2002:c1a9:fd88::c1a9:fd88]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-09-18 18:22:03 |
| 179.124.18.3 |
attackspambots |
Sep 17 18:04:39 mail.srvfarm.net postfix/smtpd[137462]: warning: unknown[179.124.18.3]: SASL PLAIN authentication failed:
Sep 17 18:04:40 mail.srvfarm.net postfix/smtpd[137462]: lost connection after AUTH from unknown[179.124.18.3]
Sep 17 18:12:23 mail.srvfarm.net postfix/smtps/smtpd[155677]: warning: unknown[179.124.18.3]: SASL PLAIN authentication failed:
Sep 17 18:12:24 mail.srvfarm.net postfix/smtps/smtpd[155677]: lost connection after AUTH from unknown[179.124.18.3]
Sep 17 18:13:20 mail.srvfarm.net postfix/smtpd[143209]: warning: unknown[179.124.18.3]: SASL PLAIN authentication failed: |
2020-09-18 18:08:56 |
| 45.142.120.74 |
attackspambots |
Brute-Force email accounts |
2020-09-18 18:05:49 |
| 49.235.247.75 |
attackbotsspam |
DATE:2020-09-18 09:12:58,IP:49.235.247.75,MATCHES:10,PORT:ssh |
2020-09-18 17:52:34 |
| 91.231.244.113 |
attack |
Sep 17 18:01:24 mail.srvfarm.net postfix/smtps/smtpd[140754]: warning: unknown[91.231.244.113]: SASL PLAIN authentication failed:
Sep 17 18:01:25 mail.srvfarm.net postfix/smtps/smtpd[140754]: lost connection after AUTH from unknown[91.231.244.113]
Sep 17 18:04:20 mail.srvfarm.net postfix/smtps/smtpd[140188]: warning: unknown[91.231.244.113]: SASL PLAIN authentication failed:
Sep 17 18:04:20 mail.srvfarm.net postfix/smtps/smtpd[140188]: lost connection after AUTH from unknown[91.231.244.113]
Sep 17 18:11:18 mail.srvfarm.net postfix/smtps/smtpd[155678]: warning: unknown[91.231.244.113]: SASL PLAIN authentication failed: |
2020-09-18 18:12:59 |
| 45.186.145.50 |
attack |
Sep 17 23:58:13 mail sshd\[41211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.186.145.50 user=root
... |
2020-09-18 18:19:05 |
| 102.23.247.157 |
attack |
Sep 17 18:32:24 mail.srvfarm.net postfix/smtpd[157370]: warning: unknown[102.23.247.157]: SASL PLAIN authentication failed:
Sep 17 18:32:24 mail.srvfarm.net postfix/smtpd[157370]: lost connection after AUTH from unknown[102.23.247.157]
Sep 17 18:33:15 mail.srvfarm.net postfix/smtps/smtpd[155676]: warning: unknown[102.23.247.157]: SASL PLAIN authentication failed:
Sep 17 18:33:15 mail.srvfarm.net postfix/smtps/smtpd[155676]: lost connection after AUTH from unknown[102.23.247.157]
Sep 17 18:34:58 mail.srvfarm.net postfix/smtpd[157368]: warning: unknown[102.23.247.157]: SASL PLAIN authentication failed: |
2020-09-18 18:02:57 |
| 93.99.210.114 |
attack |
Sep 17 18:30:14 mail.srvfarm.net postfix/smtps/smtpd[159843]: warning: unknown[93.99.210.114]: SASL PLAIN authentication failed:
Sep 17 18:30:14 mail.srvfarm.net postfix/smtps/smtpd[159843]: lost connection after AUTH from unknown[93.99.210.114]
Sep 17 18:33:36 mail.srvfarm.net postfix/smtpd[143202]: warning: unknown[93.99.210.114]: SASL PLAIN authentication failed:
Sep 17 18:33:36 mail.srvfarm.net postfix/smtpd[143202]: lost connection after AUTH from unknown[93.99.210.114]
Sep 17 18:39:48 mail.srvfarm.net postfix/smtps/smtpd[161659]: warning: unknown[93.99.210.114]: SASL PLAIN authentication failed: |
2020-09-18 18:03:57 |