🇫🇷
JF Berne
2026-08-23 09:57:00
(1 week ago)
SMTP relay attempt
Brute-Force
Anonymous
2026-08-23 08:44:20
(1 week ago)
Postfix: Attempt to use mail server as relay (client host rejected).
Hacking
🇧🇷
SvrAdmin
2026-08-23 08:42:13
(1 week ago)
[254] (smtpauth) Failed SMTP AUTH login from 104.168.115.2 (US/United States/104-168-115-2-host.colo ...
show more
[254] (smtpauth) Failed SMTP AUTH login from 104.168.115.2 (US/United States/104-168-115-2-host.colocrossing.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: Aug 23 05:41:31 painel postfix/smtpd[8156]: warning: unknown[104.168.115.2]: SASL login authentication failed: UGFzc3dvcmQ6
Aug 23 05:41:38 painel postfix/smtpd[8156]: warning: unknown[104.168.115.2]: SASL login authentication failed: UGFzc3dvcmQ6
Aug 23 05:41:49 painel postfix/smtpd[8156]: warning: unknown[104.168.115.2]: SASL login authentication failed: UGFzc3dvcmQ6
Aug 23 05:42:00 painel postfix/smtpd[8156]: warning: unknown[104.168.115.2]: SASL login authentication failed: Connection lost to authentication server
Aug 23 05:42:11 painel postfix/smtpd[8156]: warning: unknown[104.168.115.2]: SASL login authentication failed: Connection lost to authentication server
show less
Port Scan
Hacking
Brute-Force
Exploited Host
🇳🇱
Inter-Technics.net
2026-08-23 08:09:26
(1 week ago)
Aug 23 10:09:23 inter-technics postfix/smtpd[2532231]: warning: unknown[104.168.115.2]: SASL login a ...
show more
Aug 23 10:09:23 inter-technics postfix/smtpd[2532231]: warning: unknown[104.168.115.2]: SASL login authentication failed: authentication failure, sasl_username=noauth
Aug 23 10:09:24 inter-technics postfix/smtpd[2532231]: warning: unknown[104.168.115.2]: SASL login authentication failed: authentication failure, sasl_username=spam
Aug 23 10:09:25 inter-technics postfix/smtpd[2532231]: warning: unknown[104.168.115.2]: SASL login authentication failed: authentication failure, sasl_username=test
...
show less
Brute-Force
🇩🇪
IP Analyzer
2026-08-23 08:00:21
(1 week ago)
Unauthorized connection attempt from IP address 104.168.115.2 on Port 25(SMTP)
Port Scan
🇬🇧
wojtek
2026-08-23 07:51:29
(1 week ago)
2026-08-23T07:51:15.713534+00:00 bee-1 postfix/smtpd[754355]: warning: unknown[104.168.115.2]: SASL ...
show more
2026-08-23T07:51:15.713534+00:00 bee-1 postfix/smtpd[754355]: warning: unknown[104.168.115.2]: SASL login authentication failed: authentication failure, sasl_username=noauth
2026-08-23T07:51:18.689338+00:00 bee-1 postfix/smtpd[754355]: warning: unknown[104.168.115.2]: SASL login authentication failed: authentication failure, sasl_username=spam
2026-08-23T07:51:22.215985+00:00 bee-1 postfix/smtpd[754355]: warning: unknown[104.168.115.2]: SASL login authentication failed: authentication failure, sasl_username=test
2026-08-23T07:51:24.662134+00:00 bee-1 postfix/smtpd[754355]: warning: unknown[104.168.115.2]: SASL login authentication failed: authentication failure, sasl_username=info
2026-08-23T07:51:28.472343+00:00 bee-1 postfix/smtpd[754355]: warning: unknown[104.168.115.2]: SASL login authentication failed: authentication failure, sasl_username=admin
...
show less
Brute-Force
🇩🇪
IP Analyzer
2026-08-23 07:43:46
(1 week ago)
Unauthorized connection attempt from IP address 104.168.115.2
Brute-Force
🇩🇪
mattk
2026-08-23 07:38:18
(1 week ago)
Aug 23 07:38:17 postfix/smtpd[2733517]: disconnect from unknown[104.168.115.2] ehlo=1 mail=1 rcpt=0/ ...
show more
Aug 23 07:38:17 postfix/smtpd[2733517]: disconnect from unknown[104.168.115.2] ehlo=1 mail=1 rcpt=0/1 commands=2/3
show less
Email Spam
Brute-Force
🇫🇷
Lacrimosa99
2026-08-23 07:13:59
(1 week ago)
2026-08-23 09:13:37 login authenticator failed for (WIN-8OA3CCQAE4D) [104.168.115.2]: 535 Incorrect ...
show more
2026-08-23 09:13:37 login authenticator failed for (WIN-8OA3CCQAE4D) [104.168.115.2]: 535 Incorrect authentication data (set_id=noauth)
2026-08-23 09:13:46 login authenticator failed for (WIN-8OA3CCQAE4D) [104.168.115.2]: 535 Incorrect authentication data (set_id=spam)
2026-08-23 09:13:59 login authenticator failed for (WIN-8OA3CCQAE4D) [104.168.115.2]: 535 Incorrect authentication data (set_id=test)
...
show less
Spoofing
Brute-Force
🇩🇪
Tom077
2026-08-23 07:12:07
(1 week ago)
Port Scan
Brute-Force
🇩🇪
mxpgmbh
2026-08-23 07:08:18
(1 week ago)
2026-08-23T09:08:01.041579+02:00 **** postfix/smtpd[31971]: warning: unknown[104.168.115.2]: SASL lo ...
show more
2026-08-23T09:08:01.041579+02:00 **** postfix/smtpd[31971]: warning: unknown[104.168.115.2]: SASL login authentication failed: (reason unavailable), sasl_username=****
2026-08-23T09:08:08.025344+02:00 **** postfix/smtpd[31970]: warning: unknown[104.168.115.2]: SASL login authentication failed: (reason unavailable), sasl_username=****
2026-08-23T09:08:18.290759+02:00 **** postfix/smtpd[31969]: warning: unknown[104.168.115.2]: SASL login authentication failed: (reason unavailable), sasl_username=****
show less
Brute-Force
Anonymous
2026-08-23 07:02:05
(1 week ago)
2026-08-23T09:02:01.802644+02:00 postfix/smtpd[1474827]: NOQUEUE: reject: RCPT from unknown[104.168 ...
show more
2026-08-23T09:02:01.802644+02:00 postfix/smtpd[1474827]: NOQUEUE: reject: RCPT from unknown[104.168.115.2]: 504 5.5.2 <WIN-8OA3CCQAE4D>: Helo command rejected: need fully-qualified hostname; proto=ESMTP helo=<WIN-8OA3CCQAE4D>
show less
Email Spam
🇩🇪
mueller-nils.com
2026-08-23 06:24:35
(1 week ago)
Aug 23 08:24:30 [host] postfix/smtpd[9717]: warning: unknown[104.168.115.2]: SASL login authenticati ...
show more
Aug 23 08:24:30 [host] postfix/smtpd[9717]: warning: unknown[104.168.115.2]: SASL login authenticati
Aug 23 08:24:32 [host] postfix/smtpd[9717]: warning: unknown[104.168.115.2]: SASL login authenticati
Aug 23 08:24:33 [host] postfix/smtpd[9717]: warning: unknown[104.168.115.2]: SASL login authenticati
Aug 23 08:24:34 [host] postfix/smtpd[9717]: warning: unknown[104.168.115.2]: SASL login authenticati
Aug 23 08:24:35 [host] postfix/smtpd[9717]: warning: unknown[104.168.115.2]: SASL login authenticati
show less
Hacking
Brute-Force
🇩🇪
mueller-nils.com
2026-08-23 03:12:10
(1 week ago)
Aug 23 05:12:04 [host] postfix/smtpd[24810]: warning: unknown[104.168.115.2]: SASL login authenticat ...
show more
Aug 23 05:12:04 [host] postfix/smtpd[24810]: warning: unknown[104.168.115.2]: SASL login authenticat
Aug 23 05:12:06 [host] postfix/smtpd[24810]: warning: unknown[104.168.115.2]: SASL login authenticat
Aug 23 05:12:07 [host] postfix/smtpd[24810]: warning: unknown[104.168.115.2]: SASL login authenticat
Aug 23 05:12:08 [host] postfix/smtpd[24810]: warning: unknown[104.168.115.2]: SASL login authenticat
Aug 23 05:12:10 [host] postfix/smtpd[24810]: warning: unknown[104.168.115.2]: SASL login authenticat
show less
Hacking
Brute-Force
🇩🇪
Marc
2026-08-23 03:01:53
(1 week ago)
2026-08-23T05:01:35.945447+02:00 mx1 postfix/smtp-relay/smtpd[2640688]: NOQUEUE: reject: RCPT from u ...
show more
2026-08-23T05:01:35.945447+02:00 mx1 postfix/smtp-relay/smtpd[2640688]: NOQUEUE: reject: RCPT from unknown[104.168.115.2]: 504 5.5.2 <WIN-8OA3CCQAE4D>: Helo command rejected: need fully-qualified hostname; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<WIN-8OA3CCQAE4D> 2026-08-23T05:01:42.323164+02:00 mx1 postfix/smtp-relay/smtpd[2681476]: NOQUEUE: reject: RCPT from unknown[104.168.115.2]: 504 5.5.2 <WIN-8OA3CCQAE4D>: Helo command rejected: need fully-qualified hostname; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<WIN-8OA3CCQAE4D> 2026-08-23T05:01:52.743371+02:00 mx1 postfix/smtp-relay/smtpd[2675501]: NOQUEUE: reject: RCPT from unknown[104.168.115.2]: 504 5.5.2 <WIN-8OA3CCQAE4D>: Helo command rejected: need fully-qualified hostname; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<WIN-8OA3CCQAE4D>
show less
Brute-Force
Email Spam