🇺🇸
mnogoweb
2026-09-08 11:59:34
(7 hours ago)
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-08 05:47:16 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-08 05:48:44 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-08 05:54:18 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-08 05:54:21 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-08 05:59:32 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
🇺🇸
mnogoweb
2026-09-08 11:26:32
(8 hours ago)
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-08 04:54:08 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-08 04:59:05 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-08 05:05:51 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-08 05:10:58 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-08 05:26:29 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
🇺🇸
mnogoweb
2026-09-08 09:49:32
(9 hours ago)
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-08 03:30:31 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-08 03:43:26 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-08 03:45:22 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-08 03:46:50 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-08 03:49:29 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
🇺🇸
mnogoweb
2026-09-08 09:15:07
(10 hours ago)
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-08 02:25:41 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-08 02:40:38 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-08 02:48:30 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-08 03:04:27 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-08 03:15:04 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
🇦🇷
lzambrana
2026-09-07 10:36:57
(1 day ago)
Repeated unauthorized SMTP relay attempts against your mail server. Automated spam and spoofing.
Email Spam
Brute-Force
🇺🇸
mnogoweb
2026-09-06 10:41:53
(2 days ago)
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-06 04:24:06 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-06 04:27:19 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-06 04:38:13 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-06 04:40:29 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-06 04:41:48 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
🇩🇪
NewGastroline
2026-09-06 09:50:04
(2 days ago)
Malicious request blocked by CrowdSec on gastro-prod1.boreus.de
Bad Web Bot
Web App Attack
🇺🇸
mnogoweb
2026-09-05 05:10:43
(3 days ago)
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-04 22:17:27 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-04 22:24:06 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-04 22:48:33 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-04 23:02:30 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-04 23:10:38 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
🇺🇸
mnogoweb
2026-09-05 01:37:27
(3 days ago)
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-04 18:50:27 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-04 18:53:00 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-04 19:00:28 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-04 19:34:14 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-04 19:37:23 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
🇨🇿
interconnect.cz
2026-09-04 18:29:54
(4 days ago)
Brute-Force
Email Spam
🇺🇸
mnogoweb
2026-09-04 03:22:24
(4 days ago)
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-03 20:23:50 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-03 20:45:12 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-03 21:08:53 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-03 21:14:53 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-03 21:22:19 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
🇺🇸
mnogoweb
2026-09-04 01:35:05
(4 days ago)
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-03 18:53:09 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-03 18:54:17 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-03 19:10:29 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-03 19:24:20 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-03 19:35:03 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
🇺🇸
mnogoweb
2026-09-04 00:17:51
(4 days ago)
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-03 17:44:54 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-03 17:59:25 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data
2026-09-03 18:07:41 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-03 18:17:40 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-03 18:17:46 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
🇺🇸
mnogoweb
2026-09-02 12:02:08
(6 days ago)
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: ...
show more
(smtpauth) Failed SMTP AUTH login from 195.19.50.130 (RU/Russia/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SMTPAUTH; Logs: 2026-09-02 05:12:51 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-02 05:29:38 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-02 05:45:30 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-02 06:01:29 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
2026-09-02 06:02:02 login authenticator failed for (195.19.50.130) [195.19.50.130]: 535 Incorrect authentication data ([email protected] )
show less
Port Scan
🇮🇩
sockominfo
2026-09-02 09:00:53
(6 days ago)
Email: Login failures from Bad Reputation IP: 195.19.50.130. Threat Score: 6.2/10 (MEDIUM). Confiden ...
show more
Email: Login failures from Bad Reputation IP: 195.19.50.130. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 72%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack