Ga naar de hoofdnavigatie Ga naar de hoofdinhoud Ga naar de voettekst van de pagina
fail2ban banned IP addresses; Hostname=server
unban#removeidIPjailcountryrdnsloglinestimestampportsprotocolhostnamefailures
39960039960186.90.230.21postfix-saslVE, Venezuela186-90-230-21-bto-03-p71.cantv.net2026-02-16T22:25:04.335803+01:00 server postfix/smtps/smtpd[3345504]: warning: unknown[186.90.230.21]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=theo@langstraatonline.nl2026-02-16 21:25:06smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39959039959102.164.35.116postfix-saslNG, Nigeria2026-02-16T22:24:50.300839+01:00 server postfix/smtps/smtpd[3345469]: warning: unknown[102.164.35.116]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=theo@langstraatonline.nl2026-02-16 21:24:54smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39958039958197.219.228.250postfix-saslMZ, Mozambique2026-02-16T20:24:43.420654+01:00 server postfix/smtps/smtpd[3334701]: warning: unknown[197.219.228.250]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=theo@langstraatonline.nl2026-02-16 19:24:44smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
3995703995765.20.216.225postfix-saslIQ, Iraq2026-02-16T20:24:27.281734+01:00 server postfix/smtps/smtpd[3334662]: warning: unknown[65.20.216.225]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=theo@langstraatonline.nl2026-02-16 19:24:29smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39956039956185.177.72.22apache-authGB, United Kingdom[Mon Feb 16 18:43:20.802308 2026] [authz_core:error] [pid 3067155:tid 3067182] [client 185.177.72.22:53254] AH01630: client denied by server configuration: /usr/share/postfixadmin/public/.htaccess2026-02-16 17:43:24http,httpstcpserver1
39955039955196.188.113.112postfix-saslET, Ethiopia2026-02-16T18:17:07.092159+01:00 server postfix/submission/smtpd[3322441]: warning: unknown[196.188.113.112]: SASL PLAIN authentication failed: (reason unavailable), sasl_username=theo@langstraatonline.nl2026-02-16 17:17:09smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39954039954194.237.70.176postfix-saslSE, Sweden2026-02-16T16:12:31.334261+01:00 server postfix/smtps/smtpd[3313326]: warning: unknown[194.237.70.176]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=postmaster@langstraatonline.nl2026-02-16 15:12:33smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39953039953112.28.73.142postfix-saslCN, China2026-02-16T16:12:16.107619+01:00 server postfix/smtps/smtpd[3313326]: warning: unknown[112.28.73.142]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=postmaster@langstraatonline.nl2026-02-16 15:12:18smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39952039952182.95.58.62postfix-saslIN, India2026-02-16T14:41:06.467399+01:00 server postfix/smtps/smtpd[3257255]: warning: unknown[182.95.58.62]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=postmaster@langstraatonline.nl2026-02-16 13:41:15smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39951039951186.215.204.109postfix-saslBR, Brazilucicinemas.static.gvt.net.br2026-02-16T14:40:45.042361+01:00 server postfix/smtps/smtpd[3257218]: warning: unknown[186.215.204.109]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=postmaster@langstraatonline.nl2026-02-16 13:41:05smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39950039950103.243.54.25postfix-saslIN, India2026-02-16T11:17:14.386769+01:00 server postfix/smtps/smtpd[3098314]: warning: unknown[103.243.54.25]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=postmaster@langstraatonline.nl2026-02-16 10:17:15smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39949039949194.237.70.164postfix-saslSE, Sweden2026-02-16T11:17:05.050112+01:00 server postfix/smtps/smtpd[3098270]: warning: unknown[194.237.70.164]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=postmaster@langstraatonline.nl2026-02-16 10:17:05smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39948039948103.166.226.235postfix-saslID, Indonesia2026-02-16T11:15:12.143858+01:00 server postfix/smtps/smtpd[3098010]: warning: unknown[103.166.226.235]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=theo@langstraatonline.nl2026-02-16 10:15:12smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
3994703994737.208.156.50postfix-saslQA, Qatar2026-02-16T11:14:58.191495+01:00 server postfix/smtps/smtpd[3098154]: warning: unknown[37.208.156.50]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=theo@langstraatonline.nl2026-02-16 10:14:58smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39946039946128.185.235.110postfix-saslIN, India2026-02-16T11:10:08.053221+01:00 server postfix/smtps/smtpd[3098066]: warning: unknown[128.185.235.110]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=theo@langstraatonline.nl2026-02-16 10:10:09smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39945039945195.142.106.177postfix-saslTR, Turkey195-142-106-177.rdns.saglayici.net2026-02-16T11:09:51.233847+01:00 server postfix/smtps/smtpd[3098010]: warning: unknown[195.142.106.177]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=theo@langstraatonline.nl2026-02-16 10:09:53smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39944039944221.2.137.3postfix-saslCN, China2026-02-16T07:05:48.425276+01:00 server postfix/smtps/smtpd[3092187]: warning: unknown[221.2.137.3]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=postmaster@langstraatonline.nl2026-02-16 06:05:49smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
3994303994374.196.184.78postfix-saslUS, United States2026-02-16T07:05:33.138587+01:00 server postfix/smtps/smtpd[3092145]: warning: unknown[74.196.184.78]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=postmaster@langstraatonline.nl2026-02-16 06:05:34smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39942039942180.94.74.122postfix-saslAF, Afghanistan2026-02-16T05:46:25.424104+01:00 server postfix/smtps/smtpd[3090170]: warning: unknown[180.94.74.122]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=theo@langstraatonline.nl2026-02-16 04:46:26smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
3994103994162.220.236.203postfix-saslFI, Finland2026-02-16T05:46:13.455937+01:00 server postfix/smtps/smtpd[3090130]: warning: unknown[62.220.236.203]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=theo@langstraatonline.nl2026-02-16 04:46:14smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
3994003994060.172.41.103postfix-saslCN, China2026-02-16T05:34:49.451216+01:00 server postfix/smtps/smtpd[3089711]: warning: unknown[60.172.41.103]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=theo@langstraatonline.nl2026-02-16 04:34:50smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39939039939128.185.187.2postfix-saslIN, India2026-02-16T05:34:35.138929+01:00 server postfix/smtps/smtpd[3089713]: warning: unknown[128.185.187.2]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=theo@langstraatonline.nl2026-02-16 04:34:36smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
3993803993858.222.72.182postfix-saslCN, China2026-02-16T01:26:02.191899+01:00 server postfix/smtps/smtpd[3083354]: warning: unknown[58.222.72.182]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=theo@langstraatonline.nl2026-02-16 00:26:03smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39937039937218.15.224.102postfix-saslCN, China2026-02-16T01:25:38.152432+01:00 server postfix/smtps/smtpd[3083278]: warning: unknown[218.15.224.102]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=theo@langstraatonline.nl2026-02-16 00:25:42smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39936039936149.54.62.166postfix-saslAF, Afghanistan2026-02-16T00:06:18.149842+01:00 server postfix/smtps/smtpd[2967866]: warning: unknown[149.54.62.166]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=theo@langstraatonline.nl2026-02-15 23:06:19smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39935039935103.186.114.73postfix-saslPK, Pakistan2026-02-16T00:05:48.237189+01:00 server postfix/smtps/smtpd[2967824]: warning: unknown[103.186.114.73]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=theo@langstraatonline.nl2026-02-15 23:05:49smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
39926039926185.177.72.52apache-authGB, United Kingdom[Sat Feb 14 23:12:27.187417 2026] [authz_core:error] [pid 2803128:tid 2803214] [client 185.177.72.52:34304] AH01630: client denied by server configuration: /var/www/mail/.htaccess2026-02-14 22:12:27http,httpstcpserver1
3990003990045.148.10.238apache-authNL, Netherlands[Thu Feb 12 15:49:52.383605 2026] [authz_core:error] [pid 2445808:tid 2445896] [client 45.148.10.238:38098] AH01630: client denied by server configuration: /var/www/html/v13/.git2026-02-12 14:49:56http,httpstcpserver1
3989703989791.92.240.214postfix-saslBG, Bulgaria2026-02-11T21:45:36.078596+01:00 server postfix/smtps/smtpd[2328363]: warning: unknown[91.92.240.214]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=admin@langstraatonline.nl2026-02-11 20:45:36smtp,465,submission,imap,imaps,pop3,pop3stcpserver1
3985203985294.102.49.155apache-authNL, Netherlandsno-reverse-dns-configured.com[Sun Feb 08 08:25:58.719214 2026] [authz_core:error] [pid 1816923:tid 1816997] [client 94.102.49.155:49572] AH01630: client denied by server configuration: /var/www/Pure-FTPd/server-status2026-02-08 07:26:00http,httpstcpserver1
3956703956745.91.64.6apache-authES, Spain[Tue Jan 27 07:48:31.606595 2026] [authz_core:error] [pid 163632:tid 163707] [client 45.91.64.6:50950] AH01630: client denied by server configuration: /var/www/Pure-FTPd/server-status2026-01-27 06:48:32http,httpstcpserver1

Analyse

Na drie dagen 399 sshd aanvallen geregistreerd. Reden om hier een ander poort nummer voor in te stellen. Port 22 is blijkbaar erg geliefd onder hackers. Opvallend, United States met 94 op nummer één en China met 86 op nummer twee maken samen bijna de helft van de aanvallen uit. Rusland komt op de 8st plaats met 14 aanvallen.

Apache en Dovecot aanvallen werden "slechts" 16 respectievelijk 9 keer geregistreerd in deze periode.