Hello Abuse-Team, your Server/Customer with the IP: *162.35.224.196* (496808.vm.spacecore.network) has attacked one of our servers/partners. The attackers used the method/service: *badbot* on: *Sun, 18 Oct 2026 06:53:36 +0200*. The time listed is from the server-time of the Blocklist-user who submitted the report. The attack was reported to the Blocklist.de-System on: *Sun, 18 Oct 2026 06:53:38 +0200* !!! Do not answer to this Mail! Use support@ or contact-form for Questions (no resolve-messages, no updates....) !!! The IP has been automatically blocked for a period of time. For an IP to be blocked, it needs to have made several failed logins (ssh, imap....), tried to log in for an "invalid user", or have triggered several 5xx-Error-Codes (eg. Blacklist on email...), all during a short period of time. The Server-Owner configures the number of failed attempts, and the time period they have to occur in, in order to trigger a ban and report. Blocklist has no control over these settings. The IP has send a SPAM-Comment on a Honeypot-Forum or Honeypot-Wiki with URLs to e.g. buy viagra or link to other spamvertised sites. He used xrumer or other Tools or had a false configured mod_rewrite/mod_proxy who is abused: http://blog.blocklist.de/2011/03/14/erlauterung-der-einzelnen-dienste-badbots-apacheddos-postfix/#badbots If the IP is a Tor-Server: https://blog.blocklist.de/tor-server-owner/
