🇩🇪
LRob
2026-10-15 00:14:43
(2 days ago)
Calendar filter flood (L7 DDoS) | host: escrime-auvergnerhonealpes.fr | path: /calendrier-2/action~a ...
show more
Calendar filter flood (L7 DDoS) | host: escrime-auvergnerhonealpes.fr | path: /calendrier-2/action~agenda/time_limit~1763247600/cat_ids~661/tag_ids~221,832,580,403,634,444,401,636,219,746,620/request_format | src_port: 17980
show less
DDoS Attack
Web App Attack
2026-10-13 13:04:17
(4 days ago)
IP & Port Scan.
SSH
Port Scan
Brute-Force
🇷🇺
Darth Vader
2026-10-13 10:05:19
(4 days ago)
nfdump top talker: 179.64.79.219 | first seen 2026-10-13 13:05:19.232 | duration 00:00:00.045 | flow ...
show more
nfdump top talker: 179.64.79.219 | first seen 2026-10-13 13:05:19.232 | duration 00:00:00.045 | flows=1 | packets=20460 | bytes=15.8 M | pps=451 | bps=2.8 M | bpp=773 | proto=udp
show less
DDoS Attack
Port Scan
Exploited Host
🇫🇷
security.rdmc.fr
2026-10-13 09:18:09
(4 days ago)
Port Scan Attack proto:TCP src:56568 dst:23
Port Scan
🇳🇱
EGP Abuse Dept
2026-10-13 04:26:48
(4 days ago)
Unauthorized connection to Telnet port 23
Port Scan
Hacking
2026-10-12 17:26:07
(5 days ago)
Unauthorized connection to Telnet port 23
Port Scan
🇹🇷
oalver
2026-10-12 11:53:24
(5 days ago)
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_telnet. ...
show more
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_telnet. Sources: honeypot. First seen: 2026-10-12. Risk score: 100/100.
show less
Brute-Force
IoT Targeted
2026-10-11 23:06:17
(6 days ago)
denied traffic to a honeypot network. destination port 23.
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-09-30 10:38:22
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 179.64.79.219 (customer.dkrrsen1.isp.starlink.c ...
show more
(mod_security) mod_security (id:210350) triggered by 179.64.79.219 (customer.dkrrsen1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 06:38:16.534628 2026] [security2:error] [pid 19824:tid 19824] [client 179.64.79.219:16834] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||saldesica.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "saldesica.com"] [uri "/"] [unique_id "arzmmF7cuavaYIKTiQetiwAAACg"], referer: https://linkbuildingconsultancy.store/dir/editorial-link-building-181460
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-26 13:32:12
(3 weeks ago)
suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan
Port Scan
🇮🇹
Inartis
2026-09-24 00:27:34
(3 weeks ago)
2026-09-24T02:27:33.540963mail1.inartis.it postfix/smtpd[3776489]: warning: unknown[179.64.79.219]: ...
show more
2026-09-24T02:27:33.540963mail1.inartis.it postfix/smtpd[3776489]: warning: unknown[179.64.79.219]: SASL PLAIN authentication failed: authentication failure, [email protected]
...
show less
Port Scan
Brute-Force
🇺🇸
TPI-Abuse
2026-09-17 12:24:06
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 179.64.79.219 (customer.dkrrsen1.isp.starlink.c ...
show more
(mod_security) mod_security (id:210730) triggered by 179.64.79.219 (customer.dkrrsen1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 08:24:03.792891 2026] [security2:error] [pid 29122:tid 29122] [client 179.64.79.219:9011] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jnpmarinesolutions.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jnpmarinesolutions.com"] [uri "/production/dev.sql"] [unique_id "aqvb43vfcCHxjOKjGtD0EgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 13:54:08
(1 month ago)
(mod_security) mod_security (id:210350) triggered by 179.64.79.219 (customer.dkrrsen1.isp.starlink.c ...
show more
(mod_security) mod_security (id:210350) triggered by 179.64.79.219 (customer.dkrrsen1.isp.starlink.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:54:02.581441 2026] [security2:error] [pid 15414:tid 15436] [client 179.64.79.219:52301] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||2020comeback.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "2020comeback.com"] [uri "/"] [unique_id "aqqfekhCLAMrXHKLH_biggAAANQ"], referer: https://accrediteddegree.org/
show less
Brute-Force
Bad Web Bot
Web App Attack
