🇺🇸
chronos
2026-01-23 21:53:49
UTC ·
(9 months ago)
[AUTORAVALT][[23/01/2026 - 18:53:48 -03:00 UTC]
Attack from [2a06:4882:d000::fa] Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, and phishing emails.
Hacking... Unauthorized attempt ...
show more
[AUTORAVALT][[23/01/2026 - 18:53:48 -03:00 UTC]
Attack from [2a06:4882:d000::fa] Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, and phishing emails.
Hacking... Unauthorized attempts to access the server.
Spoofing -> Email sender spoofing.
Brute-Force -> Credential brute-force attacks on webpa]
...
show less
Phishing
Email Spam
Hacking
Spoofing
Brute-Force
🇺🇸
chronos
2026-01-19 06:38:16
UTC ·
(9 months ago)
[AUTORAVALT][[19/01/2026 - 03:38:15 -03:00 UTC]
Attack from [2a06:4882:d000::fa] Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, and phishing emails.
Hacking... Unauthorized attempt ...
show more
[AUTORAVALT][[19/01/2026 - 03:38:15 -03:00 UTC]
Attack from [2a06:4882:d000::fa] Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, and phishing emails.
Hacking... Unauthorized attempts to access the server.
Spoofing -> Email sender spoofing.
Brute-Force -> Credential brute-force attacks on webpa]
...
show less
Phishing
Email Spam
Hacking
Spoofing
Brute-Force
🇨🇭
SOC [GOLINE SA]
2026-01-18 13:37:21
UTC ·
(9 months ago)
Suricata IDS Detection: 🐾 - 🚨 Suspicious 👀 HTTP trafic on unusual HTTP port
=== ATTACK DETAILS ===
Signature: 🐾 - 🚨 Suspicious 👀 HTTP trafic on unusual HTTP port
Signature ID: 3300303
Severity: 1
Category: Potential Corporate Privacy Violation
=== ...
show more
Suricata IDS Detection: 🐾 - 🚨 Suspicious 👀 HTTP trafic on unusual HTTP port
=== ATTACK DETAILS ===
Signature: 🐾 - 🚨 Suspicious 👀 HTTP trafic on unusual HTTP port
Signature ID: 3300303
Severity: 1
Category: Potential Corporate Privacy Violation
=== NETWORK INFO ===
Source IP: 2a06:4882:d000::fa (IPv6)
Source Port: 38793
Target: helpdesk.goline.ch (2a02:4460:0001:0001:0000:0000:0000:0006)
Target Port: 10000
Protocol: TCP
App Protocol: http
=== DETECTION ===
System: Suricata IDS
Time: 2026-01-18 14:37:19
Status: Banned by Fail2Ban
show less
Port Scan
Hacking
Bad Web Bot
🇨🇳
ThreatBook.io
2026-01-14 00:06:00
UTC ·
(9 months ago)
2026-01-13 21:43:19 /doc/script/lib/seajs/config/sea-config.js
2026-01-13 21:43:19 /doc/script/global_config.js
2026-01-13 21:43:18 /
2026-01-13 21:43:20 /doc/xml/version.xml
2026-01-13 21:43:20 /codebase/version.xml
Web App Attack
🇺🇸
chronos
2026-01-12 06:42:14
UTC ·
(10 months ago)
[AUTORAVALT][[12/01/2026 - 03:42:13 -03:00 UTC]
Attack from [2a06:4882:d000::fa] Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, and phishing emails.
Hacking... Unauthorized attempt ...
show more
[AUTORAVALT][[12/01/2026 - 03:42:13 -03:00 UTC]
Attack from [2a06:4882:d000::fa] Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, and phishing emails.
Hacking... Unauthorized attempts to access the server.
Spoofing -> Email sender spoofing.
Brute-Force -> Credential brute-force attacks on webpa]
...
show less
Phishing
Email Spam
Hacking
Spoofing
Brute-Force
🇺🇸
chronos
2026-01-05 06:39:41
UTC ·
(10 months ago)
[AUTORAVALT][[05/01/2026 - 03:39:41 -03:00 UTC]
Attack from [2a06:4882:d000::fa] Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, and phishing emails.
Hacking... Unauthorized attempt ...
show more
[AUTORAVALT][[05/01/2026 - 03:39:41 -03:00 UTC]
Attack from [2a06:4882:d000::fa] Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, and phishing emails.
Hacking... Unauthorized attempts to access the server.
Spoofing -> Email sender spoofing.
Brute-Force -> Credential brute-force attacks on webpa]
...
show less
Phishing
Email Spam
Hacking
Spoofing
Brute-Force
🇩🇪
403veli
2026-01-01 22:55:25
UTC ·
(10 months ago)
Confirmed malicious activity observed via T-Pot honeypot Observed 4 events on port 443 (unknown) from 2026-01-01T22:55:25+00:00 to 2026-01-01T22:55:25+00:00. Sample: {"src_ip": "2a06:4882:d000:0:0:0:0:fa", "src_port": 59855, "dest_port": 443}
Port Scan
🇩🇪
Honeypot-EU-Fru
2025-12-31 22:08:53
UTC ·
(10 months ago)
Dec 31 23:08:53 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=2a06:4882:d000::fa, lip=[redacted], TLS handshaking: SSL_accept() failed: error:141CF06C:SS
...
Email Spam
Brute-Force
🇯🇵
www.winos.me
2025-12-31 00:13:26
UTC ·
(10 months ago)
stream fail
Web App Attack
🇳🇱
i-turnradio.nl
2025-12-30 20:50:34
UTC ·
(10 months ago)
2025-12-30 @ 21:50:33 (CET) ~ Blocked based on risk assessment and prior abuse reports
Web App Attack
🇺🇸
chronos
2025-12-29 20:48:02
UTC ·
(10 months ago)
[AUTORAVALT][[29/12/2025 - 17:48:02 -03:00 UTC]
Attack from [2a06:4882:d000::fa] Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, and phishing emails.
Hacking... Unauthorized attempt ...
show more
[AUTORAVALT][[29/12/2025 - 17:48:02 -03:00 UTC]
Attack from [2a06:4882:d000::fa] Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, and phishing emails.
Hacking... Unauthorized attempts to access the server.
Spoofing -> Email sender spoofing.
Brute-Force -> Credential brute-force attacks on webpa]
...
show less
Phishing
Email Spam
Hacking
Spoofing
Brute-Force
🇫🇷
bgg
2025-12-29 08:02:03
UTC ·
(10 months ago)
Dec 29 09:02:03 nanopirate sshd[1862900]: refused connect from 2a06:4882:d000::fa (2a06:4882:d000::fa)
...
Brute-Force
SSH
🇺🇸
chronos
2025-12-29 06:36:00
UTC ·
(10 months ago)
[AUTORAVALT][[29/12/2025 - 03:35:59 -03:00 UTC]
Attack from [2a06:4882:d000::fa] Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, and phishing emails.
Hacking... Unauthorized attempt ...
show more
[AUTORAVALT][[29/12/2025 - 03:35:59 -03:00 UTC]
Attack from [2a06:4882:d000::fa] Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, and phishing emails.
Hacking... Unauthorized attempts to access the server.
Spoofing -> Email sender spoofing.
Brute-Force -> Credential brute-force attacks on webpa]
...
show less
Phishing
Email Spam
Hacking
Spoofing
Brute-Force
🇩🇪
Honeypot-EU-Fru
2025-12-23 01:00:48
UTC ·
(10 months ago)
Dec 23 02:00:47 [redacted] dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=2a06:4882:d000::fa, lip=[redacted], TLS handshaking: Connection closed, session=</a/5EpRGsc
...
Email Spam
Brute-Force
🇺🇸
chronos
2025-12-22 06:33:51
UTC ·
(10 months ago)
[AUTORAVALT][[22/12/2025 - 03:33:51 -03:00 UTC]
Attack from [2a06:4882:d000::fa] Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, and phishing emails.
Hacking... Unauthorized attempt ...
show more
[AUTORAVALT][[22/12/2025 - 03:33:51 -03:00 UTC]
Attack from [2a06:4882:d000::fa] Action: BLocKed
Phishing -> Phishing websites and/or email.
Email Spam -> Spam email content, infected attachments, and phishing emails.
Hacking... Unauthorized attempts to access the server.
Spoofing -> Email sender spoofing.
Brute-Force -> Credential brute-force attacks on webpa]
...
show less
Phishing
Email Spam
Hacking
Spoofing
Brute-Force
