๐ต๐ฑ
MatStef132
2026-10-18 02:30:38
(47 minutes ago)
MatShield L7: blocked on fivevault.net (sec-ch-ua-on-non-chromium)
DDoS Attack
๐ฉ๐ช
netclix.gr
2026-10-10 01:49:07
(1 week ago)
(old_win_chrome) Blocked old Windows Chrome 153.51.233.38 (VE/Venezuela/-)
Hacking
๐ต๐ฑ
bmino.pl
2026-10-08 21:56:21
(1 week ago)
Autoban IP(2): 153.51.233.38 - Hostname: CORPORACION FIBEX TELECOM, C.A. - City: Valencia - Country: ...
show more
Autoban IP(2): 153.51.233.38 - Hostname: CORPORACION FIBEX TELECOM, C.A. - City: Valencia - Country: Venezuela - Organization: Corporacion Fibex Telecom, C.A - Reason: GET /?n=urg32qjxiv27500woabnncsk HTTP/1.1
show less
Web App Attack
๐ฉ๐ช
Vegascosmetics
2026-10-05 03:05:07
(1 week ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 68>=65, Abuse 67, NonEU, first-seen)
show less
Hacking
Exploited Host
Web App Attack
๐จ๐ญ
backslash
2026-10-03 12:06:02
(2 weeks ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-09-30 12:18:37
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 153.51.233.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 153.51.233.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 08:18:29.238677 2026] [security2:error] [pid 29711:tid 29711] [client 153.51.233.38:56908] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||bodyworkbydallas.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "bodyworkbydallas.com"] [uri "/"] [unique_id "arz-FfaIjj63n4S_IzW7SQAAABE"], referer: https://qualitylink.site/dir/google-ranking-backlinks-26823
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-27 05:34:01
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 153.51.233.38 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 153.51.233.38 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 01:33:56.766445 2026] [security2:error] [pid 24998:tid 24998] [client 153.51.233.38:56112] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ronaldagrant.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ronaldagrant.com"] [uri "/"] [unique_id "ariqxMCFZ1ALL0XM8jdumgAAAAw"], referer: https://robbieburnsnight.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
๐น๐ท
SeczarSecureOps
2026-09-26 14:59:52
(3 weeks ago)
Seczar SecureOps โ SSH Brute Force (6 events) โ quarantined 43200m on DPYS_Master
SSH
Brute-Force
๐น๐ท
SeczarSecureOps
2026-09-26 11:37:53
(3 weeks ago)
Auto-blocked by Seczar SecureOps โ High-Risk Port Probe (admin-managed entries) โ SSH (6 events in 5 ...
show more
Auto-blocked by Seczar SecureOps โ High-Risk Port Probe (admin-managed entries) โ SSH (6 events in 5min) at 2026-09-26 11:37
show less
Hacking
2026-09-26 04:31:02
(3 weeks ago)
Sep 26 00:30:48 localhost kernel: [118742135.221860] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:9 ...
show more
Sep 26 00:30:48 localhost kernel: [118742135.221860] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=153.51.233.38 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=37 ID=49172 DF PROTO=TCP SPT=51614 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
Sep 26 00:30:48 localhost kernel: [118742135.221879] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=153.51.233.38 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=37 ID=49172 DF PROTO=TCP SPT=51614 DPT=23 SEQ=2408053582 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B40402080A00C13B5A0000000001030306)
Sep 26 00:31:02 localhost kernel: [118742149.476430] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08:00 SRC=153.51.233.38 DST=[mungedIP2] LEN=60 TOS=0x00 PREC=0x40 TTL=37 ID=39797 DF PROTO=TCP SPT=58674 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
Sep 26 00:31:02 localhost kernel: [118742149.476455] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:00:00:0c:9f:f0:1e:08
show less
Port Scan
๐ซ๐ท
security.rdmc.fr
2026-09-26 01:58:25
(3 weeks ago)
Port Scan Attack proto:TCP src:52614 dst:23
Port Scan
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-24 06:25:42
(3 weeks ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0
show less
Bad Web Bot
๐บ๐ธ
้ฌผๅฝฑ233
2026-09-21 22:08:53
(3 weeks ago)
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Sa ...
show more
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
show less
Bad Web Bot
๐น๐ญ
Sawasdee
2026-09-16 09:12:13
(1 month ago)
SSH break in attempt
...
SSH
๐ณ๐ฑ
EGP Abuse Dept
2026-09-16 08:53:00
(1 month ago)
Unauthorized connection to Telnet port 23
Port Scan
Hacking
