🇫🇷
Duggy_Tuxy🧱
2026-06-23 00:32:31
(4 hours ago)
[HP02-SRV02-FR] Blocked by SysWarden Firewall (Traffic from Malicious Hoster (ASN))
Port Scan
🇫🇷
GabrielJST
2026-06-23 00:21:00
(5 hours ago)
*Port Scan* detected from 51.83.34.156 (FR/France/-).
Port Scan
🇨🇦
polycoda
2026-06-22 23:06:31
(6 hours ago)
📡 Port scan
Hacking
Web App Attack
🇺🇸
LotPhantom
2026-06-22 21:14:35
(8 hours ago)
2026-06-22T21:14:34.998192+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ...
show more
2026-06-22T21:14:34.998192+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=51.83.34.156 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=18629 DF PROTO=TCP SPT=43794 DPT=3000 WINDOW=64240 RES=0x00 SYN URGP=0
2026-06-22T21:14:35.002157+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=51.83.34.156 DST=157.230.217.55 LEN=60 TOS=0x00 PREC=0x00 TTL=47 ID=11388 DF PROTO=TCP SPT=58310 DPT=8501 WINDOW=64240 RES=0x00 SYN URGP=0
...
show less
Port Scan
Hacking
🇩🇪
phil2k
2026-06-21 06:27:47
(1 day ago)
fail2ban:firewall:2026-06-21T08:27:46.066639+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> ...
show more
fail2ban:firewall:2026-06-21T08:27:46.066639+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=51.83.34.156 DST=<PRIVATE_IPv4> LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=35625 DF PROTO=TCP SPT=44592 DPT=7860 WINDOW=64240 RES=0x00 SYN URGP=0
2026-06-21T08:27:46.066669+02:00 <SRV> firewall: filter IN=<ANONYMIZED_INTERFACE> OUT= MAC=<ANONYMIZED_MAC> SRC=51.83.34.156 DST=<PRIVATE_IPv4> LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=192 DF PROTO=TCP SPT=32806 DPT=5000 WINDOW=64240 RES=0x00 SYN URGP=0
show less
DDoS Attack
Port Scan
🇩🇪
ValtonTahiri
2026-06-21 04:19:44
(2 days ago)
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show more
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=51.83.34.156; proto=TCP; source_port=55450; target_port=8080; flags=SYN
show less
Port Scan
🇺🇸
TPI-Abuse
2023-11-16 18:02:44
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 51.83.34.156 (support.pytheos.com): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 51.83.34.156 (support.pytheos.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 16 13:02:41.748729 2023] [security2:error] [pid 31269] [client 51.83.34.156:42814] [client 51.83.34.156] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||superlamb.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "superlamb.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVZZQerXjh0CUz2arKJgOwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2023-11-16 13:07:00
(2 years ago)
Scanning/Probing (17)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2023-11-16 12:56:10
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 51.83.34.156 (support.pytheos.com): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 51.83.34.156 (support.pytheos.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 16 07:56:07.568650 2023] [security2:error] [pid 6649] [client 51.83.34.156:48478] [client 51.83.34.156] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.sbeii.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.sbeii.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVYRZ90XkBmJ6i9RKseTlwAAAAg"], referer: http://sbeii.org///wp-json/wp/v2/users/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2023-11-16 12:37:22
(2 years ago)
(mod_security) mod_security (id:225170) triggered by 51.83.34.156 (support.pytheos.com): 1 in the la ...
show more
(mod_security) mod_security (id:225170) triggered by 51.83.34.156 (support.pytheos.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 16 07:37:16.409415 2023] [security2:error] [pid 11771] [client 51.83.34.156:35486] [client 51.83.34.156] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||sentinel-sg.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "sentinel-sg.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZVYM_Pd4gNpe2v3sFHLVvgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack