78.39.253.48
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- bimarestane emamreza ravansar
- Usage Type
- Fixed Line ISP
- ASN
- AS58224
- Domain Name
- tci.ir
- Country
- 🇮🇷 Iran (Islamic Republic of)
- City
- Ravansar, Kermanshah Province
Abuse Reports
Total reports
22 from
14 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇷🇴 clauss |
IP reached maximum auth failures for a one day block
|
Brute-Force | |
| 🇹🇼 tyetriiix |
Wazuh Alert Evidence: 2026/11/05 10:58:44 [error] 2825320#2825320: *9078 access forbidden by rule, client: 78.39.253.48, server: localhost, request: "GET / HTTP/1.1", host: "node.triiix.io"
|
Web App Attack | |
| 🇦🇺 FireGuard Server |
Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=143
|
Port Scan Hacking | |
| 🇳🇱 GES |
Credential scanning on player_api.php (5 distinct logins in 120s). Auto-blocked by XUI Shield.
|
DDoS Attack Port Scan | |
| 🇵🇱 MatStef132 |
MatShield L7: blocked on a protected site (ua-quarantined)
|
Bad Web Bot | |
| 🇳🇱 ZANET.BABY |
Automated L7 DDoS against HTTPS port 443; 30 HTTP 429 responses observed within 10 seconds; source blocked at ingress. Incident 20261021T131706Z.
|
DDoS Attack Bad Web Bot | |
| 🇩🇪 Packets-Decreaser.NET |
Incoming Layer 7 Flood Detected
|
DDoS Attack Web App Attack | |
| 🇩🇪 Packets-Decreaser.NET |
Incoming Layer 7 Flood Detected
|
DDoS Attack Web App Attack | |
| 🇩🇪 Packets-Decreaser.NET |
Incoming Layer 7 Flood Detected
|
DDoS Attack Web Spam | |
| 🇩🇪 edgeshield |
Automated web request flooding / DDoS (EdgeShield WAF).
|
DDoS Attack | |
| 🇩🇪 Packets-Decreaser.NET |
Incoming Layer 7 Flood Detected
|
DDoS Attack Web Spam | |
| 🇩🇪 Packets-Decreaser.NET |
Incoming Layer 7 Flood Detected
|
DDoS Attack Web Spam | |
| 🇩🇪 edgeshield |
Automated web request flooding / DDoS (EdgeShield WAF).
|
DDoS Attack | |
| 🇳🇱 glideradmin |
HTTP GET flood (application-layer DDoS) against 109.71.245.12:443, 873 requests in ~70 min
|
DDoS Attack | |
| 🇵🇱 MatStef132 |
MatShield L7: blocked on test-clean.mathost.eu (ua-quarantined)
|
Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown