|
🇨🇴
juan_mesa
|
|
Unauthorized connection attempts to SSH TCP/2222 on 1 MikroTik router(s) (blocked by firewall).
|
Port Scan
SSH
|
|
Anonymous
|
|
denied traffic to a non-approved destination port. destination port 2222.
|
Port Scan
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 59.93.94.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 20:59:28.422247 2026] [security2:error] [pid 3108216:tid 3108242] [client 59.93.94.59:52697] M ...
show more
(mod_security) mod_security (id:240335) triggered by 59.93.94.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 20:59:28.422247 2026] [security2:error] [pid 3108216:tid 3108242] [client 59.93.94.59:52697] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 59.93.94.59 (+1 hits since last alert)|lamcohomecare.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "lamcohomecare.com"] [uri "/xmlrpc.php"] [unique_id "an5ocMUFUuQPrI86Bnnn3gAAAJg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 59.93.94.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 19:25:03.950396 2026] [security2:error] [pid 1918909:tid 1918909] [client 59.93.94.59:60444] M ...
show more
(mod_security) mod_security (id:240335) triggered by 59.93.94.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 19:25:03.950396 2026] [security2:error] [pid 1918909:tid 1918909] [client 59.93.94.59:60444] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 59.93.94.59 (+1 hits since last alert)|airdriedrivingschool.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "airdriedrivingschool.com"] [uri "/xmlrpc.php"] [unique_id "an5ST8qqSekabMcwyy0uAQAAAAg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇬🇧
PeravixGroup
|
|
Imunify360 WAF block (graylisted)
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 59.93.94.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 09:18:48.908999 2026] [security2:error] [pid 17418:tid 17418] [client 59.93.94.59:61543] ModSe ...
show more
(mod_security) mod_security (id:240335) triggered by 59.93.94.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 13 09:18:48.908999 2026] [security2:error] [pid 17418:tid 17418] [client 59.93.94.59:61543] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 59.93.94.59 (+1 hits since last alert)|market1st.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "market1st.com"] [uri "/xmlrpc.php"] [unique_id "an3EOFCJ2fCj9bAQh3EibgAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇲🇾
Rizzy
|
|
Multiple WAF Violations
|
Brute-Force
Web App Attack
|
|
🇩🇪
ghostwarriors
|
|
Webpage scraping
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
FD-IX
|
|
Fail2Ban: WordPress XML-RPC brute-force attack detected.
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
grassau.com
|
|
(wordpress) Failed wordpress login from 59.93.94.59 (IN/India/Telangana/Hyderabad/-)
|
Brute-Force
|
|
🇫🇷
security.rdmc.fr
|
|
Port Scan Attack proto:TCP src:56585 dst:23
|
Port Scan
|
|
🇺🇸
WhiteFireOCN1
|
|
8 unauthorized connection attempts to port 23
TCP/23 - 59[.]93[.]94[.]59:44629 - 2024-08-21T14:05:43
TCP/23 - 59[.]93[.]94[.]59:44709 - 2024-08-21T14:05:46
TCP/23 - 59[.]93[.]94[.]59:44755 - 2024-08-21T14:05:50
TCP/23 - 59[.]93[.]94[.]59:44799 - 2024 ...
show more
8 unauthorized connection attempts to port 23
TCP/23 - 59[.]93[.]94[.]59:44629 - 2024-08-21T14:05:43
TCP/23 - 59[.]93[.]94[.]59:44709 - 2024-08-21T14:05:46
TCP/23 - 59[.]93[.]94[.]59:44755 - 2024-08-21T14:05:50
TCP/23 - 59[.]93[.]94[.]59:44799 - 2024-08-21T14:05:54
TCP/23 - 59[.]93[.]94[.]59:44872 - 2024-08-21T14:05:58
TCP/23 - 59[.]93[.]94[.]59:44934 - 2024-08-21T14:06:02
TCP/23 - 59[.]93[.]94[.]59:45010 - 2024-08-21T14:06:07
TCP/23 - 59[.]93[.]94[.]59:45069 - 2024-08-21T14:06:10
show less
|
Port Scan
Hacking
Brute-Force
|
