Total reports
4 from
4 distinct
reporters
First reported
September 14th 2026
Most recent report
47 minutes ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
2
🇭🇺
Hungary
1
🇵🇱
Poland
1
Most common categories
Brute-Force
4
SSH
2
Hacking
1
Web App Attack
1
Port Scan
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-11-12 07:57:21
UTC ·
(47 minutes ago)
WEB attack
Brute-Force
🇺🇸
TPI-Abuse
2026-11-01 01:53:26
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 95.59.34.107 (95.59.34.107.dynamic.telecom.kz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 21:53:22.442882 2026] [security2:error] [pid 6610:tid 6610] [cl ...
show more
(mod_security) mod_security (id:210350) triggered by 95.59.34.107 (95.59.34.107.dynamic.telecom.kz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 21:53:22.442882 2026] [security2:error] [pid 6610:tid 6610] [client 95.59.34.107:41130] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||carolynedds.com|F|4"] [data "close, keep-alive"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "carolynedds.com"] [uri "/cpanel"] [unique_id "auabkuZcOCBR7DGvUlAczQAAABI"], referer: https://carolynedds.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
Silu
2026-09-16 19:22:11
UTC ·
(1 month ago)
ssh attack
Brute-Force
SSH
🇺🇸
pablo
2026-09-14 20:00:08
UTC ·
(1 month ago)
SSH honeypot (Cowrie) recorded 14 events over 1m. Activity: SSH connection to honeypot; SSH credential brute-force; automated SSH client (scanner banner); post-auth command execution; root credential accepted. Usernames tried: root. Passwords tried: ...
show more
SSH honeypot (Cowrie) recorded 14 events over 1m. Activity: SSH connection to honeypot; SSH credential brute-force; automated SSH client (scanner banner); post-auth command execution; root credential accepted. Usernames tried: root. Passwords tried: ---fuck_you----, 123456, 12345678, root. Commands: uname -s -m Wazuh rules: 100100,100101,100103,100106,100117.
show less
Port Scan
Hacking
Brute-Force
SSH
