🇺🇸
TPI-Abuse
2026-07-26 05:14:27
(18 hours ago)
(mod_security) mod_security (id:240335) triggered by 59.93.3.6 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:240335) triggered by 59.93.3.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 01:14:22.605759 2026] [security2:error] [pid 2241349:tid 2241365] [client 59.93.3.6:53056] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 59.93.3.6 (+1 hits since last alert)|mtiminis.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "mtiminis.com"] [uri "/xmlrpc.php"] [unique_id "amWXrqsMayi9AH6q_CcN-gAAAEk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-07-26 00:28:45
(23 hours ago)
IM360 WAF: Rate limit exceeded for XMLRPC DoS (fault code)
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 23:42:49
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 59.93.3.6 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:240335) triggered by 59.93.3.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 19:42:42.077042 2026] [security2:error] [pid 1087718:tid 1087718] [client 59.93.3.6:53314] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 59.93.3.6 (+1 hits since last alert)|vrevgaming.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "vrevgaming.net"] [uri "/xmlrpc.php"] [unique_id "amVJ8luc36eHktnpt3vjrgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-25 23:39:29
(1 day ago)
Fail2Ban - Wordpress brute-force
...
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 21:41:41
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 59.93.3.6 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:240335) triggered by 59.93.3.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 17:41:35.085933 2026] [security2:error] [pid 24177:tid 24177] [client 59.93.3.6:65237] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 59.93.3.6 (+1 hits since last alert)|firebelly.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "firebelly.org"] [uri "/xmlrpc.php"] [unique_id "amUtj-mMhD7V87SOgwf-pQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 19:59:18
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 59.93.3.6 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:240335) triggered by 59.93.3.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 15:59:14.697257 2026] [security2:error] [pid 2096499:tid 2096499] [client 59.93.3.6:54884] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 59.93.3.6 (+1 hits since last alert)|clockandnightlight.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "clockandnightlight.com"] [uri "/xmlrpc.php"] [unique_id "amUVkpr8SqQGijmhMyOY7wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-25 19:34:20
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 59.93.3.6 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:240335) triggered by 59.93.3.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 15:34:14.377737 2026] [security2:error] [pid 1609346:tid 1609346] [client 59.93.3.6:53460] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 59.93.3.6 (+1 hits since last alert)|ralphharris.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ralphharris.org"] [uri "/xmlrpc.php"] [unique_id "amUPtkXqebaHnq0NaPUs_gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-25 18:00:55
(1 day ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-07-25 16:29:50
(1 day ago)
(xmlrpc) Apache: Failed xmlrpc access from 59.93.3.6 (IN/India/-): 10 in the last 3600 secs (0-201)
Hacking
🇺🇸
TPI-Abuse
2026-07-25 16:24:23
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 59.93.3.6 (-): 1 in the last 300 secs; Ports: * ...
show more
(mod_security) mod_security (id:240335) triggered by 59.93.3.6 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 12:24:15.082568 2026] [security2:error] [pid 1114116:tid 1114116] [client 59.93.3.6:64169] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 59.93.3.6 (+1 hits since last alert)|darkalleyproductions.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "darkalleyproductions.com"] [uri "/xmlrpc.php"] [unique_id "amTjLwY4LjhFo-skQK0pYAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-07-25 15:08:33
(1 day ago)
(xmlrpc_405) XMLRPC-Bot 405 59.93.3.6 (IN/India/-)
Hacking
🇩🇪
ghostwarriors
2026-07-25 12:50:12
(1 day ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
2026-07-25 12:22:30
(1 day ago)
Fail2Ban: WordPress XML-RPC brute-force attack detected.
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-07-25 12:06:02
(1 day ago)
(xmlrpc) Failed xmlrpc access from 59.93.3.6 (IN/India/-): 5 in the last 3600 secs (0-122)
Hacking
🇦🇺
screwlooseit.com.au
2026-07-25 10:50:17
(1 day ago)
Blocked by CSF 13 firewall - Rule: XMLRPC
IN/India/-
Web App Attack