๐บ๐ธ
TPI-Abuse
2026-07-21 09:38:07
(7 hours ago)
(mod_security) mod_security (id:240335) triggered by 59.95.212.201 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 59.95.212.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 05:38:00.783336 2026] [security2:error] [pid 26266:tid 26266] [client 59.95.212.201:55313] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 59.95.212.201 (+1 hits since last alert)|avvmarchetticollini.it|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "avvmarchetticollini.it"] [uri "/xmlrpc.php"] [unique_id "al89-PmjVJXw8BXuILpABQAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-21 09:22:13
(7 hours ago)
[redacted] 59.95.212.201 - - [21/Jul/2026:11:21:31 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "W ...
show more
[redacted] 59.95.212.201 - - [21/Jul/2026:11:21:31 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com"
[redacted] 59.95.212.201 - - [21/Jul/2026:11:21:40 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com"
[redacted] 59.95.212.201 - - [21/Jul/2026:11:21:50 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com"
[redacted] 59.95.212.201 - - [21/Jul/2026:11:22:01 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com"
[redacted] 59.95.212.201 - - [21/Jul/2026:11:22:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)"
...
show less
Hacking
Web App Attack
Anonymous
2026-07-21 08:24:08
(8 hours ago)
(wordpress) Failed wordpress login from 59.95.212.201 (IN/India/Gujarat/Anand/-/[redacted])
Brute-Force
๐บ๐ธ
integrantservices.com
2026-07-21 08:20:52
(8 hours ago)
(wordpress) Failed wordpress login from 59.95.212.201 (IN/India/-)
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-07-21 06:14:05
(11 hours ago)
(mod_security) mod_security (id:240335) triggered by 59.95.212.201 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 59.95.212.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 02:13:57.125045 2026] [security2:error] [pid 6339:tid 6339] [client 59.95.212.201:55776] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 59.95.212.201 (+1 hits since last alert)|csm-dtc.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "csm-dtc.com"] [uri "/xmlrpc.php"] [unique_id "al8OJY782M1f1WFONKHuRAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-20 13:24:16
(1 day ago)
[redacted] 59.95.212.201 - - [20/Jul/2026:15:23:34 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "J ...
show more
[redacted] 59.95.212.201 - - [20/Jul/2026:15:23:34 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack/12.5; WordPress/6.3; http://site63408626.com"
[redacted] 59.95.212.201 - - [20/Jul/2026:15:23:44 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com"
[redacted] 59.95.212.201 - - [20/Jul/2026:15:23:55 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "WordPress.com; https://wordpress.com"
[redacted] 59.95.212.201 - - [20/Jul/2026:15:24:05 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com"
[redacted] 59.95.212.201 - - [20/Jul/2026:15:24:16 +0200] "POST /xmlrpc.php HTTP/1.1" 405 415 "-" "Jetpack by WordPress.com"
...
show less
Hacking
Web App Attack
๐ซ๐ท
dynamix
2026-07-20 13:23:55
(1 day ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-20 11:51:44
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 59.95.212.201 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 59.95.212.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 07:51:39.104789 2026] [security2:error] [pid 15889:tid 15889] [client 59.95.212.201:62291] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 59.95.212.201 (+1 hits since last alert)|rambleandprose.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rambleandprose.com"] [uri "/xmlrpc.php"] [unique_id "al4Ly9CLs3MbEM-D6z1TLQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-20 10:06:44
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 59.95.212.201 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 59.95.212.201 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 06:06:39.708388 2026] [security2:error] [pid 1392428:tid 1392428] [client 59.95.212.201:60660] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 59.95.212.201 (+1 hits since last alert)|superlamb.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "superlamb.com"] [uri "/xmlrpc.php"] [unique_id "al3zL0MPNbrSxzFhRmbm5AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฟ๐ฆ
IrisFlower
2023-05-23 23:33:22
(3 years ago)
Unauthorized connection attempt detected from IP address 59.95.212.201 to port 23 [J]
Port Scan
Hacking
๐ฟ๐ฆ
IrisFlower
2023-05-23 22:18:14
(3 years ago)
Unauthorized connection attempt detected from IP address 59.95.212.201 to port 23 [J]
Port Scan
Hacking
๐ฟ๐ฆ
IrisFlower
2023-05-23 20:59:23
(3 years ago)
Unauthorized connection attempt detected from IP address 59.95.212.201 to port 23 [J]
Port Scan
Hacking
๐ฟ๐ฆ
IrisFlower
2023-05-23 20:11:37
(3 years ago)
Unauthorized connection attempt detected from IP address 59.95.212.201 to port 23 [J]
Port Scan
Hacking
๐ฟ๐ฆ
IrisFlower
2023-05-23 19:58:31
(3 years ago)
Unauthorized connection attempt detected from IP address 59.95.212.201 to port 23 [J]
Port Scan
Hacking
๐ฉ๐ช
ps-center
2023-05-23 19:17:44
(3 years ago)
DIS-W: TCP-Scanner. Port: 23
Port Scan