JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 94.59.163.134

94.59.163.134 was found in our database!

This IP was reported 11 times. Confidence of Abuse is 43%: ?

43%

ISP	Emirates Telecommunications Corporation
Usage Type	Fixed Line ISP
ASN	AS5384
Hostname(s)	bba-94-59-163-134.alshamil.net.ae
Domain Name	etisalat.ae
Country	🇦🇪 United Arab Emirates
City	Abu Dhabi, Abu Dhabi

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 94.59.163.134

Whois 94.59.163.134

IP Abuse Reports for 94.59.163.134:

This IP address has been reported a total of 11 times from 7 distinct sources. 94.59.163.134 was first reported on July 6th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 tmiland	2026-07-23 12:35:12 (1 day ago)	(wordpress_xmlrpc) WordPress XMLPRC Attack 94.59.163.134 (AE/United Arab Emirates/bba-94-59-163-134. ... show more (wordpress_xmlrpc) WordPress XMLPRC Attack 94.59.163.134 (AE/United Arab Emirates/bba-94-59-163-134.alshamil.net.ae): 3 in the last 3600 secs; IP: 94.59.163.134; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 94.59.163.134 - - [23/Jul/2026:14:34:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "WordPress.com; https://wordpress.com" 94.59.163.134 - - [23/Jul/2026:14:34:55 +0200] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack/12.0; WordPress/6.1; http://site35589807.com" 94.59.163.134 - - [23/Jul/2026:14:35:10 +0200] "POST /xmlrpc.php HTTP/1.1" 200 415 "-" "Jetpack by WordPress.com" show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-23 10:39:32 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 94.59.163.134 (bba-94-59-163-134.alshamil.net.a ... show more (mod_security) mod_security (id:240335) triggered by 94.59.163.134 (bba-94-59-163-134.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 06:39:26.173074 2026] [security2:error] [pid 2669233:tid 2669233] [client 94.59.163.134:61276] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 94.59.163.134 (+1 hits since last alert)\|exhaustthelimits.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "exhaustthelimits.org"] [uri "/xmlrpc.php"] [unique_id "amHvXlQZwpeQ31giUYNEiQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-07-23 09:49:38 (1 day ago)	WordPress XMLRPC Brute Force Attack	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-22 10:21:18 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 94.59.163.134 (bba-94-59-163-134.alshamil.net.a ... show more (mod_security) mod_security (id:240335) triggered by 94.59.163.134 (bba-94-59-163-134.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 06:21:13.602374 2026] [security2:error] [pid 15041:tid 15053] [client 94.59.163.134:65228] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 94.59.163.134 (+1 hits since last alert)\|iamfluff.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "iamfluff.com"] [uri "/xmlrpc.php"] [unique_id "amCZmQNn1fN-uRtmzz_CUAAAAEo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 giulio gorobey	2026-07-21 17:18:04 (3 days ago)	[Drupal AbuseIPDB module] Request path is blacklisted. /xmlrpc.php	Web App Attack
🇲🇾 Rizzy	2026-07-21 15:57:25 (3 days ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 14:40:35 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 94.59.163.134 (bba-94-59-163-134.alshamil.net.a ... show more (mod_security) mod_security (id:240335) triggered by 94.59.163.134 (bba-94-59-163-134.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 10:40:29.702883 2026] [security2:error] [pid 324032:tid 324032] [client 94.59.163.134:61865] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 94.59.163.134 (+1 hits since last alert)\|greenmountainfeeds.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "greenmountainfeeds.com"] [uri "/xmlrpc.php"] [unique_id "aluQXa460SSvUNGy5qFATwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-08 18:10:57 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 94.59.163.134 (bba-94-59-163-134.alshamil.net.a ... show more (mod_security) mod_security (id:240335) triggered by 94.59.163.134 (bba-94-59-163-134.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 14:10:51.341889 2026] [security2:error] [pid 23062:tid 23062] [client 94.59.163.134:49375] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 94.59.163.134 (+1 hits since last alert)\|ardath.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "ardath.net"] [uri "/xmlrpc.php"] [unique_id "ak6SqyaZhOwQDZaDc8wpQgAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 konseptit	2026-07-08 12:35:22 (2 weeks ago)	(wordpress) Failed wordpress login from 94.59.163.134 (AE/United Arab Emirates/bba-94-59-163-134.als ... show more (wordpress) Failed wordpress login from 94.59.163.134 (AE/United Arab Emirates/bba-94-59-163-134.alshamil.net.ae) show less	Brute-Force
🇩🇪 dbmwebdesign	2026-07-07 17:35:18 (2 weeks ago)	WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-06 16:55:58 (2 weeks ago)	(mod_security) mod_security (id:240335) triggered by 94.59.163.134 (bba-94-59-163-134.alshamil.net.a ... show more (mod_security) mod_security (id:240335) triggered by 94.59.163.134 (bba-94-59-163-134.alshamil.net.ae): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 12:55:50.355961 2026] [security2:error] [pid 16509:tid 16509] [client 94.59.163.134:62319] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 94.59.163.134 (+1 hits since last alert)\|motherlyhomecare.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "motherlyhomecare.com"] [uri "/xmlrpc.php"] [unique_id "akveFpoGdCxSZkSiFmMu2gAAABU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 11 of 11 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 193.32.162.42

🇯🇵 165.154.241.28

🇫🇷 141.95.162.162

🇻🇳 113.160.82.122

🇮🇩 69.5.23.222

🇺🇸 66.132.195.103

🇨🇳 60.16.209.26

🇺🇸 34.213.161.6

🇨🇳 218.17.184.95

🇨🇳 183.237.248.34

🇺🇦 178.158.193.238

🇮🇩 157.15.40.16

🇹🇷 94.154.43.50

🇨🇳 36.97.255.112

🇺🇸 24.144.85.55

🇺🇸 20.168.120.209

🇳🇴 20.100.169.229

🇳🇱 195.178.110.217

🇲🇽 187.141.243.98

🇺🇸 172.190.51.254