|
🇲🇹
Malta
|
|
106.15.248.16 - - [30/Dec/2025:03:40:46 +0100] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT ...
show more
106.15.248.16 - - [30/Dec/2025:03:40:46 +0100] "POST /xmlrpc.php HTTP/1.1" "Mozilla/5.0 (Windows NT 5.1; rv:33.0) Gecko/20100101 Firefox/33.0"
show less
|
Hacking
Web App Attack
|
|
|
🇩🇪
masterguru
|
|
(XMLRPC) WP XMLPRC Attack 106.15.248.16 (CN/China/-): 5 in the last 3600 secs (0-145)
|
Hacking
|
|
|
🇦🇺
weblite
|
|
WP_XMLRPC_ABUSE
|
Brute-Force
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 106.15.248.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 106.15.248.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 29 14:07:30.847504 2025] [security2:error] [pid 22972:tid 22972] [client 106.15.248.16:51048] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 106.15.248.16 (+1 hits since last alert)|solventtrapco.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "solventtrapco.com"] [uri "/xmlrpc.php"] [unique_id "aVLRcs9lqB5TvKbCRilrMQAAAAw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 106.15.248.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 106.15.248.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 22:54:56.593979 2025] [security2:error] [pid 27171:tid 27171] [client 106.15.248.16:33554] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 106.15.248.16 (+1 hits since last alert)|gpobiotech.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "gpobiotech.com"] [uri "/xmlrpc.php"] [unique_id "aVH7kCOnCEdfhSp5In7uHwAAAAU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇫🇷
Kenshin869
|
|
Wordpress unauthorized access attempt
|
Brute-Force
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 106.15.248.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 106.15.248.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 18:13:40.620717 2025] [security2:error] [pid 2295:tid 2295] [client 106.15.248.16:52014] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 106.15.248.16 (+1 hits since last alert)|equipoperu.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "equipoperu.org"] [uri "/xmlrpc.php"] [unique_id "aVG5pBGulgZwAev-GLGo3QAAABg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 106.15.248.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 106.15.248.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 16:09:28.677406 2025] [security2:error] [pid 7489:tid 7489] [client 106.15.248.16:36372] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 106.15.248.16 (+1 hits since last alert)|crittergetterpestcontrol.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "crittergetterpestcontrol.com"] [uri "/xmlrpc.php"] [unique_id "aVGciBzCnQ2CgyQ1xb1McwAAABE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
(wordpress) Failed wordpress login from 106.15.248.16 (CN/China/Shanghai/Shanghai/-/[redacted])
|
Brute-Force
|
|
|
🇪🇸
masterguru
|
|
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (1020-123)
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:240335) triggered by 106.15.248.16 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:240335) triggered by 106.15.248.16 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Dec 28 04:10:07.911381 2025] [security2:error] [pid 1126043:tid 1126069] [client 106.15.248.16:34762] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 106.15.248.16 (+1 hits since last alert)|howlerrock.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "howlerrock.com"] [uri "/xmlrpc.php"] [unique_id "aVDz78KVGiNAcNjCFvNRfQAAAEw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
|
Bad Web Bot
Web App Attack
|
|
|
🇳🇱
Site.eu
|
|
Repeated wp-login/xmlrpc attempts
|
Brute-Force
SSH
|
|
|
🇩🇪
abdubhai
|
|
106.15.248.16 - - [28/Dec/2025:0
...
|
Brute-Force
|
|
|
🇩🇪
dbmwebdesign
|
|
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
|
Brute-Force
Web App Attack
|
|