🇺🇸
TPI-Abuse
2026-07-28 09:52:35
(19 hours ago)
(mod_security) mod_security (id:240335) triggered by 106.213.83.196 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 106.213.83.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 05:52:28.983278 2026] [security2:error] [pid 404415:tid 404496] [client 106.213.83.196:27724] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 106.213.83.196 (+1 hits since last alert)|inal.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "inal.org"] [uri "/xmlrpc.php"] [unique_id "amh73A4D9xCQppa9GGlf5wAAAgk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-28 04:28:08
(1 day ago)
WordPress XMLRPC Brute Force Attack
Brute-Force
Web App Attack
🇺🇸
TAY
2026-07-28 04:27:57
(1 day ago)
106.213.83.196 - - [28/Jul/2026:12:27:33 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5874 "-" "Jetpack by ...
show more
106.213.83.196 - - [28/Jul/2026:12:27:33 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5874 "-" "Jetpack by WordPress.com"
106.213.83.196 - - [28/Jul/2026:12:27:45 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5874 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)"
106.213.83.196 - - [28/Jul/2026:12:27:56 +0800] "POST /xmlrpc.php HTTP/1.1" 200 5874 "-" "Jetpack by WordPress.com"
...
show less
Brute-Force
🇲🇾
Rizzy
2026-07-27 11:59:32
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 10:57:20
(1 day ago)
(mod_security) mod_security (id:240335) triggered by 106.213.83.196 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 106.213.83.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 06:57:16.242863 2026] [security2:error] [pid 22552:tid 22590] [client 106.213.83.196:23787] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 106.213.83.196 (+1 hits since last alert)|maryschalkdesign.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "maryschalkdesign.com"] [uri "/xmlrpc.php"] [unique_id "amc5jPHu7z9_AOfry_cjUgAAAMk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-27 11:26:20
(2 months ago)
[ns31.kdns.gr] httpd-xmlrpc-post: sites=teory.gr; logs=/var/log/httpd/domains/teory.gr.log; samples= ...
show more
[ns31.kdns.gr] httpd-xmlrpc-post: sites=teory.gr; logs=/var/log/httpd/domains/teory.gr.log; samples=/xmlrpc.php
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 11:24:38
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 106.213.83.196 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 106.213.83.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 07:24:31.034879 2026] [security2:error] [pid 17170:tid 17170] [client 106.213.83.196:4011] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 106.213.83.196 (+1 hits since last alert)|realdoctorstories.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "realdoctorstories.com"] [uri "/xmlrpc.php"] [unique_id "ahbUb8G3uSTTUR3moPnCZgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 09:53:07
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 106.213.83.196 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 106.213.83.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 05:53:01.276084 2026] [security2:error] [pid 1617:tid 1617] [client 106.213.83.196:26270] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 106.213.83.196 (+1 hits since last alert)|dupagekanewildliferemoval.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "dupagekanewildliferemoval.com"] [uri "/xmlrpc.php"] [unique_id "aha-_VoUQT49Q75rPqMo0AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 08:50:29
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 106.213.83.196 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 106.213.83.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 04:50:21.041375 2026] [security2:error] [pid 18654:tid 18654] [client 106.213.83.196:21600] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 106.213.83.196 (+1 hits since last alert)|jaragoodrich.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "jaragoodrich.com"] [uri "/xmlrpc.php"] [unique_id "ahawTNenNM8egWzsSXo7TgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-27 08:50:19
(2 months ago)
Attac
Brute-Force
🇨🇿
huginet
2026-05-27 08:48:23
(2 months ago)
106.213.83.196 - - [27/May/2026:10:48:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack/12. ...
show more
106.213.83.196 - - [27/May/2026:10:48:12 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "Jetpack/12.1; WordPress/6.2; http://site61675534.com"
106.213.83.196 - - [27/May/2026:10:48:22 +0200] "POST /xmlrpc.php HTTP/1.1" 200 416 "-" "WordPress.com; https://wordpress.com"
...
show less
Web Spam
Blog Spam
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 07:49:50
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 106.213.83.196 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 106.213.83.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 03:49:43.121059 2026] [security2:error] [pid 10038:tid 10038] [client 106.213.83.196:20462] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5965"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 106.213.83.196 (+1 hits since last alert)|goseethenurse.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "goseethenurse.com"] [uri "/xmlrpc.php"] [unique_id "ahaiF-FupeN5NrhN7KG51QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 05:17:20
(2 months ago)
(mod_security) mod_security (id:240335) triggered by 106.213.83.196 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 106.213.83.196 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 01:17:12.683651 2026] [security2:error] [pid 22100:tid 22100] [client 106.213.83.196:33258] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 106.213.83.196 (+1 hits since last alert)|roguetechhub.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "roguetechhub.com"] [uri "/xmlrpc.php"] [unique_id "ahZ-WMTCntXrhAdlNyPhmAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
integrantservices.com
2026-05-26 08:28:45
(2 months ago)
(wordpress) Failed wordpress login from 106.213.83.196 (IN/India/-)
Brute-Force
2025-11-11 06:31:27
(8 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host