🇺🇸
TPI-Abuse
2026-06-15 12:39:46
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 106.219.163.28 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 106.219.163.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 08:39:40.130652 2026] [security2:error] [pid 29105:tid 29105] [client 106.219.163.28:22617] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 106.219.163.28 (+1 hits since last alert)|georgegourmet.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "georgegourmet.com"] [uri "/xmlrpc.php"] [unique_id "ai_yjLZIxw9rPGNoR9UW_gAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-06-15 12:36:35
(1 week ago)
(xmlrpc_405) XMLRPC-Bot 405 106.219.163.28 (IN/India/-)
Hacking
🇺🇸
TPI-Abuse
2026-06-15 09:14:13
(1 week ago)
(mod_security) mod_security (id:240335) triggered by 106.219.163.28 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:240335) triggered by 106.219.163.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 05:14:08.582673 2026] [security2:error] [pid 31085:tid 31085] [client 106.219.163.28:10079] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)|Source 106.219.163.28 (+1 hits since last alert)|rochesterhistorical.org|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "rochesterhistorical.org"] [uri "/xmlrpc.php"] [unique_id "ai_CYPBQO7gOdPg90-DtXgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-15 09:11:24
(1 week ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (88010-201)
Hacking
🇧🇪
cmbplf
2026-06-15 08:35:04
(1 week ago)
3.312 requests with url.path */xmlrpc.php
Brute-Force
Bad Web Bot
2026-05-11 12:30:59
(1 month ago)
Unauthorized connection attempt on Port 23
Port Scan
Hacking
Exploited Host
2026-04-08 03:23:37
(2 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇫🇷
SpaceHost-Server
2025-11-24 16:05:46
(7 months ago)
Nov 24 17:05:45 pegasus postfix/smtpd[3849575]: warning: unknown[106.219.163.28]: SASL CRAM-MD5 auth ...
show more
Nov 24 17:05:45 pegasus postfix/smtpd[3849575]: warning: unknown[106.219.163.28]: SASL CRAM-MD5 authentication failed: authentication failure, [email protected]
Nov 24 17:05:45 pegasus postfix/smtpd[3849575]: warning: unknown[106.219.163.28]: SASL PLAIN authentication failed: authentication failure, [email protected]
Nov 24 17:05:46 pegasus postfix/smtpd[3849575]: warning: unknown[106.219.163.28]: SASL LOGIN authentication failed: authentication failure, [email protected]
show less
Hacking
Brute-Force
🇩🇪
pressler.pro
2025-09-23 06:06:40
(9 months ago)
Fail2ban - DDoS attack on woocommerce shop
...
DDoS Attack
🇺🇸
oncord
2025-06-24 11:00:48
(1 year ago)
Form spam
Web Spam
🇺🇸
TPI-Abuse
2025-06-24 10:56:41
(1 year ago)
(mod_security) mod_security (id:211170) triggered by 106.219.163.28 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:211170) triggered by 106.219.163.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 24 06:56:35.615973 2025] [security2:error] [pid 2881044:tid 2881044] [client 106.219.163.28:11892] ModSecurity: Access denied with code 403 (phase 2). Match of "contains %{SERVER_NAME}" against "REQUEST_HEADERS:Referer" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "45"] [id "211170"] [rev "6"] [msg "COMODO WAF: Session Fixation: SessionID Parameter Name with Off-Domain Referer||dovka.com|F|2"] [data "Matched Data: 106.219.163.28 found within ARGS_NAMES:ucfid: http://www.weebly.com/"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dovka.com"] [uri "/"] [unique_id "aFqEY_WibXZEnew1J-u59wAAACE"], referer: http://www.weebly.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-06-24 09:51:08
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH