JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 196.15.14.245

196.15.14.245 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 85%: ?

85%

ISP	Gijima Holdings (PTY) Limited
Usage Type	Data Center/Web Hosting/Transit
ASN	AS37438
Domain Name	gijima.com
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 196.15.14.245

Whois 196.15.14.245

IP Abuse Reports for 196.15.14.245:

This IP address has been reported a total of 26 times from 15 distinct sources. 196.15.14.245 was first reported on July 12th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-18 04:25:26 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 196.15.14.245 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 196.15.14.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 00:25:18.714745 2026] [security2:error] [pid 2089387:tid 2089404] [client 196.15.14.245:63144] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 196.15.14.245 (+1 hits since last alert)\|thecraftsycat.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "thecraftsycat.com"] [uri "/xmlrpc.php"] [unique_id "alsALohpOh5BEKQ3zTU-CgAAAM8"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇹 Malta	2026-07-18 03:47:38 (1 day ago)	196.15.14.245 - - [18/Jul/2026:05:47:37 +0200] "POST /xmlrpc.php HTTP/1.1" "WordPress.com; https://w ... show more 196.15.14.245 - - [18/Jul/2026:05:47:37 +0200] "POST /xmlrpc.php HTTP/1.1" "WordPress.com; https://wordpress.com" show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-18 01:04:03 (1 day ago)	(mod_security) mod_security (id:240335) triggered by 196.15.14.245 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 196.15.14.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 21:03:55.869900 2026] [security2:error] [pid 1476527:tid 1476527] [client 196.15.14.245:64070] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 196.15.14.245 (+1 hits since last alert)\|innovacionesnimba.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "innovacionesnimba.com"] [uri "/xmlrpc.php"] [unique_id "alrQ-6RHuIoPyqDlDIOzbgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 20:11:26 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 196.15.14.245 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 196.15.14.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 16:11:22.188086 2026] [security2:error] [pid 17954:tid 17954] [client 196.15.14.245:63787] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 196.15.14.245 (+1 hits since last alert)\|bfpsamoa.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "bfpsamoa.com"] [uri "/xmlrpc.php"] [unique_id "alqMapG7z1IrR4YZ7Rw3EAAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 17:52:30 (2 days ago)	(mod_security) mod_security (id:240335) triggered by 196.15.14.245 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 196.15.14.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 13:52:25.784747 2026] [security2:error] [pid 32345:tid 32345] [client 196.15.14.245:63377] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 196.15.14.245 (+1 hits since last alert)\|localpetsitters.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "localpetsitters.com"] [uri "/xmlrpc.php"] [unique_id "alpr2SDOBvZsRDMbz3un_wAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 masterguru	2026-07-16 13:28:33 (3 days ago)	(xmlrpc) Failed xmlrpc access from 196.15.14.245 (ZA/South Africa/-): 5 in the last 3600 secs (0-122 ... show more (xmlrpc) Failed xmlrpc access from 196.15.14.245 (ZA/South Africa/-): 5 in the last 3600 secs (0-122) show less	Hacking
🇳🇱 Site.eu	2026-07-16 13:25:30 (3 days ago)	Repeated wp-login/xmlrpc attempts	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-07-16 13:01:18 (3 days ago)	(mod_security) mod_security (id:240335) triggered by 196.15.14.245 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:240335) triggered by 196.15.14.245 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 09:01:14.274234 2026] [security2:error] [pid 2505:tid 2505] [client 196.15.14.245:63089] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 196.15.14.245 (+1 hits since last alert)\|verdeprofundo.net\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "verdeprofundo.net"] [uri "/xmlrpc.php"] [unique_id "aljWGr6oWXV6KhtDqOq6NAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 IndigoRidge	2026-07-16 12:31:04 (3 days ago)	196.15.14.245 - - [16/Jul/2026:08:28:55 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5760 "-" "WordPress.c ... show more 196.15.14.245 - - [16/Jul/2026:08:28:55 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5760 "-" "WordPress.com; https://wordpress.com" 196.15.14.245 - - [16/Jul/2026:08:29:06 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5760 "-" "WordPress.com; https://wordpress.com" 196.15.14.245 - - [16/Jul/2026:08:30:31 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5760 "-" "WordPress.com; https://wordpress.com" 196.15.14.245 - - [16/Jul/2026:08:30:42 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5760 "-" "WordPress.com; https://wordpress.com" 196.15.14.245 - - [16/Jul/2026:08:31:04 -0400] "POST /xmlrpc.php HTTP/1.0" 403 5760 "-" "WordPress.com; https://wordpress.com" ... show less	Web App Attack
🇩🇪 BlueWire Hosting	2026-07-16 11:24:32 (3 days ago)	Probing websites for vulnerabilities	Web App Attack
Anonymous	2026-07-16 09:57:33 (3 days ago)	[redacted] 196.15.14.245 - - [16/Jul/2026:11:56:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 196.15.14.245 - - [16/Jul/2026:11:56:49 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 196.15.14.245 - - [16/Jul/2026:11:56:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 196.15.14.245 - - [16/Jul/2026:11:57:10 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 196.15.14.245 - - [16/Jul/2026:11:57:20 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.2)" [redacted] 196.15.14.245 - - [16/Jul/2026:11:57:31 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.1; http://site40974596.com" ... show less	Hacking Web App Attack
🇩🇪 4server	2026-07-16 07:01:14 (3 days ago)	[ThuJul1609:01:13.5388212026][security2:error][pid300326:tid300374][client196.15.14.245:0]ModSecurit ... show more [ThuJul1609:01:13.5388212026][security2:error][pid300326:tid300374][client196.15.14.245:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Stringmatch\"/xmlrpc.php\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"170\"][id\"960024\"][msg\"XML-RPCdisabled\"][hostname\"studio-portale.ch\"][uri\"/xmlrpc.php\"][unique_id\"aliBuZwe9s3rrn_1YLHfVAAAAYw\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-07-16 06:20:25 (3 days ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-16 05:52:02 (3 days ago)	Fail2Ban: WordPress XML-RPC brute-force attack detected.	Bad Web Bot Web App Attack
Anonymous	2026-07-16 05:21:15 (3 days ago)	[redacted] 196.15.14.245 - - [16/Jul/2026:07:20:32 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "W ... show more [redacted] 196.15.14.245 - - [16/Jul/2026:07:20:32 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 196.15.14.245 - - [16/Jul/2026:07:20:41 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)" [redacted] 196.15.14.245 - - [16/Jul/2026:07:20:52 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" [redacted] 196.15.14.245 - - [16/Jul/2026:07:21:02 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 196.15.14.245 - - [16/Jul/2026:07:21:14 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com" ... show less	Hacking Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a09:bac5:a6c2:292d::41a:33

🇺🇸 2a09:bac5:6368:2da5::48c:4b

🇺🇸 2a09:bac5:6368:183c::26a:e2

🇺🇸 2a09:bac1:76c0:480::501:79

🇪🇸 188.95.113.76

🇲🇽 177.249.174.187

🇱🇹 77.90.185.20

🇨🇳 47.93.192.43

🇮🇳 27.4.194.108

🇩🇪 2a0e:7b85:f11e:7da0:fd61:ed0d:94de:b3f6

🇩🇪 2a0e:7b85:b4fc:c639:5518:b440:40a2:8a07

🇩🇪 2a0e:7b85:b351:495a:7448:62bc:8669:3d83

🇩🇪 2a0e:7b85:69b:13f0:51f6:4676:5f9e:b5e5

🇩🇪 2a0e:7b84:2d8e:7de2:69e9:a174:3738:d10c

🇩🇪 2a0e:7b84:1665:48e5:2c9f:d75a:b214:cd1c

🇺🇸 2a09:bac5:a725:1973::289:66

🇺🇸 2a09:bac5:636f:294b::41d:1

🇺🇸 2a09:bac1:76c0:480::501:58

🇺🇸 2a09:bac1:76a0:3d0::48c:20

🇨🇳 222.189.99.205