JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 206.214.12.98

206.214.12.98 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 39%: ?

39%

ISP	Cable & Wireless Antigua and Barbuda Ltd
Usage Type	Fixed Line ISP
ASN	AS11139
Hostname(s)	206-214-12-98.candw.ag
Domain Name	candw.ag
Country	🇩🇲 Dominica
City	Roseau, Saint George Parish

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 206.214.12.98

Whois 206.214.12.98

IP Abuse Reports for 206.214.12.98:

This IP address has been reported a total of 10 times from 6 distinct sources. 206.214.12.98 was first reported on July 17th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 debestelapp	2026-07-20 02:55:07 (5 days ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 02:42:09 (5 days ago)	(mod_security) mod_security (id:240335) triggered by 206.214.12.98 (206-214-12-98.candw.ag): 1 in th ... show more (mod_security) mod_security (id:240335) triggered by 206.214.12.98 (206-214-12-98.candw.ag): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 22:42:01.781026 2026] [security2:error] [pid 593410:tid 593410] [client 206.214.12.98:62977] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 206.214.12.98 (+1 hits since last alert)\|takeapawsboston.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "takeapawsboston.com"] [uri "/xmlrpc.php"] [unique_id "al2K-T1Kz2EDDyYvjCiDtQAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-20 01:45:22 (5 days ago)	[redacted] 206.214.12.98 - - [20/Jul/2026:03:44:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "J ... show more [redacted] 206.214.12.98 - - [20/Jul/2026:03:44:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.4; http://site74526341.com" [redacted] 206.214.12.98 - - [20/Jul/2026:03:44:48 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 206.214.12.98 - - [20/Jul/2026:03:44:59 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.5; WordPress/6.3; http://site30104441.com" [redacted] 206.214.12.98 - - [20/Jul/2026:03:45:09 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "WordPress.com; https://wordpress.com" [redacted] 206.214.12.98 - - [20/Jul/2026:03:45:20 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.1)" ... show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 12:33:24 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 206.214.12.98 (206-214-12-98.candw.ag): 1 in th ... show more (mod_security) mod_security (id:240335) triggered by 206.214.12.98 (206-214-12-98.candw.ag): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 08:33:17.833678 2026] [security2:error] [pid 1606057:tid 1606057] [client 206.214.12.98:57338] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 206.214.12.98 (+1 hits since last alert)\|stationrestaurant.ca\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stationrestaurant.ca"] [uri "/xmlrpc.php"] [unique_id "alzEDdbxxAKs9unX60g7-gAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-19 06:34:37 (6 days ago)	(mod_security) mod_security (id:240335) triggered by 206.214.12.98 (206-214-12-98.candw.ag): 1 in th ... show more (mod_security) mod_security (id:240335) triggered by 206.214.12.98 (206-214-12-98.candw.ag): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 02:34:33.791113 2026] [security2:error] [pid 3302255:tid 3302255] [client 206.214.12.98:63440] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 206.214.12.98 (+1 hits since last alert)\|eileensharaga.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "eileensharaga.com"] [uri "/xmlrpc.php"] [unique_id "alxv-ePaPOHcWPCVSGhVDAAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-19 05:00:29 (6 days ago)	Fail2Ban WordPress login brute-force detected	Brute-Force Web App Attack
Anonymous	2026-07-18 20:11:10 (6 days ago)		Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 06:15:31 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 206.214.12.98 (206-214-12-98.candw.ag): 1 in th ... show more (mod_security) mod_security (id:240335) triggered by 206.214.12.98 (206-214-12-98.candw.ag): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 02:15:26.056176 2026] [security2:error] [pid 369133:tid 369133] [client 206.214.12.98:62769] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 206.214.12.98 (+1 hits since last alert)\|kadinisi.org\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "kadinisi.org"] [uri "/xmlrpc.php"] [unique_id "alnIfkZ4JBLouzzn8hc0PwAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-17 03:05:19 (1 week ago)	[server.tmg.gr] httpd-xmlrpc-post: sites=www.mastermind.gr; logs=/var/log/httpd/domains/tmg.gr.log; ... show more [server.tmg.gr] httpd-xmlrpc-post: sites=www.mastermind.gr; logs=/var/log/httpd/domains/tmg.gr.log; samples=/xmlrpc.php show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-07-17 00:45:30 (1 week ago)	(mod_security) mod_security (id:240335) triggered by 206.214.12.98 (206-214-12-98.candw.ag): 1 in th ... show more (mod_security) mod_security (id:240335) triggered by 206.214.12.98 (206-214-12-98.candw.ag): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 20:45:22.761325 2026] [security2:error] [pid 10850:tid 10850] [client 206.214.12.98:7802] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 206.214.12.98 (+1 hits since last alert)\|intothebigempty.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "intothebigempty.com"] [uri "/xmlrpc.php"] [unique_id "all7IhZRZr-JLug4yEwaagAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇿 41.93.28.9

🇳🇱 206.189.6.49

🇨🇳 183.156.38.129

🇺🇸 172.98.33.60

🇫🇷 167.86.117.252

🇸🇪 83.191.181.23

🇫🇮 62.238.23.129

🇧🇷 45.205.1.242

🇸🇬 45.43.63.68

🇪🇬 41.36.12.26

🇩🇪 20.218.104.173

🇺🇸 3.130.168.2

🇬🇧 194.74.196.10

🇲🇽 187.136.2.26

🇸🇬 143.198.222.25

🇨🇳 116.181.11.193

🇨🇳 106.75.77.231

🇳🇱 46.151.178.13

🇮🇳 45.118.161.116

🇨🇳 223.243.24.178