🇱🇻
garmtech.com
2026-05-31 01:08:05
(1 week ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-08.45.136.27.14.web-spammer ...
show more
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 04-08.45.136.27.14.web-spammers.v2.rbl.imunify.com._v4 succeeded.
show less
Web App Attack
🇬🇧
Oakley
2026-05-29 16:46:03
(1 week ago)
(mod_security) mod_security (id:900178) triggered by 45.136.27.14 (US/United States/-): 5 in the las ...
show more
(mod_security) mod_security (id:900178) triggered by 45.136.27.14 (US/United States/-): 5 in the last 900 secs
show less
Web App Attack
Hacking
🇪🇸
el-brujo
2026-05-17 01:56:32
(3 weeks ago)
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: curl/8. ...
show more
Cloudflare WAF: Request Path: /xmlrpc.php Request Query: Host: foro.elhacker.net userAgent: curl/8.6.0 Action: managed_challenge Source: firewallManaged ASN Description: PureVoltage Hosting Inc. Country: US Method: POST Timestamp: 2026-05-17T01:56:32Z ruleId: 5de7edfa648c4d6891dc3e7f84534ffa. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
2026-04-01 12:05:59
(2 months ago)
"POST /xmlrpc.php HTTP/1.1"
Hacking
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2026-03-18 09:52:01
(2 months ago)
XML RPC Scan Activities: "2026-03-18T16:52:01.824+07:00" "/xmlrpc.php" "45.136.27.14" "Mozilla/5.0 ( ...
show more
XML RPC Scan Activities: "2026-03-18T16:52:01.824+07:00" "/xmlrpc.php" "45.136.27.14" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:146.0) Gecko/20100101 Firefox/146.0"
show less
Web App Attack
Brute-Force
🇮🇩
BPS-StatisticsIndonesia
2026-03-13 17:35:08
(2 months ago)
XML RPC Scan Activities: "2026-03-14T00:35:08.563+07:00" "/xmlrpc.php" "45.136.27.14" "Chrome/96.6 S ...
show more
XML RPC Scan Activities: "2026-03-14T00:35:08.563+07:00" "/xmlrpc.php" "45.136.27.14" "Chrome/96.6 Safari/536.56"
show less
Web App Attack
Brute-Force
🇨🇭
backslash
2026-03-03 14:33:00
(3 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-27 05:33:49
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.136.27.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.136.27.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 27 00:33:45.051204 2026] [security2:error] [pid 14252:tid 14252] [client 45.136.27.14:38519] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||mightyhoop.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "mightyhoop.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aaEsuaDWP35Wh_I2xeLTwwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-26 07:34:34
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.136.27.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.136.27.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 26 02:34:28.964932 2026] [security2:error] [pid 4206:tid 4206] [client 45.136.27.14:61691] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||belgiophar.info|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "belgiophar.info"] [uri "/wp-json/wp/v2/users"] [unique_id "aZ_3hELm1wjFKWQhOEpfjgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-25 23:01:51
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.136.27.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.136.27.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 25 18:01:43.373033 2026] [security2:error] [pid 28896:tid 28896] [client 45.136.27.14:12657] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||bosdkbook.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "bosdkbook.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZ9_V27pIi_lfT5XyPne4gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Carl
2026-02-25 16:41:58
(3 months ago)
Aggressive web scan
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-24 21:28:43
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 45.136.27.14 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 45.136.27.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 24 16:28:34.323745 2026] [security2:error] [pid 19811:tid 19811] [client 45.136.27.14:63873] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||achildsspace.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "achildsspace.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aZ4YAu8guHad06_6sXTFdwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
Mugen
2026-02-17 20:02:33
(3 months ago)
Unauthorized VPN login attempts
Brute-Force