AbuseIPDB » 46.214.84.13

46.214.84.13 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 12%: ?

12%

ISP	SC Nextgen Communications SRL
Usage Type	Fixed Line ISP
Hostname(s)	46-214-84-13.next-gen.ro
Domain Name	next-gen.ro
Country	Romania
City	Sascut, Bacau

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 46.214.84.13

Whois 46.214.84.13

IP Abuse Reports for 46.214.84.13:

This IP address has been reported a total of 24 times from 7 distinct sources. 46.214.84.13 was first reported on July 28th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
octageeks.com	2024-08-12 04:06:48 (1 month ago)	Wordpress malicious attack:[octawp]	Web App Attack
TPI-Abuse	2024-08-11 20:07:27 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 46.214.84.13 (46-214-84-13.next-gen.ro): 1 in t ... show more(mod_security) mod_security (id:240335) triggered by 46.214.84.13 (46-214-84-13.next-gen.ro): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 11 16:07:20.402159 2024] [security2:error] [pid 22332:tid 22332] [client 46.214.84.13:59740] [client 46.214.84.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 46.214.84.13 (+1 hits since last alert)\|nextngnr.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "nextngnr.com"] [uri "/xmlrpc.php"] [unique_id "ZrkZ-IqVC0XkpOaDSzscwgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-11 11:17:09 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 46.214.84.13 (46-214-84-13.next-gen.ro): 1 in t ... show more(mod_security) mod_security (id:240335) triggered by 46.214.84.13 (46-214-84-13.next-gen.ro): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 11 07:17:02.521964 2024] [security2:error] [pid 2347431:tid 2347431] [client 46.214.84.13:36912] [client 46.214.84.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 46.214.84.13 (+1 hits since last alert)\|www.airtechconsulting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.airtechconsulting.com"] [uri "/xmlrpc.php"] [unique_id "ZridriRlnAwMVvKujpoIkgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
TPI-Abuse	2024-08-11 10:04:05 (1 month ago)	(mod_security) mod_security (id:240335) triggered by 46.214.84.13 (46-214-84-13.next-gen.ro): 1 in t ... show more(mod_security) mod_security (id:240335) triggered by 46.214.84.13 (46-214-84-13.next-gen.ro): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 11 06:03:57.427660 2024] [security2:error] [pid 2266005:tid 2266037] [client 46.214.84.13:60122] [client 46.214.84.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 46.214.84.13 (+1 hits since last alert)\|www.rawhabitat.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.rawhabitat.com"] [uri "/xmlrpc.php"] [unique_id "ZriMjSSCQ6KGyz1CR0KTaQAAAQE"] show less	Brute-Force Bad Web Bot Web App Attack
MAGIC	2024-08-11 06:03:18 (1 month ago)	VM5 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
Anonymous	2024-08-11 02:28:22 (2 months ago)	Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER	Brute-Force SSH
cmbplf	2024-08-11 02:21:40 (2 months ago)	720 requests to */xmlrpc.php	Brute-Force Bad Web Bot
TPI-Abuse	2024-08-11 00:41:38 (2 months ago)	(mod_security) mod_security (id:240335) triggered by 46.214.84.13 (46-214-84-13.next-gen.ro): 1 in t ... show more(mod_security) mod_security (id:240335) triggered by 46.214.84.13 (46-214-84-13.next-gen.ro): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 10 20:41:34.691760 2024] [security2:error] [pid 19375:tid 19375] [client 46.214.84.13:34670] [client 46.214.84.13] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at IP. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "5956"] [id "240335"] [rev "5"] [msg "COMODO WAF: XML-RPC Attack Identified (CVE-2013-0235)\|Source 46.214.84.13 (+1 hits since last alert)\|abilityimprinting.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "abilityimprinting.com"] [uri "/xmlrpc.php"] [unique_id "ZrgIvvAEi909UXC-BVi7AQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Steve	2024-07-28 05:35:04 (2 months ago)	Excessive crawling - not obeying robots.txt	Bad Web Bot