🇺🇸
TPI-Abuse
2026-11-15 11:47:55
UTC ·
(30 minutes ago)
(mod_security) mod_security (id:210350) triggered by 45.159.20.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 06:47:52.273516 2026] [security2:error] [pid 10211:tid 10211] [client 45.159.20.86:61381] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.159.20.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 06:47:52.273516 2026] [security2:error] [pid 10211:tid 10211] [client 45.159.20.86:61381] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.caferutadelaseda.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.caferutadelaseda.com"] [uri "/images/source/css/animate.css"] [unique_id "avmb6F_bZY6rwAqsXkWBEQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 05:53:42
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 45.159.20.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 00:53:37.354367 2026] [security2:error] [pid 16561:tid 16561] [client 45.159.20.86:32331] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.159.20.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 00:53:37.354367 2026] [security2:error] [pid 16561:tid 16561] [client 45.159.20.86:32331] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/belgium/"] [unique_id "avQC4SXUdDxCT_kQCqzkUQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 07:25:26
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 45.159.20.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:25:21.297428 2026] [security2:error] [pid 14496:tid 14496] [client 45.159.20.86:34677] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.159.20.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 02:25:21.297428 2026] [security2:error] [pid 14496:tid 14496] [client 45.159.20.86:34677] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/e7db3006c018c1c4862566bd000abc75/583f3322dd0d978d86256b2e005a98f1_7b4ad6db.html"] [unique_id "avLG4ZgMQAwXNHknWIAu9wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 00:09:08
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.159.20.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:09:01.247289 2026] [security2:error] [pid 6286:tid 6286] [client 45.159.20.86:44277] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.159.20.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 19:09:01.247289 2026] [security2:error] [pid 6286:tid 6286] [client 45.159.20.86:44277] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.yacht-register-holland.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.yacht-register-holland.com"] [uri "/worldwide-registration.html"] [unique_id "aukmHccSQNlsH2_9ti_vIwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
klaus_ph
2026-10-30 01:19:00
UTC ·
(2 weeks ago)
[Fri Oct 30 00:21:44.119919 2026] [ssl:info] [pid 1236274] [client 45.159.20.86:54397] AH01964: Connection to child 16 established (server fit.vufindnet.de:443)
...
Hacking
🇺🇸
TPI-Abuse
2026-10-27 13:41:50
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.159.20.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 09:41:45.303029 2026] [security2:error] [pid 3002:tid 3250] [client 45.159.20.86:27835] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 45.159.20.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 09:41:45.303029 2026] [security2:error] [pid 3002:tid 3250] [client 45.159.20.86:27835] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||newtrendmag.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "newtrendmag.org"] [uri "/ntma1043.htm"] [unique_id "auCqGWgNsb6kEI8unr6d2QAAAhg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ilop
2026-08-08 03:00:47
UTC ·
(3 months ago)
[hp-100] 9 unsolicited packets to honeypot ports 7547 (OCI DShield sensor)
Port Scan
🇺🇸
TPI-Abuse
2026-05-21 19:50:28
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 45.159.20.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 15:50:22.507436 2026] [security2:error] [pid 26321:tid 26321] [client 45.159.20.86:59593] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 45.159.20.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 21 15:50:22.507436 2026] [security2:error] [pid 26321:tid 26321] [client 45.159.20.86:59593] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||advancedmotorsports.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "advancedmotorsports.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ag9h_moQ8DxNNpg9yZ0YjgAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-05-21 12:18:57
UTC ·
(5 months ago)
Web password guessing
Brute-Force
🇩🇪
NxtGenIT
2024-06-17 14:20:25
UTC ·
(2 years ago)
45.159.20.86 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt
Brute-Force
🇩🇪
NxtGenIT
2024-06-06 08:49:47
UTC ·
(2 years ago)
45.159.20.86 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt
Brute-Force
