🇳🇱
donarev419
2026-10-26 07:32:16
(1 day ago)
Port scan detected on port 5901 (connection without data transfer)
Port Scan
🇳🇱
donarev419
2026-10-26 05:16:57
(1 day ago)
Port scan detected on port 5900 (connection without data transfer)
Port Scan
🇺🇸
TPI-Abuse
2026-10-25 13:10:11
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 45.159.21.34 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 45.159.21.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 09:10:03.927715 2026] [security2:error] [pid 17685:tid 17685] [client 45.159.21.34:32785] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||borzoi-pedigree.batw.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "borzoi-pedigree.batw.net"] [uri "/recstore/m/MytheCzarr.html"] [unique_id "at3_qx6zEsGFKKimLE5YGgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 07:19:30
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 45.159.21.34 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 45.159.21.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 03:19:24.886240 2026] [security2:error] [pid 5071:tid 5071] [client 45.159.21.34:18915] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||acmax.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "acmax.com"] [uri "/home/index.php/products/hvacr-controllers/compressor-safety-controllers/dual-compressors-etclo-830/14-products/hvacr-controllers/compressor-safety-controllers"] [unique_id "atsKfBbahlCPLhZQxbM5yQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-09-16 04:57:22
(1 month ago)
Brute force
Brute-Force
🇮🇹
VHosting
2026-09-12 19:05:03
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇪🇸
librebit
2026-09-02 18:11:35
(1 month ago)
Brute force
Brute-Force
🇺🇸
www.winos.me
2026-08-29 12:38:36
(1 month ago)
Scanning for sensitive files/paths: /wp-login.php
Hacking
Web App Attack
🇨🇿
lp
2025-03-08 07:21:31
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.34
2025-03-08T07:17:14+01:0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.21.34
2025-03-08T07:17:14+01:00 vpn Access-Reject 'napoleon' station: 45.159.21.34 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2025-02-27 17:32:15
(1 year ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-02-17 09:24:18
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 45.159.21.34 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.159.21.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 17 04:24:13.009262 2025] [security2:error] [pid 15891:tid 15891] [client 45.159.21.34:40375] [client 45.159.21.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "capitalentertainment.biz"] [uri "/.env"] [unique_id "Z7MAPRYsNHimLN4nIWWDUAAAABI"], referer: https://tasamm.com/about/ccc14.html
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
sms.ru
2024-09-20 16:55:07
(2 years ago)
SMS pumping attack from foreign country
DDoS Attack
🇩🇪
NxtGenIT
2024-06-09 19:44:22
(2 years ago)
45.159.21.34 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attemp ...
show more
45.159.21.34 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt
show less
Brute-Force
🇩🇪
NxtGenIT
2024-06-07 11:53:44
(2 years ago)
45.159.21.34 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attemp ...
show more
45.159.21.34 has been observed attacking Port 1812. Observed Threat: RADIUS Login Brute Force Attempt
show less
Brute-Force
🇪🇸
10dencehispahard SL
2024-05-23 16:00:19
(2 years ago)
Unauthorized login attempts [ wordpress]
Brute-Force
Web App Attack