🇺🇸
TPI-Abuse
2026-09-09 21:49:52
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 45.159.22.19 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 45.159.22.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 17:49:48.679333 2026] [security2:error] [pid 19808:tid 19808] [client 45.159.22.19:39935] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/potter/78/h87.html"] [unique_id "aqHUfJQBzRPSYP_eBRbt7gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-08-14 16:48:31
(3 weeks ago)
IM360 WAF: SQL Injection Attack: Common DB Names Detected
SQL Injection
🇩🇪
stinpriza
2026-08-10 01:33:50
(1 month ago)
Web App Attack
Web App Attack
🇩🇪
Lino Project
2026-06-09 08:49:55
(3 months ago)
45.159.22.19 - - [09/Jun/2026:10:49:54 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3987 "-" "Mozilla/5.0 ...
show more
45.159.22.19 - - [09/Jun/2026:10:49:54 +0200] "POST /xmlrpc.php HTTP/1.1" 403 3987 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:20.0) Gecko/20100101 Firefox/20.0"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-02-11 04:18:38
(7 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.159.22.19 (FI/Finland/-): 1 in the last 360 ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 45.159.22.19 (FI/Finland/-): 1 in the last 3600 secs (0-196)
show less
Hacking
🇮🇹
VHosting
2026-01-17 23:45:05
(7 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇸🇬
pusathosting.com
2026-01-14 23:24:03
(7 months ago)
2ds22 bruteforce
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-03-27 12:22:16
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 45.159.22.19 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:211120) triggered by 45.159.22.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 27 08:22:09.925630 2025] [security2:error] [pid 7002:tid 7002] [client 45.159.22.19:62951] [client 45.159.22.19] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||blindshine.com|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/all-in-one-seo-pack/classes/aiosp.class.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blindshine.com"] [uri "/wp-content/plugins/all-in-one-seo-pack/classes/aiosp.class.php"] [unique_id "Z-VC8WjEMP1tKpkvg0mmCQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-23 09:09:53
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 45.159.22.19 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:211120) triggered by 45.159.22.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 23 05:09:48.647220 2025] [security2:error] [pid 9907:tid 9998] [client 45.159.22.19:32215] [client 45.159.22.19] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||batonrougegazette.com|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/all-in-one-seo-pack/classes/aiosp.class.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "batonrougegazette.com"] [uri "/wp-content/plugins/all-in-one-seo-pack/classes/aiosp.class.php"] [unique_id "Z9_P3ObIkZrtYzNc3_3HXAAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-21 14:35:44
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 45.159.22.19 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:211120) triggered by 45.159.22.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 21 10:35:41.532764 2025] [security2:error] [pid 29251:tid 29251] [client 45.159.22.19:43959] [client 45.159.22.19] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "11"] [msg "COMODO WAF: Remote File Inclusion Attack||axiomemail.net|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/all-in-one-seo-pack/classes/aiosp.class.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "axiomemail.net"] [uri "/wp-content/plugins/all-in-one-seo-pack/classes/aiosp.class.php"] [unique_id "Z915PTJbtR56O0p08thq3QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
lp
2025-03-20 16:29:10
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.22.19
2025-03-20T16:17:20+01:0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.22.19
2025-03-20T16:17:20+01:00 vpn Access-Reject 'respect' station: 45.159.22.19 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-03-18 17:53:38
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.22.19
2025-03-18T18:38:31+01:0 ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.159.22.19
2025-03-18T18:38:31+01:00 vpn Access-Reject 'Alison' station: 45.159.22.19 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-03-11 11:40:44
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 45.159.22.19 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:211120) triggered by 45.159.22.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 11 07:40:37.249321 2025] [security2:error] [pid 6458:tid 6458] [client 45.159.22.19:23587] [client 45.159.22.19] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||aeongames.com|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/w3-total-cache/lib/w3/pager.class.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aeongames.com"] [uri "/wp-content/plugins/w3-total-cache/lib/W3/Pager.class.php"] [unique_id "Z9AhNX7x5KVxROaduLB2rAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-10 18:49:34
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 45.159.22.19 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:211120) triggered by 45.159.22.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 10 14:49:28.287569 2025] [security2:error] [pid 1931:tid 1931] [client 45.159.22.19:60133] [client 45.159.22.19] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||adace.com|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/wp-super-cache/js/cache-loader.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adace.com"] [uri "/wp-content/plugins/wp-super-cache/js/cache-loader.php"] [unique_id "Z880OIpqw7KpQCXn0iWqYQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-03-09 18:49:09
(1 year ago)
(mod_security) mod_security (id:211120) triggered by 45.159.22.19 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:211120) triggered by 45.159.22.19 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 09 14:49:05.060255 2025] [security2:error] [pid 24495:tid 24495] [client 45.159.22.19:55603] [client 45.159.22.19] ModSecurity: Access denied with code 403 (phase 2). Match of "endsWith /modules/paypal/express_checkout/payment.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "29"] [id "211120"] [rev "12"] [msg "COMODO WAF: Remote File Inclusion Attack||abcollie.com|F|2"] [data "Matched Data: http://adguard.digital/payload/index.php? found within REQUEST_FILENAME: /wp-content/plugins/w3-total-cache/lib/w3/pager.class.php"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abcollie.com"] [uri "/wp-content/plugins/w3-total-cache/lib/W3/Pager.class.php"] [unique_id "Z83ioT8mtrUCG6bkS-JKawAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
