This IP address has been reported a total of
8
times from
5 distinct
sources.
45.159.55.27 was first reported on
April 27th 2025 , and the most recent report was
1 month ago Switzerland
with 1
report.
The only category in these recent reports was:
Hacking
1
time.
Old Reports
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇨🇭
Kepler-1649c
2026-09-22 10:06:18
(1 month ago)
Detected Attack: cPanel.ErrorPage.Webcall.ID.Reflected.XSS
Hacking
🇧🇪
taivas.nl
2026-08-22 16:02:08
(2 months ago)
Fake_GoogleBot
Bad Web Bot
SSH
2026-06-02 01:20:02
(4 months ago)
| A web attack returned code 200 (success).
Web App Attack
Hacking
SQL Injection
🇺🇸
wasuma
2026-05-19 14:25:22
(5 months ago)
Honeypot: Apache path traversal RCE — systematic probe for CVE-2021-41773. No payload delivered yet.
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-01-16 10:05:27
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 45.159.55.27 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.159.55.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jan 16 05:05:21.577790 2026] [security2:error] [pid 17090:tid 17090] [client 45.159.55.27:56637] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.nbcnewsradio.com"] [uri "/.env.live"] [unique_id "aWoNYSeRd8lYjPxJVZ9KmQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-07-01 06:55:04
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 45.159.55.27 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 45.159.55.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 01 02:54:54.793566 2025] [security2:error] [pid 32047:tid 32126] [client 45.159.55.27:37977] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kettlehill.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kettlehill.com"] [uri "/data.sql"] [unique_id "aGOGPgF1tdoO2im1K3VzGwAAAJE"], referer: https://www.kettlehill.com/data.sql
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-05-30 19:43:33
(1 year ago)
(mod_security) mod_security (id:210730) triggered by 45.159.55.27 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 45.159.55.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 30 15:43:29.803067 2025] [security2:error] [pid 587041:tid 587041] [client 45.159.55.27:58125] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||ftp.nbcnewsradio.com|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.nbcnewsradio.com"] [uri "/log/error.log"] [unique_id "aDoKYVrCGHTOKTFJLj4wPgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-27 14:32:31
(1 year ago)
(mod_security) mod_security (id:217200) triggered by 45.159.55.27 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:217200) triggered by 45.159.55.27 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Apr 27 10:32:23.948351 2025] [security2:error] [pid 491:tid 517] [client 45.159.55.27:60193] [client 45.159.55.27] ModSecurity: Access denied with code 403 (phase 1). Match of "endsWith /wp-cron.php" against "REQUEST_FILENAME" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "103"] [id "217200"] [rev "2"] [msg "COMODO WAF: HTTP/1.1 POST request missing Content-Length Header||www.seodev.spinningdesigns.com|F|2"] [data "/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.seodev.spinningdesigns.com"] [uri "/cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh"] [unique_id "aA4_95jGdrRl-EXDXJjZOgAAARQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
8
of 8 reports
