JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 45.84.119.59

45.84.119.59 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 25%: ?

25%

ISP	ELSA-TECH SH.P.K.
Usage Type	Fixed Line ISP
ASN	AS208734
Domain Name	elsa-tech.net
Country	🇽🇰 Kosovo
City	Lipljan, Pristina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 45.84.119.59

Whois 45.84.119.59

IP Abuse Reports for 45.84.119.59:

This IP address has been reported a total of 15 times from 12 distinct sources. 45.84.119.59 was first reported on August 30th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 backslash	2026-10-16 13:06:01 (1 day ago)	block ruleset 6B63410D189E6343B910F7440B8499558BEC52EB	Bad Web Bot
🇩🇪 LRob	2026-10-06 03:01:50 (1 week ago)	Shop search flood (L7 DDoS) \| path: /104-velo-route-fitness \| query: order=product.name.desc&q=Marqu ... show more Shop search flood (L7 DDoS) \| path: /104-velo-route-fitness \| query: order=product.name.desc&q=Marque-Orbea/Taille-XL \| src_port: 1839 show less	DDoS Attack Web App Attack
🇺🇸 TPI-Abuse	2026-09-28 20:33:11 (2 weeks ago)	(mod_security) mod_security (id:210350) triggered by 45.84.119.59 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210350) triggered by 45.84.119.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 16:33:05.941584 2026] [security2:error] [pid 24284:tid 24284] [client 45.84.119.59:36802] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close\|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close\|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found\|\|periodthreads.com\|F\|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "periodthreads.com"] [uri "/"] [unique_id "arrPAQGBnBdMDiKCWUdqEgAAABA"], referer: https://silverdescendants.blogspot.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 鬼影233	2026-09-14 20:20:29 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 kosada.com	2026-08-11 07:18:50 (2 months ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇩🇪 LRob	2026-08-06 13:58:17 (2 months ago)	CrowdSec: REPEAT OFFENDER (previously banned, came back) - distributed L7 HTTP flood on WordPress 'T ... show more CrowdSec: REPEAT OFFENDER (previously banned, came back) - distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/cat_ids~158,156/tag_ids~454,823,449,232,425,217,583,542/request_format~json/ \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 show less	DDoS Attack Web App Attack
🇩🇪 LRob	2026-08-03 13:37:10 (2 months ago)	CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_forma ... show more CrowdSec: Distributed L7 HTTP flood on WordPress 'The Events Calendar' AJAX endpoints (request_format~json) - DDoS \| req: /calendrier-2/action~agenda/cat_ids~186,149,153/tag_ids~580,286,791,471,472/request_format~json/ \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 show less	DDoS Attack Web App Attack
🇩🇪 Vegascosmetics	2026-07-20 07:47:38 (2 months ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇹🇼 kk_it_man	2026-05-14 12:30:05 (5 months ago)	honey catch	Port Scan
🇺🇸 RAP	2026-05-09 19:39:35 (5 months ago)	2026-05-09 19:39:35 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇷 security.rdmc.fr	2026-05-08 18:54:30 (5 months ago)	Port Scan Attack proto:TCP src:46394 dst:23	Port Scan
Anonymous	2026-05-07 09:44:56 (5 months ago)	Unauthorized connection attempt on Port 2323	Port Scan Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-06 21:08:25 (5 months ago)	Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: ME ... show more Honeypot detection: Telnet / IoT device brute-force or exploitation attempt on port 23. Severity: MEDIUM. Aaran.cloud show less	IoT Targeted Brute-Force
🇺🇸 RAP	2026-05-06 18:09:21 (5 months ago)	2026-05-06 18:09:21 UTC Unauthorized activity to TCP port 2323. Telnet	Port Scan
Anonymous	2024-08-30 09:20:32 (2 years ago)	BruteForce IMAP/POP3	Brute-Force

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 121.229.156.40

🇨🇳 113.108.144.34

🇨🇳 61.138.113.187

🇧🇪 35.240.58.49

🇰🇷 211.62.96.42

🇻🇪 190.203.26.215

🇺🇸 174.76.33.8

🇨🇴 149.130.179.88

🇺🇸 129.121.140.234

🇨🇳 114.244.208.212

🇷🇴 92.118.39.71

🇦🇪 86.98.17.232

🇨🇳 60.208.177.218

🇰🇷 59.8.107.16

🇷🇺 31.173.12.27

🇬🇧 188.240.59.35

🇺🇸 143.42.173.101

🇳🇱 109.160.32.172

🇨🇦 85.217.149.46

🇫🇷 85.217.140.16