This IP address has been reported a total of
4
times from
4 distinct
sources.
45.133.112.49 was first reported on
June 13th 2025 , and the most recent report was
3 days ago .
In the last 60 days, the top reporter locations were:
Czechia
with 1
report;
United States of America
with 1
report.
The most common categories in these recent reports were:
Brute-Force
2
times;
Bad Web Bot
1
time;
VPN IP
1
time;
Hacking
1
time;
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐บ๐ธ
TPI-Abuse
2026-10-16 16:17:19
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 45.133.112.49 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.112.49 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:17:11.597346 2026] [security2:error] [pid 30615:tid 30615] [client 45.133.112.49:54279] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||amazinggraceministries.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "amazinggraceministries.net"] [uri "/2.html"] [unique_id "atJOB9f-Cnx7uXET94PQDwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฟ
Countryman
2026-09-13 00:10:01
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
Anonymous
2025-07-17 15:32:00
(1 year ago)
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fai ...
show more
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2025-07-17 time=09:04:35 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1752761075811253665 tz="-0500" logid="0101039426" type="event" subtype="vpn" level="alert" vd="root" logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=45.133.112.49 srccountry="United States" user="jkee" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in"
show less
VPN IP
๐ฉ๐ช
LRob
2025-06-13 02:45:14
(1 year ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
Showing 1 to
4
of 4 reports