🇺🇸
TPI-Abuse
2026-11-07 20:21:12
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.133.113.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 15:21:06.385856 2026] [security2:error] [pid 13932:tid 13932] [client 45.133.113.204:19775] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.113.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 15:21:06.385856 2026] [security2:error] [pid 13932:tid 13932] [client 45.133.113.204:19775] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||painting-with-numbers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "painting-with-numbers.com"] [uri "/blog/good-communication"] [unique_id "au-IMnAzV1ES1n1XQc991AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 18:35:33
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.133.113.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 13:35:28.449604 2026] [security2:error] [pid 23775:tid 23775] [client 45.133.113.204:36989] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.113.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 13:35:28.449604 2026] [security2:error] [pid 23775:tid 23775] [client 45.133.113.204:36989] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vitality-web.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vitality-web.com"] [uri "/Stressless-Chair/Stressless-Spirit-Large-Dream-Cori-Passion-Leather-Recliner-Chair.htm"] [unique_id "au9vcKp-uKOYkuJa5_q3IgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 10:05:11
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 45.133.113.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 05:05:04.267088 2026] [security2:error] [pid 16622:tid 16622] [client 45.133.113.204:24603] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.113.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 05:05:04.267088 2026] [security2:error] [pid 16622:tid 16622] [client 45.133.113.204:24603] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/live-music/sinead-oconnor-im-not-bossy-im-the-boss-australian-tour-2015/"] [unique_id "aumx0CiXkUFaHoRmxjjDoAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 09:31:22
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.133.113.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:31:19.172348 2026] [security2:error] [pid 30668:tid 30668] [client 45.133.113.204:42387] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.113.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:31:19.172348 2026] [security2:error] [pid 30668:tid 30668] [client 45.133.113.204:42387] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bolivarbulletintimes.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bolivarbulletintimes.com"] [uri "/about-us/"] [unique_id "auW1Z07bLMtuN-C6zDWCigAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 04:25:09
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.133.113.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 00:25:04.140282 2026] [security2:error] [pid 31063:tid 31063] [client 45.133.113.204:27227] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.113.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 00:25:04.140282 2026] [security2:error] [pid 31063:tid 31063] [client 45.133.113.204:27227] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||goseethenurse.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "goseethenurse.com"] [uri "/tag/school-nurse/"] [unique_id "at2EoA01CiXD4h_cYKtIRAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 05:16:12
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.133.113.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 01:16:07.291040 2026] [security2:error] [pid 20728:tid 20728] [client 45.133.113.204:48367] ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.113.204 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 01:16:07.291040 2026] [security2:error] [pid 20728:tid 20728] [client 45.133.113.204:48367] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.alexgitlin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.alexgitlin.com"] [uri "/spring.htm"] [unique_id "atrtl0SScM2R10vBxbdyjQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-09-20 22:30:37
UTC ·
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
🇨🇿
lp
2026-09-12 00:22:50
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.133.113.204
2026-09-12T01:23:44+02:00 vpn Access-Reject 'saadsalman' station: 45.133.113.204 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<re ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.133.113.204
2026-09-12T01:23:44+02:00 vpn Access-Reject 'saadsalman' station: 45.133.113.204 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
lp
2026-09-11 01:51:30
UTC ·
(1 month ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.133.113.204
2026-09-11T03:39:16+02:00 vpn Access-Reject 'cotden2' station: 45.133.113.204 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redac ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.133.113.204
2026-09-11T03:39:16+02:00 vpn Access-Reject 'cotden2' station: 45.133.113.204 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇸🇪
OnTheEdge
2026-09-09 00:54:24
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-08 15:38:21
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇺🇸
dtorrer
2026-06-26 20:08:22
UTC ·
(4 months ago)
Client attempted to submit spam on a website post.
Blog Spam
🇺🇸
oralunal
2026-03-31 05:39:22
UTC ·
(7 months ago)
IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds
...
Bad Web Bot
Web App Attack
🇺🇸
fbarela
2025-10-02 18:00:25
UTC ·
(1 year ago)
FortiGate SSL VPN login failures.
Hacking
Brute-Force
