🇺🇸
TPI-Abuse
2026-11-11 12:37:15
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 45.133.114.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 07:37:07.240464 2026] [security2:error] [pid 16866:tid 16866] [client 45.133.114.58:43831] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.114.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 07:37:07.240464 2026] [security2:error] [pid 16866:tid 16866] [client 45.133.114.58:43831] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||vitality-web.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "vitality-web.com"] [uri "/Human-Touch-Perfect-Chair-Recliner/Human-Touch-PC-600-Silhouette-Perfect-Chair-Recliner-Black-Leather-Chestnut-Wood.htm"] [unique_id "avRhc9YPp8T6rnZyMJlMFgAAAJI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 16:13:48
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 45.133.114.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:13:41.905305 2026] [security2:error] [pid 8518:tid 8518] [client 45.133.114.58:28753] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.114.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:13:41.905305 2026] [security2:error] [pid 8518:tid 8518] [client 45.133.114.58:28753] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.clowaterart.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.clowaterart.com"] [uri "/E917/slides/NEC_5237.html"] [unique_id "avHxNYv634q2XHJqdID-hgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 04:56:55
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 45.133.114.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:56:51.168213 2026] [security2:error] [pid 24415:tid 24415] [client 45.133.114.58:47817] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.114.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:56:51.168213 2026] [security2:error] [pid 24415:tid 24415] [client 45.133.114.58:47817] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/e7db3006c018c1c4862566bd000abc75/88129c871a75aa3b86256b330011c844_7b4ad6db.html"] [unique_id "avFSk-exXPgnVzSCRI2bTQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 23:26:57
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.133.114.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 18:26:53.381293 2026] [security2:error] [pid 11197:tid 11197] [client 45.133.114.58:35707] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.114.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 18:26:53.381293 2026] [security2:error] [pid 11197:tid 11197] [client 45.133.114.58:35707] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||blacksheepoffroad.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "blacksheepoffroad.com"] [uri "/what-is-provided"] [unique_id "auu_PYIUJBlWkS5rBjlRSgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 04:20:26
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.133.114.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 23:20:19.908072 2026] [security2:error] [pid 21906:tid 21906] [client 45.133.114.58:28741] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.133.114.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 23:20:19.908072 2026] [security2:error] [pid 21906:tid 21906] [client 45.133.114.58:28741] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||garon.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garon.us"] [uri "/images2/obits/Kaner, Sophie Gordon obit 2011.htm"] [unique_id "augPg_YnJHwYj8ffcl4SfgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2025-09-03 05:55:54
UTC ·
(1 year ago)
Detected attack by Imunify360
Brute-Force
Web App Attack
2025-07-17 15:45:00
UTC ·
(1 year ago)
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2025-07-17 time=09:46:21 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1752763582006254212 tz="-0500" logid="0101039426" type="even ...
show more
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2025-07-17 time=09:46:21 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1752763582006254212 tz="-0500" logid="0101039426" type="event" subtype="vpn" level="alert" vd="root" logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=45.133.114.58 srccountry="United States" user="bbowman" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in"
show less
VPN IP
