🇺🇸
TPI-Abuse
2026-11-10 15:11:41
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210350) triggered by 45.136.24.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:11:33.658601 2026] [security2:error] [pid 22739:tid 22739] [client 45.136.24.156:43955] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.24.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:11:33.658601 2026] [security2:error] [pid 22739:tid 22739] [client 45.136.24.156:43955] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.glendaleheritage.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.glendaleheritage.org"] [uri "/procters-in-glendale/"] [unique_id "avM0JZLs4VJV595ZwvdU5QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 10:43:33
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.136.24.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 05:43:25.538132 2026] [security2:error] [pid 15933:tid 15933] [client 45.136.24.156:14881] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.24.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 05:43:25.538132 2026] [security2:error] [pid 15933:tid 15933] [client 45.136.24.156:14881] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/harakat-hazm/"] [unique_id "aucXzfn9cLs5qWwV7cGhFgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-10-30 13:00:14
UTC ·
(1 week ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-10-15 13:32:23
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.136.24.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:32:08.300863 2026] [security2:error] [pid 21498:tid 21498] [client 45.136.24.156:62913] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.136.24.156 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:32:08.300863 2026] [security2:error] [pid 21498:tid 21498] [client 45.136.24.156:62913] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||garon.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "garon.us"] [uri "/images2/obits/Kanter, Robert M obit 2003.htm"] [unique_id "atDV2NRR9k8sALEIN0m8xwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
OnTheEdge
2026-09-14 13:02:16
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-14 13:02:16
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇿
Countryman
2026-09-14 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-10 07:21:41
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇩🇪
HandyTreff.de
2026-02-01 07:24:36
UTC ·
(9 months ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -36.038 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.
Bad Web Bot
Web App Attack
2026-01-26 11:26:10
UTC ·
(9 months ago)
IM360 WAF: Attempt to upload malware
Hacking
2026-01-23 13:52:33
UTC ·
(9 months ago)
Attempted brute force login to web vpn 1 time(s); last attempt for 2026.01.23 is noted in report timestamp
Hacking
Brute-Force
2026-01-05 02:12:37
UTC ·
(10 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
2025-11-24 14:43:03
UTC ·
(11 months ago)
IM360 WAF: Attempt to upload malware
Hacking
🇪🇸
10dencehispahard SL
2025-08-22 10:28:01
UTC ·
(1 year ago)
WP probing for vulnerabilities
Hacking
Exploited Host
2025-06-03 12:09:00
UTC ·
(1 year ago)
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2025-06-03 time=06:29:05 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1748950145712906768 tz="-0500" logid="0101039426" type="even ...
show more
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2025-06-03 time=06:29:05 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1748950145712906768 tz="-0500" logid="0101039426" type="event" subtype="vpn" level="alert" vd="root" logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=45.136.24.156 srccountry="United States" user="cjones" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in"
show less
VPN IP
