🇺🇸
TPI-Abuse
2026-11-07 12:16:44
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 45.147.10.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 07:16:41.242687 2026] [security2:error] [pid 29620:tid 29620] [client 45.147.10.226:35423] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.10.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 07:16:41.242687 2026] [security2:error] [pid 29620:tid 29620] [client 45.147.10.226:35423] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lemoulinavent.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lemoulinavent.org"] [uri "/en/attractions/la-machine-a-voler/le-baril-volant/"] [unique_id "au8WqezAmWHPl1itXwqLEwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 21:06:11
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.147.10.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 16:06:04.290945 2026] [security2:error] [pid 1710:tid 1710] [client 45.147.10.226:44531] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.10.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 16:06:04.290945 2026] [security2:error] [pid 1710:tid 1710] [client 45.147.10.226:44531] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.assistfeed.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.assistfeed.com"] [uri "/FelineAnorexia.htm"] [unique_id "auepvOdNyD_N9J3unBoBIQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 01:01:52
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.147.10.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 21:01:48.307644 2026] [security2:error] [pid 26357:tid 26357] [client 45.147.10.226:17703] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.10.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 21:01:48.307644 2026] [security2:error] [pid 26357:tid 26357] [client 45.147.10.226:17703] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/01/01/tunisias-rachid-ghannouchi-on-islamic-democracy/"] [unique_id "auPsfCTuXDk6HHaU-EXeNAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 14:43:07
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.147.10.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 10:43:04.272494 2026] [security2:error] [pid 26795:tid 26795] [client 45.147.10.226:39059] M ...
show more
(mod_security) mod_security (id:210350) triggered by 45.147.10.226 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 10:43:04.272494 2026] [security2:error] [pid 26795:tid 26795] [client 45.147.10.226:39059] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||naghmehfarahmand.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "naghmehfarahmand.com"] [uri "/"] [unique_id "at4VeKGUnUq48vJCmveHCAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
sandra361
2026-10-04 08:46:32
UTC ·
(1 month ago)
Port scan detected: 15 attempts across 1 port (30005). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=45.147.10.226 LEN=40 TOS=0x00 PREC=0x00 TTL=120 ID=14306 DF PROTO=TCP SPT=45547 DPT=30005 WINDOW=42340 RES=0x00 ACK FIN URGP=0
Port Scan
🇵🇱
axiomofchoice.xyz
2026-10-01 01:48:11
UTC ·
(1 month ago)
endlessh trap: attempts=2 total_time_stuck=80.092s
Port Scan
SSH
Hacking
🇵🇱
axiomofchoice.xyz
2026-10-01 01:48:11
UTC ·
(1 month ago)
endlessh trap: attempts=2 total_time_stuck=80.092s
Port Scan
SSH
Hacking
2025-06-11 11:37:00
UTC ·
(1 year ago)
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2025-06-10 time=22:54:50 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1749614090778184201 tz="-0500" logid="0101039426" type="even ...
show more
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2025-06-10 time=22:54:50 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1749614090778184201 tz="-0500" logid="0101039426" type="event" subtype="vpn" level="alert" vd="root" logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=45.147.10.226 srccountry="United States" user="jscott" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in"
show less
VPN IP
