🇺🇸
TPI-Abuse
2026-11-12 18:41:51
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210350) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:41:47.364314 2026] [security2:error] [pid 20912:tid 20912] [client 147.78.182.191:52351] ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 13:41:47.364314 2026] [security2:error] [pid 20912:tid 20912] [client 147.78.182.191:52351] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||louiemobilemixology.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "louiemobilemixology.com"] [uri "/index.html"] [unique_id "avYIa5iVGVb3A0xUkuWWcwAAADk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 16:31:53
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 11:31:47.286564 2026] [security2:error] [pid 27882:tid 27882] [client 147.78.182.191:9611] ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 11:31:47.286564 2026] [security2:error] [pid 27882:tid 27882] [client 147.78.182.191:9611] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thenewplantation.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thenewplantation.org"] [uri "/prosperity-or-persecution-the-choice-between-trumps-economy-and-bidens-mob/"] [unique_id "auoMcyfxlLxaPnoXElZy2wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 02:11:35
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 22:11:30.484615 2026] [security2:error] [pid 29765:tid 29765] [client 147.78.182.191:57401] ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 22:11:30.484615 2026] [security2:error] [pid 29765:tid 29765] [client 147.78.182.191:57401] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||draindoctor.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "draindoctor.us"] [uri "/6.html"] [unique_id "auKrUiX4jKHw9oJROh5GSAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 19:38:29
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:38:24.432217 2026] [security2:error] [pid 30703:tid 30703] [client 147.78.182.191:40825] ...
show more
(mod_security) mod_security (id:210350) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:38:24.432217 2026] [security2:error] [pid 30703:tid 30703] [client 147.78.182.191:40825] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||canadianprimarysources.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "canadianprimarysources.org"] [uri "/intro2.htm"] [unique_id "auJPMA1ahQoXygBO5Um5ygAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
mrcrassi
2026-08-25 12:33:04
UTC ·
(2 months ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
This re ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /wp-login.php
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-29 15:59:47
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 11:59:40.075706 2026] [security2:error] [pid 20737:tid 20737] [client 147.78.182.191:54137] ...
show more
(mod_security) mod_security (id:225170) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 11:59:40.075706 2026] [security2:error] [pid 20737:tid 20737] [client 147.78.182.191:54137] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||metalgecko.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "metalgecko.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amojbAHPirwIa6kxVMEl5wAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 03:08:15
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 23:08:11.537177 2026] [security2:error] [pid 3766073:tid 3766073] [client 147.78.182.191:34 ...
show more
(mod_security) mod_security (id:225170) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 23:08:11.537177 2026] [security2:error] [pid 3766073:tid 3766073] [client 147.78.182.191:34661] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thorhauer.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thorhauer.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amV6Gy3jkLBJ3NvXSmf0VAAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-20 14:24:40
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇦
DRI
2026-07-18 23:07:20
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇭
backslash
2026-07-09 18:27:00
UTC ·
(4 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
nationaleventpros.com
2026-06-14 18:53:46
UTC ·
(4 months ago)
WordPress login attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-06-13 11:17:37
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 07:17:32.359837 2026] [security2:error] [pid 26301:tid 26301] [client 147.78.182.191:30869] ...
show more
(mod_security) mod_security (id:225170) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 07:17:32.359837 2026] [security2:error] [pid 26301:tid 26301] [client 147.78.182.191:30869] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||srosa.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "srosa.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ai08TE13hssBQ_FDoXkM2wAAAAc"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 17:49:41
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 13:49:34.100551 2026] [security2:error] [pid 23082:tid 23097] [client 147.78.182.191:42327] ...
show more
(mod_security) mod_security (id:225170) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 13:49:34.100551 2026] [security2:error] [pid 23082:tid 23097] [client 147.78.182.191:42327] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.siriuspharmaceuticals.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.siriuspharmaceuticals.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aihSLob_RLZjQ2ag5BSoOQAAAAs"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 18:25:17
UTC ·
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 14:25:12.927558 2026] [security2:error] [pid 10232:tid 10232] [client 147.78.182.191:53985] ...
show more
(mod_security) mod_security (id:225170) triggered by 147.78.182.191 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 14:25:12.927558 2026] [security2:error] [pid 10232:tid 10232] [client 147.78.182.191:53985] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||iceofparadise.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "iceofparadise.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiW3iL8Hp-OWnOa7oAuhUwAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-05-20 05:15:10
UTC ·
(5 months ago)
WordPress login attempt
Brute-Force
