🇺🇸
TPI-Abuse
2026-11-15 01:11:18
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210350) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:11:00.807542 2026] [security2:error] [pid 28774:tid 28774] [client 5.183.254.193:19541] M ...
show more
(mod_security) mod_security (id:210350) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:11:00.807542 2026] [security2:error] [pid 28774:tid 28774] [client 5.183.254.193:19541] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bodybuildbid.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bodybuildbid.com"] [uri "/articles/shoulders/build-big-powerful-shoulders.html"] [unique_id "avkGpNnbWEdKfwQOM2I3mgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 18:08:53
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:08:35.770598 2026] [security2:error] [pid 6737:tid 6737] [client 5.183.254.193:49987] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:08:35.770598 2026] [security2:error] [pid 6737:tid 6737] [client 5.183.254.193:49987] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||kingstoneproperties.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "kingstoneproperties.com"] [uri "/Los_Angeles_Leasing.php"] [unique_id "avSvI017BD_kgP4JHJiigAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-08 01:54:08
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 21:41:12
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:40:58.106393 2026] [security2:error] [pid 8368:tid 8368] [client 5.183.254.193:38443] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:40:58.106393 2026] [security2:error] [pid 8368:tid 8368] [client 5.183.254.193:38443] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||meganmurph.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "meganmurph.com"] [uri "/"] [unique_id "auJr6jGJ_UXDQWEVNRvklQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 10:29:15
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 06:28:59.027344 2026] [security2:error] [pid 11449:tid 11449] [client 5.183.254.193:60951] M ...
show more
(mod_security) mod_security (id:210350) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 06:28:59.027344 2026] [security2:error] [pid 11449:tid 11449] [client 5.183.254.193:60951] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||niximperial.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "niximperial.com"] [uri "/nixp04m.html"] [unique_id "auHOa8soFeoTNrbCtoCgAAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-10-27 04:48:38
UTC ·
(2 weeks ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇲🇽
octageeks.com
2026-10-24 04:13:46
UTC ·
(3 weeks ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 10:06:00
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:225170) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 06:05:42.872647 2026] [security2:error] [pid 16267:tid 16267] [client 5.183.254.193:13671] M ...
show more
(mod_security) mod_security (id:225170) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 06:05:42.872647 2026] [security2:error] [pid 16267:tid 16267] [client 5.183.254.193:13671] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||zenithxen.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "zenithxen.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atsxdrhi5m3lWlS1NthmUQAAAA8"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:40:32
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:40:14.715107 2026] [security2:error] [pid 10520:tid 10585] [client 5.183.254.193:26533] M ...
show more
(mod_security) mod_security (id:210350) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:40:14.715107 2026] [security2:error] [pid 10520:tid 10585] [client 5.183.254.193:26533] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||econpage.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "econpage.com"] [uri "/301/oldexams/mt3/index-blank.html"] [unique_id "atDXviGbxUFEqaBYi4N0MwAAAEI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 00:09:33
UTC ·
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 20:09:16.780587 2026] [security2:error] [pid 5068:tid 5068] [client 5.183.254.193:39755] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 20:09:16.780587 2026] [security2:error] [pid 5068:tid 5068] [client 5.183.254.193:39755] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||barigby.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "barigby.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aswlLKA-ADveSevU5wTzjQAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-11 16:08:43
UTC ·
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 12:08:27.381031 2026] [security2:error] [pid 17195:tid 17263] [client 5.183.254.193:30863] M ...
show more
(mod_security) mod_security (id:225170) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 12:08:27.381031 2026] [security2:error] [pid 17195:tid 17263] [client 5.183.254.193:30863] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.siriuspharmaceuticals.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.siriuspharmaceuticals.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asu0e6Z7fOiiqSYUvPovJwAAAcE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 11:52:31
UTC ·
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 07:52:16.933045 2026] [security2:error] [pid 2687:tid 2687] [client 5.183.254.193:47903] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 07:52:16.933045 2026] [security2:error] [pid 2687:tid 2687] [client 5.183.254.193:47903] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||abbysue.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "abbysue.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aseD8MczUuf6LpD-yQUx5AAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 05:14:39
UTC ·
(1 month ago)
(mod_security) mod_security (id:225170) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 01:14:22.928474 2026] [security2:error] [pid 16615:tid 16615] [client 5.183.254.193:10261] M ...
show more
(mod_security) mod_security (id:225170) triggered by 5.183.254.193 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 01:14:22.928474 2026] [security2:error] [pid 16615:tid 16615] [client 5.183.254.193:10261] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||rooksfamily.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "rooksfamily.com"] [uri "/wp-json/wp/v2/users"] [unique_id "asHgrvWtiq0AKngHr645YAAAABQ"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-10-04 04:09:07
UTC ·
(1 month ago)
Wordpress malicious attack:[octawp]
Web App Attack
2026-09-30 14:25:38
UTC ·
(1 month ago)
Web application attack detected.
Web App Attack
