🇺🇸
TPI-Abuse
2026-10-29 02:51:58
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 5.183.254.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 22:51:42.832342 2026] [security2:error] [pid 32161:tid 32161] [client 5.183.254.30:58487] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 5.183.254.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 22:51:42.832342 2026] [security2:error] [pid 32161:tid 32161] [client 5.183.254.30:58487] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cbcfargo.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cbcfargo.com"] [uri "/site/Resources/devotionals/2026-02-15.php"] [unique_id "auK0vv91BFz2mWe5sns8tQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 13:18:27
(15 hours ago)
(mod_security) mod_security (id:210350) triggered by 5.183.254.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 09:18:10.212678 2026] [security2:error] [pid 19863:tid 19863] [client 5.183.254.30:49297] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 5.183.254.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 09:18:10.212678 2026] [security2:error] [pid 19863:tid 19863] [client 5.183.254.30:49297] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||mathieu.bouville.name|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "mathieu.bouville.name"] [uri "/en/finance/articles/conservative-investment-stocks.html"] [unique_id "auH2EqV7Zprf2fvVR0YmEQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 21:04:10
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 5.183.254.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 17:03:54.906018 2026] [security2:error] [pid 22843:tid 22843] [client 5.183.254.30:15339] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 5.183.254.30 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 17:03:54.906018 2026] [security2:error] [pid 22843:tid 22843] [client 5.183.254.30:15339] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.geriterry.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.geriterry.com"] [uri "/knowledge/buyers-the-journey-to-your-new-home/"] [unique_id "auERur8fw55tSxuvoxTW4gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Cyber Crusader
2026-10-19 20:43:17
(1 week ago)
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan
Hacking
Brute-Force
🇲🇽
octageeks.com
2026-10-04 04:09:38
(3 weeks ago)
Wordpress malicious attack:[octawp]
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
2025-03-28 10:02:27
(1 year ago)
This IP was involved in an brute force and password spray attack on 2025/03/28 04:59:51
Port Scan
Brute-Force
Exploited Host
Web App Attack
🇷🇺
sms.ru
2024-09-28 20:35:05
(2 years ago)
SMS pumping attack from foreign country
DDoS Attack
🇺🇸
JL41414141
2024-05-27 07:40:52
(2 years ago)
5.183.254.30 - - [27/May/2024:07:40:50 +0000] "GET /remote/login HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203" "-"
5.183.254.30 - - [27/May/2 ...
show more
5.183.254.30 - - [27/May/2024:07:40:50 +0000] "GET /remote/login HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203" "-"
5.183.254.30 - - [27/May/2024:07:40:51 +0000] "GET /login HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203" "-"
...
show less
Web Spam
Hacking
2021-05-28 15:45:00
(5 years ago)
Credential Stuffing
Brute-Force
2021-05-22 09:25:18
(5 years ago)
aiSCRATCH r1.15 - suspicious http requests
Exploited Host
🇨🇭
backslash
2021-02-12 07:26:06
(5 years ago)
Brute-Force
