🇺🇸
TPI-Abuse
2026-11-14 10:02:18
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210350) triggered by 5.183.254.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:02:01.748829 2026] [security2:error] [pid 935148:tid 935148] [client 5.183.254.90:52643] M ...
show more
(mod_security) mod_security (id:210350) triggered by 5.183.254.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:02:01.748829 2026] [security2:error] [pid 935148:tid 935148] [client 5.183.254.90:52643] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.freepatternstocrochet.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.freepatternstocrochet.com"] [uri "/Free Crochet Patterns"] [unique_id "avgxmTZVN7EPmKYOBwbCnQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 00:57:41
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 5.183.254.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:57:28.440780 2026] [security2:error] [pid 11653:tid 11653] [client 5.183.254.90:23517] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 5.183.254.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:57:28.440780 2026] [security2:error] [pid 11653:tid 11653] [client 5.183.254.90:23517] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||acquivest.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "acquivest.net"] [uri "/blog/obvious-and-not-so-obvious-ways-to-lead-your-business-to-a-successful-sale.html"] [unique_id "avJr-EB1hMhP8-A3mBTbYwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 00:26:43
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 5.183.254.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:26:29.029814 2026] [security2:error] [pid 2493:tid 2493] [client 5.183.254.90:40633] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 5.183.254.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:26:29.029814 2026] [security2:error] [pid 2493:tid 2493] [client 5.183.254.90:40633] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||whengarbotalks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "whengarbotalks.com"] [uri "/external sites/When Garbo Talks! Comes To ICT, Previews Begin 10 12 2010 09 20.htm"] [unique_id "avJktWD0QPVjwaZfKQkpwgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 13:40:49
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 5.183.254.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:40:35.213763 2026] [security2:error] [pid 31301:tid 31301] [client 5.183.254.90:12335] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 5.183.254.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 08:40:35.213763 2026] [security2:error] [pid 31301:tid 31301] [client 5.183.254.90:12335] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||celebritybikinigossip.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "celebritybikinigossip.com"] [uri "/2012/01/olivia-palermo-bikini-pictures/"] [unique_id "avHNU1dXZcQA9y6lxUYRHQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-08 00:42:11
UTC ·
(6 days ago)
Web App Attack
Web App Attack
🇫🇷
Sklurk
2026-11-07 00:20:42
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇨🇭
backslash
2026-11-03 20:21:02
UTC ·
(1 week ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-31 14:19:57
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 5.183.254.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 10:19:42.197405 2026] [security2:error] [pid 24743:tid 24743] [client 5.183.254.90:39653] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 5.183.254.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 10:19:42.197405 2026] [security2:error] [pid 24743:tid 24743] [client 5.183.254.90:39653] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.drgas.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.drgas.com"] [uri "/add_cart.asp"] [unique_id "auX4_jdJgmXn4znaSSBfVgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 18:20:42
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 5.183.254.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:20:24.697735 2026] [security2:error] [pid 2003:tid 2003] [client 5.183.254.90:13961] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 5.183.254.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:20:24.697735 2026] [security2:error] [pid 2003:tid 2003] [client 5.183.254.90:13961] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||passwordresearch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "passwordresearch.com"] [uri "/papers/paper665.html"] [unique_id "auOOaD2CCjBu_ebnBByTcAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 20:18:48
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 5.183.254.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 16:18:35.070493 2026] [security2:error] [pid 15266:tid 15266] [client 5.183.254.90:52323] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 5.183.254.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 16:18:35.070493 2026] [security2:error] [pid 15266:tid 15266] [client 5.183.254.90:52323] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jimlawless.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jimlawless.net"] [uri "/blog/posts/blackhatpython2/"] [unique_id "auJYm6xKQfFiOGfUHBDQpwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 22:16:55
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 5.183.254.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 18:16:39.729779 2026] [security2:error] [pid 979:tid 979] [client 5.183.254.90:21079] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 5.183.254.90 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 18:16:39.729779 2026] [security2:error] [pid 979:tid 979] [client 5.183.254.90:21079] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||compassionfatigue.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "compassionfatigue.org"] [uri "/founders-blog/the-way-forward"] [unique_id "auEix_8G4ziAj1eq_GTJqQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-10-24 07:20:54
UTC ·
(3 weeks ago)
Web App Attack
Web App Attack
🇺🇸
myagent.site
2026-01-21 13:56:48
UTC ·
(9 months ago)
Blocking for trying to access an exploit file: /xmlrpc.php
Hacking
🇩🇪
stinpriza
2026-01-21 12:00:34
UTC ·
(9 months ago)
Web App Attack
Web App Attack
🇨🇿
lp
2025-10-09 18:24:48
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 5.183.254.90
2025-10-09T18:59:20+02:00 vpn Access-Reject 'webdatacorporation' station: 5.183.254.90 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 5.183.254.90
2025-10-09T18:59:20+02:00 vpn Access-Reject 'webdatacorporation' station: 5.183.254.90 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
