🇺🇸
TPI-Abuse
2026-05-13 13:33:18
(3 weeks ago)
(mod_security) mod_security (id:211030) triggered by 5.183.255.98 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:211030) triggered by 5.183.255.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 09:33:00.839128 2026] [security2:error] [pid 18671:tid 18671] [client 5.183.255.98:29837] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at ARGS. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "17"] [id "211030"] [rev "3"] [msg "COMODO WAF: LDAP Injection Attack||www.genesis-castle.com|F|2"] [data "Matched Data: (%'%~%'%|%|%( found within ARGS: 0"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.genesis-castle.com"] [uri "/gallery/index.php"] [unique_id "agR9jALn7D0H5hvTu2IO9AAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-05-12 10:21:16
(3 weeks ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-05-06 14:25:18
(4 weeks ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-05-01 13:50:23
(1 month ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-17 04:10:35
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 5.183.255.98 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 5.183.255.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 00:10:19.099159 2026] [security2:error] [pid 25661:tid 25661] [client 5.183.255.98:62887] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||k-h-w.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "k-h-w.com"] [uri "/wp-json/wp/v2/users"] [unique_id "abjUKzjoBvPVu7t0oOsBgAAAABE"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-02-06 23:09:34
(3 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 5.183.255.98 (NL/The Netherlands/-): 1 in the ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 5.183.255.98 (NL/The Netherlands/-): 1 in the last 3600 secs (0-196)
show less
Hacking
🇫🇷
masterguru
2026-02-06 22:41:19
(3 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 5.183.255.98 (NL/The Netherlands/-): 1 in the ...
show more
(modsec_5015) ModSec 5015: Suspicious User-Agent from 5.183.255.98 (NL/The Netherlands/-): 1 in the last 3600 secs (0-197)
show less
Hacking
🇪🇸
10dencehispahard SL
2026-01-26 11:53:29
(4 months ago)
Wordpress probing for vulnerabilities
Hacking
Exploited Host
🇲🇹
Malta
2026-01-24 19:38:52
(4 months ago)
5.183.255.98 - - [24/Jan/2026:20:38:52 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT ...
show more
5.183.255.98 - - [24/Jan/2026:20:38:52 +0100] "POST /wp-login.php HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack
2026-01-21 02:26:02
(4 months ago)
wordpress-trap
Web App Attack
2026-01-15 01:43:03
(4 months ago)
WordPress Brute Force
Brute-Force
🇮🇩
zam
2026-01-14 21:00:13
(4 months ago)
5.183.255.98 - - [14/Jan/2026:21:00:11 +0000] "POST /wp-login.php HTTP/1.1" 404 82096
Web App Attack
🇺🇸
nowyouknow
2025-07-18 15:06:38
(10 months ago)
(From [email protected] ) We have hacked your website https://decubellisfamilyc ...
show more
(From [email protected] ) We have hacked your website https://decubellisfamilychiropractic.com and extracted your databases.
How did this happen?
Our team has found a vulnerability within your site that we were able to exploit. After finding the vulnerability we were able to get your database credentials and extract your entire database and move the information to an offshore server.
What does this mean?
We will systematically go through a series of steps of totally damaging your reputation. First your database will be leaked or sold to the highest bidder which they will use with whatever their intentions are. Next if there are e-mails found they will be e-mailed that their information has been sold or leaked and your site https://decubellisfamilychiropractic.com was at fault thusly damaging your reputation and having angry customers/associates with whatever angry customers/associates do. Lastly any links that you have indexed in the search engines will be de-indexed based off
show less
Phishing
Web Spam
🇺🇸
TPI-Abuse
2025-04-21 14:51:44
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 5.183.255.98 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 5.183.255.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 21 10:51:28.337778 2025] [security2:error] [pid 737855:tid 737855] [client 5.183.255.98:20487] [client 5.183.255.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||microkerneltechnologies.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "microkerneltechnologies.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aAZbcLD5ghWTPFG3Bp39uAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-04-12 23:53:14
(1 year ago)
(mod_security) mod_security (id:225170) triggered by 5.183.255.98 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 5.183.255.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 12 19:52:56.973311 2025] [security2:error] [pid 2541551:tid 2541551] [client 5.183.255.98:41539] [client 5.183.255.98] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||cayman-islands-real-estate.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "cayman-islands-real-estate.com"] [uri "/wp-json/wp/v2/users"] [unique_id "Z_r82CajvQ81XMFTCRJqlQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack