Total reports
7 from
5 distinct
reporters
First reported
June 17th 2026
Most recent report
5 days ago
Last 60 days
Top reporter locations
🇩🇪
Germany
1
🇯🇵
Japan
1
🇺🇸
United States of America
1
Most common categories
Bad Web Bot
2
Web App Attack
2
Hacking
1
Brute-Force
1
Open Proxy
1
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-11-08 01:04:38
UTC ·
(5 days ago)
(mod_security) mod_security (id:240950) triggered by 5.254.82.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:04:31.239423 2026] [security2:error] [pid 9132:tid 9132] [client 5.254.82.179:51415] ModSe ...
show more
(mod_security) mod_security (id:240950) triggered by 5.254.82.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:04:31.239423 2026] [security2:error] [pid 9132:tid 9132] [client 5.254.82.179:51415] ModSecurity: Access denied with code 403 (phase 1). Pattern match "\\\\D" at TX:1. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "4530"] [id "240950"] [rev "2"] [msg "COMODO WAF: XSS & SQL injection vulnerability in Pragyan CMS 3.0 (CVE-2015-1471)||www.nancyscafeandcatering.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "www.nancyscafeandcatering.com"] [uri "/wp-content/themes/eatery/nav.php"] [unique_id "au_Knxg54zdaT-Vq9TVULQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2026-11-07 22:58:45
UTC ·
(5 days ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after malicious redirect / external currentUrl probe. Evidence: Absolute external URL in currentUrl (redirector/spam probe)
Hacking
Bad Web Bot
Web App Attack
🇯🇵
SentinalX by uzumaru
2026-10-31 04:40:28
UTC ·
(1 week ago)
Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: www.gstatic.com:443
Open Proxy
Port Scan
🇹🇷
Doruk
2026-08-21 22:10:01
UTC ·
(2 months ago)
Unauthorized connection attempt
Brute-Force
🇺🇸
TPI-Abuse
2026-06-17 18:42:19
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 5.254.82.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 14:42:15.903004 2026] [security2:error] [pid 16185:tid 16206] [client 5.254.82.179:1840] ModS ...
show more
(mod_security) mod_security (id:225170) triggered by 5.254.82.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 14:42:15.903004 2026] [security2:error] [pid 16185:tid 16206] [client 5.254.82.179:1840] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||41bravo.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "41bravo.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajLqhxi1GnipDOthXy4dcgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-17 18:24:58
UTC ·
(4 months ago)
IM360 WAF: PAFE File Upload Vulnerability MV:xxx.php
Hacking
🇺🇸
TPI-Abuse
2026-06-17 11:53:07
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 5.254.82.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 07:53:01.438092 2026] [security2:error] [pid 8163:tid 8163] [client 5.254.82.179:39626] ModSe ...
show more
(mod_security) mod_security (id:225170) triggered by 5.254.82.179 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 07:53:01.438092 2026] [security2:error] [pid 8163:tid 8163] [client 5.254.82.179:39626] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||www.joeordie.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.joeordie.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajKKnaR4-eZHAPReG4NLnAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
