🇺🇸
TPI-Abuse
2026-11-08 14:39:14
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:39:08.669350 2026] [security2:error] [pid 13010:tid 13010] [client 172.83.253.58:11667] M ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:39:08.669350 2026] [security2:error] [pid 13010:tid 13010] [client 172.83.253.58:11667] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||artglass-jerusalem.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "artglass-jerusalem.net"] [uri "/hebrew/\\xd7\\x90\\xd7\\x95\\xd7\\x93\\xd7\\x95\\xd7\\xaa-\\xd7\\x94\\xd7\\x90\\xd7\\x9e\\xd7\\x9f.html"] [unique_id "avCJjAj68KevQv76TvVgkQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 20:12:10
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 15:12:04.873626 2026] [security2:error] [pid 14181:tid 14181] [client 172.83.253.58:29385] M ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 15:12:04.873626 2026] [security2:error] [pid 14181:tid 14181] [client 172.83.253.58:29385] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.rogerg.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.rogerg.com"] [uri "/books/L/Lander, Christian - Stuff White People Like.mobi"] [unique_id "au-GFIjg_B3ajVDFBAKURAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 21:58:03
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 16:57:55.924198 2026] [security2:error] [pid 4060:tid 4060] [client 172.83.253.58:13509] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 16:57:55.924198 2026] [security2:error] [pid 4060:tid 4060] [client 172.83.253.58:13509] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||theateroobleck.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "theateroobleck.com"] [uri "/news/more-on-a-memory-palace-of-fear"] [unique_id "auz74062YXYvMsM5gmEu-gAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-04 00:36:54
UTC ·
(6 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 16:11:06
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 11:11:02.808380 2026] [security2:error] [pid 8277:tid 8277] [client 172.83.253.58:32407] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 11:11:02.808380 2026] [security2:error] [pid 8277:tid 8277] [client 172.83.253.58:32407] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.pinehillwineworks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.pinehillwineworks.com"] [uri "/"] [unique_id "audklvXt-9g4w9Bzfggq6AAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 10:26:31
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 06:26:25.299740 2026] [security2:error] [pid 6715:tid 6715] [client 172.83.253.58:16371] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 06:26:25.299740 2026] [security2:error] [pid 6715:tid 6715] [client 172.83.253.58:16371] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2013/01/17/mali-update-african-regional-troops-arriving-france-playing-wack-mole/"] [unique_id "auRw0f_W8rIIgQI0sfZolQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 21:48:21
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 17:48:18.765446 2026] [security2:error] [pid 18214:tid 18214] [client 172.83.253.58:13489] M ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 17:48:18.765446 2026] [security2:error] [pid 18214:tid 18214] [client 172.83.253.58:13489] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jimlawless.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jimlawless.net"] [uri "/blog/posts/jsbatch/"] [unique_id "auEcIiuhdnNfIhCFElCQEAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 18:32:06
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 14:32:02.231013 2026] [security2:error] [pid 10754:tid 10784] [client 172.83.253.58:63223] M ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 14:32:02.231013 2026] [security2:error] [pid 10754:tid 10784] [client 172.83.253.58:63223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||atechtransmission.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "atechtransmission.com"] [uri "/"] [unique_id "auDuIo39arfnl1LItyZLTAAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 03:11:19
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 23:11:15.408653 2026] [security2:error] [pid 18654:tid 18654] [client 172.83.253.58:57331] M ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 23:11:15.408653 2026] [security2:error] [pid 18654:tid 18654] [client 172.83.253.58:57331] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.illinois-online.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.illinois-online.org"] [uri "/krassa/past/default.html"] [unique_id "atgtU_aqABOX4c8MitOGNQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 22:24:41
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 18:24:33.614378 2026] [security2:error] [pid 20237:tid 20237] [client 172.83.253.58:10691] M ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.253.58 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 18:24:33.614378 2026] [security2:error] [pid 20237:tid 20237] [client 172.83.253.58:10691] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.oss-in-atm.info|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.oss-in-atm.info"] [uri "/20051207/bios.php"] [unique_id "atfqIXYQlO3ymQzx0UjluwAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇮
administrator
2026-10-09 22:05:46
UTC ·
(1 month ago)
2026-10-08 05:45:46,375 fail2ban.actions [2774549]: NOTICE [apache-fakegooglebot] Ban 172.83.253.58
2026-10-08 05:45:46,375 fail2ban.actions [2774549]: NOTICE [apache-fakegooglebot] Ban 172.83.253.58
2026-10-08 05:45:46,375 fail2ban.a ...
show more
2026-10-08 05:45:46,375 fail2ban.actions [2774549]: NOTICE [apache-fakegooglebot] Ban 172.83.253.58
2026-10-08 05:45:46,375 fail2ban.actions [2774549]: NOTICE [apache-fakegooglebot] Ban 172.83.253.58
2026-10-08 05:45:46,375 fail2ban.actions [2774549]: NOTICE [apache-fakegooglebot] Ban 172.83.253.58
...
show less
Bad Web Bot
Web Spam
Email Spam
Blog Spam
Port Scan
Brute-Force
Web App Attack
🇫🇮
inlink.ltd
2026-06-02 05:59:43
UTC ·
(5 months ago)
Known malicious PHP file or CMS probe
Web App Attack
2026-01-14 12:52:11
UTC ·
(9 months ago)
IM360 WAF: Old style account creation and modification in Joomla! MV:registration
Web App Attack
2026-01-14 09:05:26
UTC ·
(9 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 11-05.172.83.253.58.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
2026-01-12 08:18:14
UTC ·
(9 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 10-18.172.83.253.58.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
