Total reports
4 from
1 distinct
reporter
First reported
October 20th 2026
Most recent report
18 hours ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
4
Most common categories
Brute-Force
4
Web App Attack
4
Bad Web Bot
4
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-11-10 09:10:20
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210350) triggered by 172.83.254.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:10:15.091555 2026] [security2:error] [pid 22938:tid 22938] [client 172.83.254.67:51331] M ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.254.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 04:10:15.091555 2026] [security2:error] [pid 22938:tid 22938] [client 172.83.254.67:51331] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.jerusalem-korczak-home.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.jerusalem-korczak-home.com"] [uri "/bib/kre/kr.html"] [unique_id "avLfd99UkFmbfjoZrt36FwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 16:25:11
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 172.83.254.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:24:58.131248 2026] [security2:error] [pid 21456:tid 21456] [client 172.83.254.67:26205] M ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.254.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 12:24:58.131248 2026] [security2:error] [pid 21456:tid 21456] [client 172.83.254.67:26205] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ohwaitiforgot.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ohwaitiforgot.com"] [uri "/2012/09/11/2012-book-22-lionel-asbo/"] [unique_id "at9-2qFqjXD09vIWbEtsFAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 05:30:19
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 172.83.254.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 01:30:12.575104 2026] [security2:error] [pid 11338:tid 11338] [client 172.83.254.67:52221] M ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.254.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 01:30:12.575104 2026] [security2:error] [pid 11338:tid 11338] [client 172.83.254.67:52221] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ken-parker.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ken-parker.com"] [uri "/newnaninfo.html"] [unique_id "at2T5ONxFBsU5N6KCxXxrgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 17:16:14
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 172.83.254.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 13:16:08.547300 2026] [security2:error] [pid 7966:tid 7975] [client 172.83.254.67:61071] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.254.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 13:16:08.547300 2026] [security2:error] [pid 7966:tid 7975] [client 172.83.254.67:61071] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mentzlaw.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mentzlaw.com"] [uri "/newsletters/issue23.html"] [unique_id "ateh2PpEQHeheINxF2eS0wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
