🇺🇸
TPI-Abuse
2026-10-25 03:10:45
(21 hours ago)
(mod_security) mod_security (id:210350) triggered by 172.83.255.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.255.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 23:10:41.090689 2026] [security2:error] [pid 20347:tid 20347] [client 172.83.255.183:9477] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||canebrakes.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "canebrakes.com"] [uri "/"] [unique_id "at1zMYnQAlSonOlLDanNEQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 05:57:52
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 172.83.255.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.255.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 01:57:47.906469 2026] [security2:error] [pid 347:tid 347] [client 172.83.255.183:20027] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.glendaleheritage.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.glendaleheritage.org"] [uri "/glendale/tour/"] [unique_id "atxI27SEyVWsDm-oidkMugAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-23 05:12:00
(2 days ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇨🇦
DRI
2026-10-23 00:17:28
(3 days ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 15:25:24
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 172.83.255.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210350) triggered by 172.83.255.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 11:25:18.439664 2026] [security2:error] [pid 28438:tid 28438] [client 172.83.255.183:40413] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.whodatnation.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.whodatnation.com"] [uri "/2009/12/30/no-will-no-way-new-orleans-saints-defensive-end-shouldve-been-overlooked/"] [unique_id "atjZXn4XxYMJjuvN_F1MtgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 23:48:38
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 172.83.255.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 172.83.255.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 19:48:34.185226 2026] [security2:error] [pid 27215:tid 27215] [client 172.83.255.183:21059] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||secuencia.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "secuencia.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ain30jMzns8mF50JYyqK_wAAAAk"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-06-10 20:21:02
(4 months ago)
block ruleset 486D2EE5E731CC049D1E480D68D04DFFE28AADF1
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-06 18:37:37
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 172.83.255.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 172.83.255.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 14:37:31.054139 2026] [security2:error] [pid 21064:tid 21084] [client 172.83.255.183:28455] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||neotienda.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "neotienda.com"] [uri "/wp-json/wp/v2/users"] [unique_id "aiRo6wBNbh6sTyVLjj3yAQAAANA"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-06-04 20:26:15
(4 months ago)
Fail2Ban banned 172.83.255.183 for security violations in jail wp-armour. Log: 2026/06/04 20:26:14 [ ...
show more
Fail2Ban banned 172.83.255.183 for security violations in jail wp-armour. Log: 2026/06/04 20:26:14 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 172.83.255.183 | Target: wplogin" , client: 172.83.255.183, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇺🇸
TPI-Abuse
2026-05-23 08:07:06
(5 months ago)
(mod_security) mod_security (id:225170) triggered by 172.83.255.183 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:225170) triggered by 172.83.255.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 04:06:59.098401 2026] [security2:error] [pid 15314:tid 15314] [client 172.83.255.183:10141] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||zodiacwin.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "zodiacwin.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ahFgI1ATuBKJZNinEz7PKAAAAA0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-05-19 14:39:22
(5 months ago)
Fail2Ban banned 172.83.255.183 for security violations in jail wp-armour. Log: 2026/05/19 14:39:21 [ ...
show more
Fail2Ban banned 172.83.255.183 for security violations in jail wp-armour. Log: 2026/05/19 14:39:21 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 172.83.255.183 | Target: wplogin" , client: 172.83.255.183, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "http://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇩🇪
C C
2026-02-25 14:31:50
(8 months ago)
Distributed proxy crawl wave (61 requests, 61 unique IPs, 28 ASNs in 590 sec); unauth. bot traffic w ...
show more
Distributed proxy crawl wave (61 requests, 61 unique IPs, 28 ASNs in 590 sec); unauth. bot traffic w/o verification; first observed at 2026-02-25T02:04:28+01:00
show less
Bad Web Bot
Web App Attack
