🇺🇸
TPI-Abuse
2026-11-15 01:36:19
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210350) triggered by 83.142.52.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:36:12.628273 2026] [security2:error] [pid 5885:tid 5885] [client 83.142.52.175:40083] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.52.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:36:12.628273 2026] [security2:error] [pid 5885:tid 5885] [client 83.142.52.175:40083] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||jerusalem-temple-today.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "jerusalem-temple-today.com"] [uri "/for/viewtopic.php"] [unique_id "avkMjO8JUofSlYS9jYxPEQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 00:19:58
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 83.142.52.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 20:19:53.034534 2026] [security2:error] [pid 20646:tid 20646] [client 83.142.52.175:31277] M ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.52.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 20:19:53.034534 2026] [security2:error] [pid 20646:tid 20646] [client 83.142.52.175:31277] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.caquintet.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.caquintet.com"] [uri "/"] [unique_id "auU0KS42siSm_ORPuHK_qwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 04:01:58
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 83.142.52.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 00:01:54.390247 2026] [security2:error] [pid 5617:tid 5617] [client 83.142.52.175:43313] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.52.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 00:01:54.390247 2026] [security2:error] [pid 5617:tid 5617] [client 83.142.52.175:43313] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.10bestattorneys.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.10bestattorneys.com"] [uri "/arizona-attorneys.htm"] [unique_id "atrcMjpzcFwD2rdeqn7S5wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 20:37:00
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 83.142.52.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:36:55.940260 2026] [security2:error] [pid 6354:tid 6354] [client 83.142.52.175:27545] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.52.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:36:55.940260 2026] [security2:error] [pid 6354:tid 6354] [client 83.142.52.175:27545] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||thewanderinghermit.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "thewanderinghermit.com"] [uri "/x-tarot/gateway.htm"] [unique_id "atkiZ6u3eDsB_Y9DXSdGqQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇷
Staging
2026-10-18 18:09:00
UTC ·
(3 weeks ago)
PERMA banned ASN, highly polluted
Bad Web Bot
Hacking
🇺🇸
TPI-Abuse
2026-07-23 02:03:17
UTC ·
(3 months ago)
(mod_security) mod_security (id:210350) triggered by 83.142.52.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 22:03:10.399249 2026] [security2:error] [pid 2999997:tid 2999997] [client 83.142.52.175:6382 ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.52.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 22:03:10.399249 2026] [security2:error] [pid 2999997:tid 2999997] [client 83.142.52.175:63829] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ironpagoda.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ironpagoda.com"] [uri "/"] [unique_id "amF2XowyzH9w0zUNjZzprwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
JimArchon72
2026-07-08 13:35:02
UTC ·
(4 months ago)
2026/07/08 13:31:15 "GET /wp-login.php HTTP/1.1"
Web App Attack
🇩🇪
Skyrider
2026-03-23 13:30:19
UTC ·
(7 months ago)
83.142.52.175 - - [23/Mar/2026:14:30:11 +0100] "POST /xmlrpc.php HTTP/2.0" 404 114 "-" "Apache-HttpClient/4.5.13 (Java/11.0.30)"
83.142.52.175 - - [23/Mar/2026:14:30:13 +0100] "GET /wp-login.php HTTP/2.0" 404 178 "https://www.google.com" "Mozilla/5.0 ...
show more
83.142.52.175 - - [23/Mar/2026:14:30:11 +0100] "POST /xmlrpc.php HTTP/2.0" 404 114 "-" "Apache-HttpClient/4.5.13 (Java/11.0.30)"
83.142.52.175 - - [23/Mar/2026:14:30:13 +0100] "GET /wp-login.php HTTP/2.0" 404 178 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
83.142.52.175 - - [23/Mar/2026:14:30:16 +0100] "GET /wp-login.php HTTP/2.0" 404 178 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
83.142.52.175 - - [23/Mar/2026:14:30:16 +0100] "GET /wp-admin.php HTTP/2.0" 404 178 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
83.142.52.175 - - [23/Mar/2026:14:30:18 +0100] "GET /wp-json/wp/v2/users HTTP/2.0" 404 178 "https://www.google.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-23 01:41:37
UTC ·
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 83.142.52.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 21:41:32.985814 2026] [security2:error] [pid 8015:tid 8015] [client 83.142.52.175:22905] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.52.175 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 22 21:41:32.985814 2026] [security2:error] [pid 8015:tid 8015] [client 83.142.52.175:22905] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||spacerecording.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "spacerecording.com"] [uri "/"] [unique_id "acCaTA2P-xbLCglZ953l2wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nationaleventpros.com
2026-03-05 07:23:44
UTC ·
(8 months ago)
WordPress login attempt
Brute-Force
🇺🇸
xmission.com
2026-03-03 21:02:55
UTC ·
(8 months ago)
83.142.52.175 - - [03/Mar/2026:14:02:55 -0700] "POST /wp-login.php HTTP/1.1" 200 2354 "https://dooce.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
Brute-Force
2026-03-01 07:30:11
UTC ·
(8 months ago)
Web App Attack
Brute-Force
Web App Attack
🇨🇦
ISPLtd
2026-02-25 16:05:34
UTC ·
(8 months ago)
Varying user agents. Does not honour robots.txt. Requests hidden or forbidden content (e.g., wp-login, .env, etc.).
Hacking
Bad Web Bot
🇪🇸
masterguru
2026-02-25 13:48:02
UTC ·
(8 months ago)
xmlrpc request blocked, no referer. Pattern match "xmlrpc.php" at REQUEST_URI. (5000900-122)
Web App Attack
🇱🇹
Evag Touf
2026-02-22 20:47:16
UTC ·
(8 months ago)
(wordpress) Failed wordpress login from 83.142.52.175 (IL/Israel/-)
Brute-Force
