83.142.52.215

(mod_security) mod_security (id:210350) triggered by 83.142.52.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:37:34.796751 2026] [security2:error] [pid 4312:tid 4312] [client 83.142.52.215:51099] Mod ... show more (mod_security) mod_security (id:210350) triggered by 83.142.52.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 13:37:34.796751 2026] [security2:error] [pid 4312:tid 4312] [client 83.142.52.215:51099] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||museum.henning.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "museum.henning.org"] [uri "/author/cjyo8ffiyo/"] [unique_id "auIy3pCfw2d0Z0JGAboi6QAAADA"] show less

Multiple failed login attemps RDS-Web-Access-Server

Brute force

LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 83.142.52.215 (IL/Israel/-): 1 in the last 3600 secs

(mod_security) mod_security (id:225170) triggered by 83.142.52.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 16:52:17.204987 2026] [security2:error] [pid 3609:tid 3609] [client 83.142.52.215:20201] Mod ... show more (mod_security) mod_security (id:225170) triggered by 83.142.52.215 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 16:52:17.204987 2026] [security2:error] [pid 3609:tid 3609] [client 83.142.52.215:20201] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||silsby.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "silsby.com"] [uri "/wp-json/wp/v2/users"] [unique_id "ajxDgTLoeCWNGx97Gt9qrgAAAAk"], referer: https://www.google.com show less

Web attack/malicious scanning detected

Triggered Cloudflare WAF (firewallCustom) from US. Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: / | UA: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB

Failed Wordpress login using wp-login.php

(caddyscan) Scanner path probe from 83.142.52.215 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 83.142.52.215 - - [13/May/2026:13:04:16 +0000] "POST /xmlrpc.php HTTP/1. ... show more (caddyscan) Scanner path probe from 83.142.52.215 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 83.142.52.215 - - [13/May/2026:13:04:16 +0000] "POST /xmlrpc.php HTTP/1.1" [REDACTED] 200 2627 83.142.52.215 - - [13/May/2026:13:04:17 +0000] "GET /wp-login.php HTTP/1.1" [REDACTED] 200 2627 83.142.52.215 - - [13/May/2026:13:04:17 +0000] "GET /wp-login.php HTTP/1.1" [REDACTED] 200 2627 83.142.52.215 - - [13/May/2026:13:04:20 +0000] "POST /xmlrpc.php HTTP/1.1" [REDACTED] 200 2627 83.142.52.215 - - [13/May/2026:13:04:21 +0000] "GET /wp-login.php HTTP/1.1" show less

block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8

Failed Wordpress login using wp-login.php

Fail2Ban banned 83.142.52.215 for security violations in jail wp-armour. Log: 2026/02/22 03:40:22 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 83.142.52.215 | Target: wplogin" , client: 83.142.52.215, server: [REDACTED], request: ... show more Fail2Ban banned 83.142.52.215 for security violations in jail wp-armour. Log: 2026/02/22 03:40:22 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 83.142.52.215 | Target: wplogin" , client: 83.142.52.215, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php" ... show less

Detected WordPress attack from 4 different servers

Unauthorized VPN login attempts: 1 attempts were recorded from 83.142.52.215 2025-11-14T07:12:06+01:00 vpn Access-Reject 'Andrew.Sanchez' station: 83.142.52.215 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '< ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 83.142.52.215 2025-11-14T07:12:06+01:00 vpn Access-Reject 'Andrew.Sanchez' station: 83.142.52.215 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less

Unauthorized VPN login attempts: 1 attempts were recorded from 83.142.52.215 2025-11-13T16:19:40+01:00 vpn Access-Reject 'Carter.Wilson' station: 83.142.52.215 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<r ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 83.142.52.215 2025-11-13T16:19:40+01:00 vpn Access-Reject 'Carter.Wilson' station: 83.142.52.215 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less