🇺🇸
TPI-Abuse
2026-11-11 09:07:39
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210350) triggered by 83.142.53.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:07:32.050846 2026] [security2:error] [pid 9986:tid 9986] [client 83.142.53.67:46443] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.53.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 04:07:32.050846 2026] [security2:error] [pid 9986:tid 9986] [client 83.142.53.67:46443] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.revelatorium.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.revelatorium.com"] [uri "/starrgram7.html"] [unique_id "avQwVCo_OSZ-JtMiTjrv2gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 14:21:50
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 83.142.53.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 09:21:45.381584 2026] [security2:error] [pid 3352:tid 3352] [client 83.142.53.67:64053] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.53.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 09:21:45.381584 2026] [security2:error] [pid 3352:tid 3352] [client 83.142.53.67:64053] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.instituteofscience.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.instituteofscience.com"] [uri "/index.html"] [unique_id "avMoeVfxk08GnQC4H--nrgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 00:40:10
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 83.142.53.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 19:40:04.387100 2026] [security2:error] [pid 2370:tid 2370] [client 83.142.53.67:29239] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.53.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 19:40:04.387100 2026] [security2:error] [pid 2370:tid 2370] [client 83.142.53.67:29239] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2014/06/26/maliki-appears-to-fully-switch-foreign-alliances/"] [unique_id "au0h5A8DvhHPiVfVLYL2_QAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 22:43:26
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 83.142.53.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 18:43:19.682373 2026] [security2:error] [pid 12331:tid 12331] [client 83.142.53.67:51435] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.53.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 18:43:19.682373 2026] [security2:error] [pid 12331:tid 12331] [client 83.142.53.67:51435] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||anytimesign.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "anytimesign.com"] [uri "/html/precaucion-SIGN.htm"] [unique_id "auEpBzihG4tCWrAD9F3TkQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-09-03 15:43:15
UTC ·
(2 months ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
www.winos.me
2026-08-28 00:05:22
UTC ·
(2 months ago)
Scanning for sensitive files/paths: /wp-login.php
Hacking
Web App Attack
2026-08-02 02:18:02
UTC ·
(3 months ago)
Bot / scanning and/or hacking attempts: POST /xmlrpc.php HTTP/1.1, GET /wp-login.php HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-31 00:01:09
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 83.142.53.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 20:01:03.894453 2026] [security2:error] [pid 32689:tid 32689] [client 83.142.53.67:26341] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 83.142.53.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 20:01:03.894453 2026] [security2:error] [pid 32689:tid 32689] [client 83.142.53.67:26341] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||puoci.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "puoci.com"] [uri "/wp-json/wp/v2/users"] [unique_id "amvlv1wppi7NGKznWYnIbAAAAAI"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
DRI
2026-07-29 22:01:08
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇨🇭
backslash
2026-07-29 10:42:00
UTC ·
(3 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇨🇦
DRI
2026-07-20 02:21:40
UTC ·
(3 months ago)
Web attack/Malicious activity detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 16:55:52
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 83.142.53.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 12:55:45.148879 2026] [security2:error] [pid 15992:tid 15992] [client 83.142.53.67:9021] ModS ...
show more
(mod_security) mod_security (id:225170) triggered by 83.142.53.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 12:55:45.148879 2026] [security2:error] [pid 15992:tid 15992] [client 83.142.53.67:9021] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||oweng.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "oweng.com"] [uri "/wp-json/wp/v2/users"] [unique_id "alpekQIG_-0KDbdgAsXHWwAAAB0"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-14 20:27:28
UTC ·
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 83.142.53.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 16:27:21.142683 2026] [security2:error] [pid 13303:tid 13303] [client 83.142.53.67:38341] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 83.142.53.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 14 16:27:21.142683 2026] [security2:error] [pid 13303:tid 13303] [client 83.142.53.67:38341] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||starrmail.net|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "starrmail.net"] [uri "/wp-json/wp/v2/users"] [unique_id "alabqVYbTiMi-HmS5v6afQAAAAU"], referer: https://www.google.com
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
clauss
2026-07-13 17:00:32
UTC ·
(3 months ago)
IP reached maximum auth failures for a one day block
Brute-Force
🇩🇪
FeG Deutschland
2026-07-10 21:33:02
UTC ·
(4 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
