🇺🇸
TPI-Abuse
2026-11-11 08:47:33
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 83.142.54.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 03:47:25.518307 2026] [security2:error] [pid 11235:tid 11235] [client 83.142.54.211:13981] M ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.54.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 03:47:25.518307 2026] [security2:error] [pid 11235:tid 11235] [client 83.142.54.211:13981] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.segeln-in-phuket.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.segeln-in-phuket.com"] [uri "/kabinencharter-kojencharter-phuket-thailand-burma-myanmar.html"] [unique_id "avQrnR5ac9MT_GIe7GP39wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 00:38:25
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 83.142.54.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:38:20.755981 2026] [security2:error] [pid 9639:tid 9639] [client 83.142.54.211:48881] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.54.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 19:38:20.755981 2026] [security2:error] [pid 9639:tid 9639] [client 83.142.54.211:48881] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ictsl.net"] [uri "/productos/papelfiltracion/0000009f3a1314ebd.html"] [unique_id "avJnfLz1g0tB37nAxvcIyQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:59:11
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 83.142.54.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:59:07.722367 2026] [security2:error] [pid 6536:tid 6536] [client 83.142.54.211:24275] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.54.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:59:07.722367 2026] [security2:error] [pid 6536:tid 6536] [client 83.142.54.211:24275] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||borzoi-pedigree.batw.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "borzoi-pedigree.batw.net"] [uri "/pedstore/p/PavlovaofAddlestone.html"] [unique_id "avHDm5d596-MPUwZAxgYuwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 21:24:18
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 83.142.54.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:24:10.548770 2026] [security2:error] [pid 15314:tid 15314] [client 83.142.54.211:10071] M ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.54.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 16:24:10.548770 2026] [security2:error] [pid 15314:tid 15314] [client 83.142.54.211:10071] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ofertasdetrabajosyempleos.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ofertasdetrabajosyempleos.com"] [uri "/bolivia/buscador-limpieza-.php"] [unique_id "au-W-lmDApcIqnKgi7gtdgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 00:31:50
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 83.142.54.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 20:31:46.692967 2026] [security2:error] [pid 24763:tid 24763] [client 83.142.54.211:47529] M ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.54.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 20:31:46.692967 2026] [security2:error] [pid 24763:tid 24763] [client 83.142.54.211:47529] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||epetsure.co|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "epetsure.co"] [uri "/insurance-for-cats/"] [unique_id "atqq8sbXzpY7x3j3sNDj0AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-15 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇸🇪
OnTheEdge
2026-09-14 18:23:30
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇸🇪
OnTheEdge
2026-09-14 18:23:30
UTC ·
(1 month ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇨🇿
Countryman
2026-09-14 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
2026-09-06 07:19:57
UTC ·
(2 months ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
4server
2026-08-15 01:51:03
UTC ·
(2 months ago)
[SatAug1503:51:00.4992402026][security2:error][pid2766016:tid2766039][client83.142.54.211:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADER ...
show more
[SatAug1503:51:00.4992402026][security2:error][pid2766016:tid2766039][client83.142.54.211:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"www.restaurantgandria.ch\"][uri\"/wp-login.php\"][unique_id\"an_GBOVPyRLJBRdjPmHhbgAAANQ\"]
show less
Port Scan
Brute-Force
Web App Attack
2026-03-21 06:06:13
UTC ·
(7 months ago)
Trying to access config files
Web App Attack
🇺🇸
octageeks.com
2026-03-20 04:11:42
UTC ·
(7 months ago)
Wordpress malicious attack:[octaxmlrpc]
Web App Attack
🇩🇪
stinpriza
2026-03-19 16:40:48
UTC ·
(7 months ago)
Web App Attack
Web App Attack
🇩🇪
big-cloud.nl
2026-03-17 16:01:26
UTC ·
(7 months ago)
Try to access /xmlrpc.php
Web App Attack
