🇺🇸
TPI-Abuse
2026-11-09 00:44:06
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 83.142.55.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:43:59.328773 2026] [security2:error] [pid 20146:tid 20146] [client 83.142.55.47:41305] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.55.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:43:59.328773 2026] [security2:error] [pid 20146:tid 20146] [client 83.142.55.47:41305] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||geckoturner.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "geckoturner.com"] [uri "/that-place-by-the-thing-with-the-cool-name/"] [unique_id "avEXT63mjVCmctQn5FeHNgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 00:09:17
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210350) triggered by 83.142.55.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:09:10.112564 2026] [security2:error] [pid 1257:tid 1257] [client 83.142.55.47:20303] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.55.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 19:09:10.112564 2026] [security2:error] [pid 1257:tid 1257] [client 83.142.55.47:20303] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.desertvacationvillas.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.desertvacationvillas.com"] [uri "/nl-nl/attractions.htm"] [unique_id "avEPJnG2_6nNV8Bbyhz7ngAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 07:55:16
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210350) triggered by 83.142.55.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 02:55:09.659790 2026] [security2:error] [pid 3675953:tid 3675966] [client 83.142.55.47:27589] ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.55.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 02:55:09.659790 2026] [security2:error] [pid 3675953:tid 3675966] [client 83.142.55.47:27589] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.buick-reatta.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.buick-reatta.com"] [uri "/1990-buick-reatta/1990-red-buick-reatta-convertible-58/"] [unique_id "avAq3doEwTOM4esDnxDxBgAAAMg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 21:25:25
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 83.142.55.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:25:19.487256 2026] [security2:error] [pid 29595:tid 29610] [client 83.142.55.47:29203] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.55.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 17:25:19.487256 2026] [security2:error] [pid 29595:tid 29610] [client 83.142.55.47:29203] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dubarch.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dubarch.com"] [uri "/mehran/"] [unique_id "auJoP9lw3tegO68tYVqgigAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:15:30
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 83.142.55.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:15:20.269377 2026] [security2:error] [pid 6753:tid 6753] [client 83.142.55.47:23839] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.55.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:15:20.269377 2026] [security2:error] [pid 6753:tid 6753] [client 83.142.55.47:23839] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||christinastoddard.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "christinastoddard.com"] [uri "/poems/noh_theater.html"] [unique_id "atDR6LXLk5k4I2Aaj8nDNQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-06-19 04:48:46
UTC ·
(4 months ago)
Accessed trap at '/xmlrpc.php'
Web App Attack
🇨🇦
electronico
2026-06-14 06:59:24
UTC ·
(4 months ago)
83.142.55.47 - - [14/Jun/2026:17:59:23 +1100] "POST /xmlrpc.php HTTP/1.1" 404 5672 "-" "Apache-HttpClient/4.5.13 (Java/11.0.31)"
...
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-04-25 18:10:00
UTC ·
(6 months ago)
(mod_security) mod_security (id:210350) triggered by 83.142.55.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 14:09:54.757178 2026] [security2:error] [pid 10338:tid 10338] [client 83.142.55.47:18653] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 83.142.55.47 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Apr 25 14:09:54.757178 2026] [security2:error] [pid 10338:tid 10338] [client 83.142.55.47:18653] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||briancastle.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "briancastle.com"] [uri "/"] [unique_id "ae0DcrgyeTZ9tebVukj2nQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-09-23 06:02:33
UTC ·
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
🇨🇳
ThreatBook.io
2025-04-23 01:45:38
UTC ·
(1 year ago)
2025-04-22 01:14:51 /+CSCOE+/logon.html
Web App Attack
🇨🇦
wil.com
2025-04-01 10:47:52
UTC ·
(1 year ago)
GlobalProtect login attempts with user mhayes.
VPN IP
Brute-Force
2025-01-15 16:48:16
UTC ·
(1 year ago)
apache-wordpress-login
Brute-Force
Web App Attack
🇩🇪
LRob
2024-12-11 02:15:07
UTC ·
(1 year ago)
WordPress login brute-force detected by Fail2Ban in plesk-wordpress jail
Brute-Force
Web App Attack
🇵🇱
TI
2023-11-03 06:33:59
UTC ·
(3 years ago)
Scrapping website, using diffrent useragents, not wait for response, #botnet20231026
DDoS Attack
Bad Web Bot
