83.97.116.224

(mod_security) mod_security (id:210350) triggered by 83.97.116.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 03:46:40.656414 2026] [security2:error] [pid 4023:tid 4023] [client 83.97.116.224:60099] Mod ... show more (mod_security) mod_security (id:210350) triggered by 83.97.116.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 03:46:40.656414 2026] [security2:error] [pid 4023:tid 4023] [client 83.97.116.224:60099] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||modmove.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "modmove.com"] [uri "/theatre/velvet-at-brisbane-powerhouse/"] [unique_id "avlxcMsf4UuzZVXYjQidSQAAABA"] show less

(mod_security) mod_security (id:210350) triggered by 83.97.116.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 21:10:25.278307 2026] [security2:error] [pid 4990:tid 4990] [client 83.97.116.224:44111] Mod ... show more (mod_security) mod_security (id:210350) triggered by 83.97.116.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 21:10:25.278307 2026] [security2:error] [pid 4990:tid 4990] [client 83.97.116.224:44111] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||persnicketyinc.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "persnicketyinc.com"] [uri "/tag/custom-wedding-invitations-persnickety/"] [unique_id "auPugQk1_UcHBsp0si8VjQAAABE"] show less

(mod_security) mod_security (id:210350) triggered by 83.97.116.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:51:05.317021 2026] [security2:error] [pid 4970:tid 4970] [client 83.97.116.224:29315] Mod ... show more (mod_security) mod_security (id:210350) triggered by 83.97.116.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:51:05.317021 2026] [security2:error] [pid 4970:tid 4970] [client 83.97.116.224:29315] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.instituteofscience.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.instituteofscience.com"] [uri "/index.html"] [unique_id "auJSKQeNPDuCAj2sxwktWAAAAAo"] show less

(mod_security) mod_security (id:210350) triggered by 83.97.116.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:15:14.751283 2026] [security2:error] [pid 28193:tid 28210] [client 83.97.116.224:44363] M ... show more (mod_security) mod_security (id:210350) triggered by 83.97.116.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 15:15:14.751283 2026] [security2:error] [pid 28193:tid 28210] [client 83.97.116.224:44363] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.munatseng.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.munatseng.org"] [uri "/human-signs-6/"] [unique_id "auJJwpBiP0qktLVqNzVKWgAAAE4"] show less

block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8

Bad_requests

repeated unauthorized VPN login attempt, user sweep

repeated unauthorized VPN login attempt, user sweep

Password spraying. Multiple unauthorized login attempts

Unauthorized VPN login attempts: 1 attempts were recorded from 83.97.116.224 2026-09-09T02:34:28+02:00 vpn Access-Reject 'camo' station: 83.97.116.224 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'

IP banned by Fail2Ban in jail ente-suss ente.com-ssl_log mvfnds ...

(mod_security) mod_security (id:210492) triggered by 83.97.116.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 09 07:48:41.604937 2025] [security2:error] [pid 11120:tid 11120] [client 83.97.116.224:61321] [ ... show more (mod_security) mod_security (id:210492) triggered by 83.97.116.224 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 09 07:48:41.604937 2025] [security2:error] [pid 11120:tid 11120] [client 83.97.116.224:61321] [client 83.97.116.224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.thegrabbagshow.com"] [uri "/.env"] [unique_id "Z82AGcIshe0E9l1nvvoLXAAAAAM"], referer: https://tasamm.com/about/mmm114.html show less

WAF detection: Cross Site Scripting

SMS pumping attack from foreign country