🇺🇸
TPI-Abuse
2026-11-10 05:03:24
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 83.97.117.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:03:19.952052 2026] [security2:error] [pid 21891:tid 21891] [client 83.97.117.184:27427] M ...
show more
(mod_security) mod_security (id:210350) triggered by 83.97.117.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:03:19.952052 2026] [security2:error] [pid 21891:tid 21891] [client 83.97.117.184:27427] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.gormish.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.gormish.org"] [uri "/denise/design-your-life-week-2/"] [unique_id "avKll1_mLsJxy7JWFsp9vwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 07:44:46
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 83.97.117.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:44:42.692815 2026] [security2:error] [pid 19977:tid 19977] [client 83.97.117.184:12889] M ...
show more
(mod_security) mod_security (id:210350) triggered by 83.97.117.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 02:44:42.692815 2026] [security2:error] [pid 19977:tid 19977] [client 83.97.117.184:12889] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.grupo-visalud.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.grupo-visalud.com"] [uri "/2024/06/registracija/"] [unique_id "avF56pkmAvFwucW-Y5rKsQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 10:33:25
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 83.97.117.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 05:33:17.960561 2026] [security2:error] [pid 32621:tid 32655] [client 83.97.117.184:9943] Mo ...
show more
(mod_security) mod_security (id:210350) triggered by 83.97.117.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 05:33:17.960561 2026] [security2:error] [pid 32621:tid 32655] [client 83.97.117.184:9943] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cargomarexpress.com"] [uri "/product/ylemontintedc2703679"] [unique_id "avBP7VIjW2lnK5pG0gA1LwAAAZc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-11-06 23:06:00
UTC ·
(1 week ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-06 15:04:19
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 83.97.117.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:04:14.449026 2026] [security2:error] [pid 17835:tid 17835] [client 83.97.117.184:27951] M ...
show more
(mod_security) mod_security (id:210350) triggered by 83.97.117.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:04:14.449026 2026] [security2:error] [pid 17835:tid 17835] [client 83.97.117.184:27951] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/rust-belt/"] [unique_id "au3sbubrl91reU2ItT68zgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 02:03:45
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 83.97.117.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 21:03:41.877606 2026] [security2:error] [pid 7060:tid 7060] [client 83.97.117.184:37223] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 83.97.117.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 21:03:41.877606 2026] [security2:error] [pid 7060:tid 7060] [client 83.97.117.184:37223] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.perthdps.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.perthdps.com"] [uri "/research/gar02.html"] [unique_id "aufvfV1q20znVef1eVp9uwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 01:57:12
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 83.97.117.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 21:57:07.587621 2026] [security2:error] [pid 7932:tid 7932] [client 83.97.117.184:30355] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 83.97.117.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 21:57:07.587621 2026] [security2:error] [pid 7932:tid 7932] [client 83.97.117.184:30355] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||esysapps.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "esysapps.com"] [uri "/blog/2025/02/11/hello-world/"] [unique_id "atgb864FMchJG5P326nTWgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
bittiguru.fi
2026-09-21 06:35:30
UTC ·
(1 month ago)
83.97.117.184 - [21/Sep/2026:09:34:34 +0300] "POST /xmlrpc.php HTTP/2.0" 404 12528 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "4.66"
83.97.117.184 - [21/Sep/2026:09:35:30 +030 ...
show more
83.97.117.184 - [21/Sep/2026:09:34:34 +0300] "POST /xmlrpc.php HTTP/2.0" 404 12528 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "4.66"
83.97.117.184 - [21/Sep/2026:09:35:30 +0300] "POST /xmlrpc.php HTTP/2.0" 404 12528 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" "4.66"
...
show less
Hacking
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-09-19 16:55:04
UTC ·
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
FD-IX
2026-09-19 11:04:02
UTC ·
(1 month ago)
Fail2Ban: WordPress brute-force attack detected.
Bad Web Bot
Web App Attack
🇨🇿
lp
2026-09-15 03:22:53
UTC ·
(2 months ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 83.97.117.184
2026-09-15T04:05:01+02:00 vpn Access-Reject 'Fakhriddin' station: 83.97.117.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<reda ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 83.97.117.184
2026-09-15T04:05:01+02:00 vpn Access-Reject 'Fakhriddin' station: 83.97.117.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2026-09-15T04:06:24+02:00 vpn Access-Reject 'CAR1' station: 83.97.117.184 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
Countryman
2026-09-15 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(2 months ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇸🇪
OnTheEdge
2026-09-09 01:42:10
UTC ·
(2 months ago)
Password spraying. Multiple unauthorized login attempts
Hacking
Web App Attack
🇬🇷
setupgr
2026-07-09 01:18:49
UTC ·
(4 months ago)
(wplogin_block) Blocked WP-Login Access Attempt 83.97.117.184 (FI/Finland/Uusimaa/Helsinki/-/[AS46475 LIMESTONENETWORKS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 83.97.117.184 - - [09/Jul/2026:04:18:46 ...
show more
(wplogin_block) Blocked WP-Login Access Attempt 83.97.117.184 (FI/Finland/Uusimaa/Helsinki/-/[AS46475 LIMESTONENETWORKS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 83.97.117.184 - - [09/Jul/2026:04:18:46 +0300] "GET /wp-login.php HTTP/2.0" 200 3527 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6 Safari/605.1.15"
show less
Port Scan
