This IP address has been reported a total of
7
times from
3 distinct
sources.
206.62.142.87 was first reported on
September 12th 2026 , and the most recent report was
1 day ago United States of America
with 6
reports;
France
with 1
report.
The most common categories in these recent reports were:
Web App Attack
6
times;
Bad Web Bot
5
times;
Brute-Force
5
times;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-06 00:50:57
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 206.62.142.87 (Dinamic-Somos-206-62-142-87.somo ...
show more
(mod_security) mod_security (id:210350) triggered by 206.62.142.87 (Dinamic-Somos-206-62-142-87.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 20:50:50.218199 2026] [security2:error] [pid 14969:tid 14969] [client 206.62.142.87:39704] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.barbaraehill.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.barbaraehill.com"] [uri "/"] [unique_id "asRF6h2rh6zSAu8xoiKp-gAAAA8"], referer: https://bestbacklinksforseo.site/dir/backlinks-for-traffic-18950
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-03 08:13:30
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 206.62.142.87 (Dinamic-Somos-206-62-142-87.somo ...
show more
(mod_security) mod_security (id:210350) triggered by 206.62.142.87 (Dinamic-Somos-206-62-142-87.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 04:13:22.832058 2026] [security2:error] [pid 3989:tid 3989] [client 206.62.142.87:58140] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||crossfiregold.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "crossfiregold.com"] [uri "/"] [unique_id "asC5IrRvVrLiepFJZfZTPQAAAA0"], referer: https://automatedbacklinkbuilder.website/dir/high-da-backlinks-47468
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-02 06:14:45
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 206.62.142.87 (Dinamic-Somos-206-62-142-87.somo ...
show more
(mod_security) mod_security (id:210350) triggered by 206.62.142.87 (Dinamic-Somos-206-62-142-87.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 02:14:38.617060 2026] [security2:error] [pid 11899:tid 11899] [client 206.62.142.87:40418] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||dankent.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "dankent.com"] [uri "/"] [unique_id "ar9Lzqt4btJ5hy8gizJiowAAADE"], referer: https://highqualitybacklinksservice.store/dir/trusted-link-building-50419
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 11:12:52
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 206.62.142.87 (Dinamic-Somos-206-62-142-87.somo ...
show more
(mod_security) mod_security (id:210350) triggered by 206.62.142.87 (Dinamic-Somos-206-62-142-87.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 07:12:44.387731 2026] [security2:error] [pid 4157:tid 4157] [client 206.62.142.87:37976] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||wglennburns.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "wglennburns.com"] [uri "/"] [unique_id "aq-_rByj4-aIxW4daw6POgAAAAg"], referer: https://backlinkspace.com/dir/seo-ranking-links-231422
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 01:38:01
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 206.62.142.87 (Dinamic-Somos-206-62-142-87.somo ...
show more
(mod_security) mod_security (id:210350) triggered by 206.62.142.87 (Dinamic-Somos-206-62-142-87.somosinternet.co): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 21:37:53.880712 2026] [security2:error] [pid 5341:tid 5341] [client 206.62.142.87:33776] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||robk64.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "robk64.com"] [uri "/"] [unique_id "aq848U4oq0RiR9rUfybPtQAAAAQ"], referer: https://backlinks-checker.com/share/10419
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-09-14 00:11:56
(3 weeks ago)
Web App Attack
Web App Attack
🇺🇸
MPL
2026-09-12 16:35:03
(3 weeks ago)
tcp/22 (4 or more attempts)
Port Scan
Showing 1 to
7
of 7 reports
