This IP address has been reported a total of
6
times from
4 distinct
sources.
213.209.140.236 was first reported on
September 22nd 2024 , and the most recent report was
1 month ago France
with 1
report.
The only category in these recent reports was:
Bad Web Bot
1
time.
Old Reports
The most recent abuse report for this IP address is from
1 month ago
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇷
LRob
2026-09-12 19:44:53
(1 month ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: /.ftpconfig | 2026-09-12 19:44 UTC
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-26 12:59:16
(6 months ago)
(mod_security) mod_security (id:210350) triggered by 213.209.140.236 (undefined.hostname.localhost): ...
show more
(mod_security) mod_security (id:210350) triggered by 213.209.140.236 (undefined.hostname.localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 26 08:59:01.712060 2026] [security2:error] [pid 394:tid 394] [client 213.209.140.236:63917] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||harwoodmechanical.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "harwoodmechanical.com"] [uri "/about"] [unique_id "acUtlRJBsVfp_Uk95X8xzQAAABc"], referer: https://harwoodmechanical.com/about
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-21 05:15:26
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 213.209.140.236 (undefined.hostname.localhost): ...
show more
(mod_security) mod_security (id:210350) triggered by 213.209.140.236 (undefined.hostname.localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Mar 21 01:15:21.154985 2026] [security2:error] [pid 4503:tid 4648] [client 213.209.140.236:31937] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||busybeerestaurant.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "busybeerestaurant.com"] [uri "/contact"] [unique_id "ab4paUqURZSsAKC3JbHrQwAAANQ"], referer: https://busybeerestaurant.com/contact
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-12 04:41:42
(7 months ago)
(mod_security) mod_security (id:210350) triggered by 213.209.140.236 (undefined.hostname.localhost): ...
show more
(mod_security) mod_security (id:210350) triggered by 213.209.140.236 (undefined.hostname.localhost): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Mar 12 00:41:28.467372 2026] [security2:error] [pid 8519:tid 8519] [client 213.209.140.236:31781] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.itibitico.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.itibitico.com"] [uri "/Intro/what-we-do/"] [unique_id "abJD-G4Kq-DI2yzC2hcA5QAAAAc"], referer: http://www.itibitico.com/Intro/what-we-do/
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-10-19 07:06:28
(1 year ago)
HTTPS vulnerability scan attempt detected. Port 443.
Hacking
SQL Injection
Web App Attack
🇨🇦
easyonnet.com
2024-09-22 20:14:14
(2 years ago)
Fraud Orders
Showing 1 to
6
of 6 reports
