62.106.67.164

(mod_security) mod_security (id:210350) triggered by 62.106.67.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:25:41.484008 2026] [security2:error] [pid 5292:tid 5292] [client 62.106.67.164:31975] Mod ... show more (mod_security) mod_security (id:210350) triggered by 62.106.67.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:25:41.484008 2026] [security2:error] [pid 5292:tid 5292] [client 62.106.67.164:31975] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.trasimeno.ws|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.trasimeno.ws"] [uri "/annibale_it.html"] [unique_id "avDMtUQA4GeuL2rVLDHjVAAAACQ"] show less

(mod_security) mod_security (id:210350) triggered by 62.106.67.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:00:22.616167 2026] [security2:error] [pid 13377:tid 13377] [client 62.106.67.164:10333] M ... show more (mod_security) mod_security (id:210350) triggered by 62.106.67.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:00:22.616167 2026] [security2:error] [pid 13377:tid 13377] [client 62.106.67.164:10333] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||theateroobleck.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "theateroobleck.com"] [uri "/news/strauss-at-midnight-blog-an-anecdote-and-addtional-reading"] [unique_id "avCOhvfM-gMFmUbc6i1-BwAAAAU"] show less

(mod_security) mod_security (id:210350) triggered by 62.106.67.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:44:07.051626 2026] [security2:error] [pid 32621:tid 32645] [client 62.106.67.164:27551] M ... show more (mod_security) mod_security (id:210350) triggered by 62.106.67.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:44:07.051626 2026] [security2:error] [pid 32621:tid 32645] [client 62.106.67.164:27551] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cargomarexpress.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cargomarexpress.com"] [uri "/product/tferulau1024915"] [unique_id "avCKt1IjW2lnK5pG0gBGawAAAY0"] show less

(mod_security) mod_security (id:210350) triggered by 62.106.67.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:40:09.583031 2026] [security2:error] [pid 3531:tid 3531] [client 62.106.67.164:19873] Mod ... show more (mod_security) mod_security (id:210350) triggered by 62.106.67.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:40:09.583031 2026] [security2:error] [pid 3531:tid 3531] [client 62.106.67.164:19873] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.losbarbarosdelnorte.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.losbarbarosdelnorte.com"] [uri "/conciencia/teoria-de-la-informacion/"] [unique_id "au-oyRPwNkTPZ-NeRiNtswAAAAE"] show less

(mod_security) mod_security (id:210350) triggered by 62.106.67.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 22:44:10.827648 2026] [security2:error] [pid 13218:tid 13218] [client 62.106.67.164:24999] M ... show more (mod_security) mod_security (id:210350) triggered by 62.106.67.164 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 22:44:10.827648 2026] [security2:error] [pid 13218:tid 13218] [client 62.106.67.164:24999] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.obgynhistory.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.obgynhistory.com"] [uri "/biographies/"] [unique_id "atrJ-ovZGyCF3-p_s1AAxAAAAAM"] show less

Abuse Detected (20)

Multiple WAF Violations

Abuse Detected (10)

[TueSep0806:11:43.6703102026][security2:error][pid1058917:tid1059041][client62.106.67.164:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADER ... show more [TueSep0806:11:43.6703102026][security2:error][pid1058917:tid1059041][client62.106.67.164:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"mgevents.ch\"][uri\"/profile\"][unique_id\"ap-K_4NJpwp5TeXSFzc1mgAAAQg\"] show less

[31/Aug/2026:23:56:55 +0300] -- 62.106.67.164 Ban reason: User-Agent curl/

Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124

Wordpress malicious attack:[octaflood]

Web attack blocked by Wordfence on mezzia.nl (1 hit). Reported by CRMON.

WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 62.106.67.164 - - [22/May/2026:20:51:45 +0100] POST /wp-login.php HTTP/1.1 503 21353 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML ... show more WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 62.106.67.164 - - [22/May/2026:20:51:45 +0100] POST /wp-login.php HTTP/1.1 503 21353 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 show less

WP Exploit attempt. Evidence: [REDACTED_DOMAIN]:443 62.106.67.164 - - [20/May/2026:15:00:46 +0100] POST /wp-login.php HTTP/1.1 200 8687 https://[REDACTED_DOMAIN]/wp-login.php Mozilla/5.0 (X11; Linux x86_64; rv:120.0) Gecko/20100101 Firefox/120.0