🇺🇸
Zandro
2026-11-12 04:00:14
UTC ·
(1 day ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-11-10 11:32:25
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 62.106.67.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:32:09.338241 2026] [security2:error] [pid 19795:tid 19795] [client 62.106.67.20:16139] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 62.106.67.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 06:32:09.338241 2026] [security2:error] [pid 19795:tid 19795] [client 62.106.67.20:16139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ictsl.net|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ictsl.net"] [uri "/productos/instrumental/kitdedioxidodecloromicroquantmerck.html"] [unique_id "avMAuRqCzZUBU-_4EQwfPQAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 02:33:08
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 62.106.67.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 21:32:51.165135 2026] [security2:error] [pid 14293:tid 14293] [client 62.106.67.20:14609] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 62.106.67.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 21:32:51.165135 2026] [security2:error] [pid 14293:tid 14293] [client 62.106.67.20:14609] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bodybuildbid.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bodybuildbid.com"] [uri "/articles/writers/anthony-roberts.html"] [unique_id "au08U1Lov386yroGdk27dAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 04:46:05
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 62.106.67.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:45:51.676157 2026] [security2:error] [pid 2429234:tid 2429248] [client 62.106.67.20:24115] ...
show more
(mod_security) mod_security (id:210350) triggered by 62.106.67.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:45:51.676157 2026] [security2:error] [pid 2429234:tid 2429248] [client 62.106.67.20:24115] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.americanacademyofprojectmanagement.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.americanacademyofprojectmanagement.com"] [uri "/press.html"] [unique_id "aulm_5ZoBIUv4nL0uM6YogAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 18:35:41
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 62.106.67.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 14:35:26.865065 2026] [security2:error] [pid 5899:tid 5899] [client 62.106.67.20:46855] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 62.106.67.20 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 14:35:26.865065 2026] [security2:error] [pid 5899:tid 5899] [client 62.106.67.20:46855] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||gracefaerie.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "gracefaerie.com"] [uri "/ideas/2.html"] [unique_id "atz6bjrnvLOPvOgljkV8qAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-14 23:33:49
UTC ·
(4 weeks ago)
SSH tarpit (endlessh) connection from 62.106.67.20
Brute-Force
SSH
2026-10-09 07:30:30
UTC ·
(1 month ago)
SSH tarpit (endlessh) connection from 62.106.67.20
Brute-Force
SSH
2026-10-07 20:26:50
UTC ·
(1 month ago)
SSH tarpit (endlessh) connection from 62.106.67.20
Brute-Force
SSH
🇺🇦
URAN Publishing Service
2026-08-31 22:33:34
UTC ·
(2 months ago)
[01/Sep/2026:01:33:33 +0300] -- 62.106.67.20 Ban reason: User-Agent curl/
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-08-31 16:09:00
UTC ·
(2 months ago)
probe wp
Web App Attack
🇫🇷
pm33
2026-05-28 11:07:28
UTC ·
(5 months ago)
Wordpress login attempts
Brute-Force
🇲🇽
octageeks.com
2026-05-24 04:19:10
UTC ·
(5 months ago)
Wordpress malicious attack:[octaflood]
Web App Attack
🇩🇪
FeG Deutschland
2026-05-23 10:15:04
UTC ·
(5 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
2026-05-23 02:45:12
UTC ·
(5 months ago)
Web attack blocked by Wordfence on mezzia.nl (1 hit). Reported by CRMON.
Web App Attack
2026-05-20 06:29:15
UTC ·
(5 months ago)
Brute forcing Wordpress login
Hacking
Web App Attack
