2026-11-14 09:49:17
UTC ·
(22 hours ago)
Malicious activity detected
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 17:45:03
UTC ·
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 62.106.67.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:44:44.431141 2026] [security2:error] [pid 3285:tid 3285] [client 62.106.67.211:24751] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 62.106.67.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 12:44:44.431141 2026] [security2:error] [pid 3285:tid 3285] [client 62.106.67.211:24751] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.thereisaplaceonearth.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.thereisaplaceonearth.com"] [uri "/watch/"] [unique_id "avX7DE8zaHeuJWll-26tbgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Zandro
2026-11-11 20:00:14
UTC ·
(3 days ago)
distributed harvester
DDoS Attack
Bad Web Bot
Exploited Host
🇺🇦
URAN Publishing Service
2026-09-11 04:53:19
UTC ·
(2 months ago)
[11/Sep/2026:07:53:19 +0300] -- 62.106.67.211 Ban reason: User-Agent curl/
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 00:06:05
UTC ·
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 62.106.67.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 20:05:47.595068 2026] [security2:error] [pid 12449:tid 12449] [client 62.106.67.211:50737] M ...
show more
(mod_security) mod_security (id:210730) triggered by 62.106.67.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 20:05:47.595068 2026] [security2:error] [pid 12449:tid 12449] [client 62.106.67.211:50737] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||learningbyshipping.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "learningbyshipping.com"] [uri "/backup.sql"] [unique_id "aptc22t9BWnMLgu_YeD-jwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-09-03 03:05:23
UTC ·
(2 months ago)
Abuse Detected (9)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-04 08:46:11
UTC ·
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 62.106.67.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 04:45:55.958645 2026] [security2:error] [pid 1312694:tid 1312776] [client 62.106.67.211:3704 ...
show more
(mod_security) mod_security (id:210730) triggered by 62.106.67.211 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 04 04:45:55.958645 2026] [security2:error] [pid 1312694:tid 1312776] [client 62.106.67.211:37047] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||montanatribes.org|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "montanatribes.org"] [uri "/old.db"] [unique_id "anGmw9gAzjSZIAatdMZ6fgAAAQY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ManagedStack
2026-07-28 07:16:52
UTC ·
(3 months ago)
Wordpress Attack
Web App Attack
2026-07-25 05:41:00
UTC ·
(3 months ago)
"Packet Flood; Triggered WAF; Persistent 404 Attempts"
DDoS Attack
🇺🇸
lostswordfish.com
2026-05-19 16:02:04
UTC ·
(5 months ago)
Wordfence waf block on ncrsol
Web App Attack
🇫🇷
pm33
2026-05-19 14:30:42
UTC ·
(5 months ago)
Wordpress login attempts
Brute-Force
🇩🇪
kjaerulff
2026-05-18 07:00:07
UTC ·
(5 months ago)
Failed Wordpress login using wp-login.php
Web App Attack
