🇺🇸
TPI-Abuse
2026-11-11 05:14:37
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210350) triggered by 62.3.0.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 00:14:23.195357 2026] [security2:error] [pid 6710:tid 6710] [client 62.3.0.136:42485] ModSecuri ...
show more
(mod_security) mod_security (id:210350) triggered by 62.3.0.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 00:14:23.195357 2026] [security2:error] [pid 6710:tid 6710] [client 62.3.0.136:42485] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||ohwaitiforgot.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "ohwaitiforgot.com"] [uri "/2015/01/06/2014-the-year-in-books/"] [unique_id "avP5r8MsBXAAgDhFOdlOuwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:44:17
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 62.3.0.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:44:00.304986 2026] [security2:error] [pid 11201:tid 11201] [client 62.3.0.136:63193] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 62.3.0.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:44:00.304986 2026] [security2:error] [pid 11201:tid 11201] [client 62.3.0.136:63193] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.amywoodruff.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.amywoodruff.com"] [uri "/blog/amy-woodruff/christmas-coast/"] [unique_id "avHcMFXYnGT76QG_3sy7aQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Lino Project
2026-11-04 16:59:01
UTC ·
(6 days ago)
62.3.0.136 - - [04/Nov/2026:17:59:01 +0100] "POST /xmlrpc.php HTTP/2.0" 403 429 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15"
...
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 04:23:36
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 62.3.0.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:23:20.276361 2026] [security2:error] [pid 19173:tid 19173] [client 62.3.0.136:60305] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 62.3.0.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 23:23:20.276361 2026] [security2:error] [pid 19173:tid 19173] [client 62.3.0.136:60305] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2015/08/07/no-you-cannot-have-an-afro/"] [unique_id "aulhuIh7P6nShqsX8ju0uwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 15:49:18
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 62.3.0.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 11:49:02.939578 2026] [security2:error] [pid 18788:tid 18788] [client 62.3.0.136:29129] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 62.3.0.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 11:49:02.939578 2026] [security2:error] [pid 18788:tid 18788] [client 62.3.0.136:29129] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.brianwhitty.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.brianwhitty.com"] [uri "/robots.txt"] [unique_id "auNq7m9lPV54W6Xu9o2-CQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 13:14:04
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 62.3.0.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 09:13:49.389032 2026] [security2:error] [pid 12364:tid 12364] [client 62.3.0.136:47555] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 62.3.0.136 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 09:13:49.389032 2026] [security2:error] [pid 12364:tid 12364] [client 62.3.0.136:47555] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||spiht.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "spiht.com"] [uri "/spiht8.html"] [unique_id "atyvDfKkB0xGeLJQbuyJdwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
stinpriza
2026-10-17 20:37:31
UTC ·
(3 weeks ago)
Web App Attack
Web App Attack
🇳🇱
DonAtari
2026-08-29 02:22:08
UTC ·
(2 months ago)
DShield firewall scan - TCP to port 9000
Brute-Force
SSH
🇩🇪
LRob
2026-05-04 16:45:06
UTC ·
(6 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
2026-03-30 20:24:06
UTC ·
(7 months ago)
62.3.0.136 - - [30/Mar/2026:22:23:58 +0200] "GET /wp-login.php HTTP/1.1" 404 47 "-" "Wget/1.21.4"
...
Web App Attack
🇺🇸
VSM Networks
2024-02-29 04:21:01
UTC ·
(2 years ago)
Credential Stuffing
Brute-Force
