🇺🇸
TPI-Abuse
2026-10-27 06:15:04
(6 hours ago)
(mod_security) mod_security (id:210350) triggered by 216.40.73.74 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.73.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 02:14:56.841460 2026] [security2:error] [pid 29632:tid 29632] [client 216.40.73.74:21343] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.ctrussell.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.ctrussell.us"] [uri "/ctrussell/ctrussell.nsf/22284ee7f683acc9862566bd000b278c/11b6bd7bb4c93062862566c500145d93"] [unique_id "auBBYD9Cmi4IUvikvY1O3wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 11:15:32
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 216.40.73.74 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.73.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 07:15:24.914595 2026] [security2:error] [pid 13790:tid 13790] [client 216.40.73.74:54133] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arapi.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arapi.org"] [uri "/ten-100-free-no-deposit-gambling-cad-casino-enterprise-united-kingdom-incentives-inside-july-2022/"] [unique_id "at82TACidXXE6Uf9cieJswAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 00:06:09
(2 days ago)
(mod_security) mod_security (id:210350) triggered by 216.40.73.74 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.73.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 20:06:04.100421 2026] [security2:error] [pid 12507:tid 12507] [client 216.40.73.74:33263] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.cipcug.org|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.cipcug.org"] [uri "/Command/mess0317.cfm"] [unique_id "at1H7AfE1IXkjIrbZOu_NgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-09-02 11:55:59
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 257
Exploited Host
Web App Attack
2026-09-01 09:48:49
(1 month ago)
[01/Sep/2026:12:48:48 +0300] 178825612837.967235 216.40.73.74 59031 148.251.76.218 443
[01/Sep/2026: ...
show more
[01/Sep/2026:12:48:48 +0300] 178825612837.967235 216.40.73.74 59031 148.251.76.218 443
[01/Sep/2026:12:48:49 +0300] 178825612996.805624 216.40.73.74 59031 148.251.76.218 443
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 06:25:09
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 216.40.73.74 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 216.40.73.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 02:25:02.363077 2026] [security2:error] [pid 12802:tid 12846] [client 216.40.73.74:45105] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||reghay.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "reghay.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akdVvuXvAwbx9B2CWJ1bGQAAAUs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-02 20:51:42
(3 months ago)
(mod_security) mod_security (id:225170) triggered by 216.40.73.74 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:225170) triggered by 216.40.73.74 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 02 16:51:35.213288 2026] [security2:error] [pid 27646:tid 27646] [client 216.40.73.74:38665] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||aroilcontrolsystem.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "aroilcontrolsystem.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akbPV2mhVKcG5D0yT97sugAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Mendip_Defender
2026-05-18 18:03:23
(5 months ago)
216.40.73.74 - - [18/May/2026:19:03:19 +0100] "GET /wp-json/wp/v2/users HTTP/1.1" 403 4830 "-" "Go-h ...
show more
216.40.73.74 - - [18/May/2026:19:03:19 +0100] "GET /wp-json/wp/v2/users HTTP/1.1" 403 4830 "-" "Go-http-client/2.0"
216.40.73.74 - - [18/May/2026:19:03:19 +0100] "GET /wp-login.php HTTP/1.1" 404 49297 "-" "Go-http-client/2.0"
216.40.73.74 - - [18/May/2026:19:03:21 +0100] "POST /wp-login.php HTTP/1.1" 404 49297 "https://4x4response.uk/wp-login.php" "Go-http-client/2.0"
...
show less
Hacking
Web App Attack