🇺🇸
TPI-Abuse
2026-11-14 01:36:44
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210350) triggered by 216.40.74.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 20:36:39.985054 2026] [security2:error] [pid 24296:tid 24296] [client 216.40.74.111:57413] M ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.74.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 20:36:39.985054 2026] [security2:error] [pid 24296:tid 24296] [client 216.40.74.111:57413] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.clubfansite.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.clubfansite.com"] [uri "/rayosdeamerica"] [unique_id "ave7J3ltr1Rou54eh3Ti6AAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 01:18:15
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 216.40.74.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 20:18:10.345591 2026] [security2:error] [pid 5650:tid 5650] [client 216.40.74.111:34769] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.74.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 20:18:10.345591 2026] [security2:error] [pid 5650:tid 5650] [client 216.40.74.111:34769] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.partybuseslansing.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.partybuseslansing.com"] [uri "/service-area.html"] [unique_id "avPCUnlalFOmD8-vq4Ig5wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 09:09:22
UTC ·
(6 days ago)
(mod_security) mod_security (id:210350) triggered by 216.40.74.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 04:09:15.957923 2026] [security2:error] [pid 30540:tid 30540] [client 216.40.74.111:46363] M ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.74.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 04:09:15.957923 2026] [security2:error] [pid 30540:tid 30540] [client 216.40.74.111:46363] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.watonga.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.watonga.com"] [uri "/biblebios/lot/partnersuche-dimbach/"] [unique_id "avA8O_XDTWFwSh0n2_1sVgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2026-11-03 02:58:27
UTC ·
(1 week ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: Cluster Berater de17848 (3 IPs/15 Min)
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 14:47:42
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 216.40.74.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 09:47:38.613608 2026] [security2:error] [pid 1470462:tid 1470468] [client 216.40.74.111:4413 ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.74.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 09:47:38.613608 2026] [security2:error] [pid 1470462:tid 1470468] [client 216.40.74.111:44139] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cibernetic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cibernetic.com"] [uri "/"] [unique_id "auiiio9Ennu9WPzfk0EKtgAAAUM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-02 00:28:00
UTC ·
(1 week ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 05:26:20
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 216.40.74.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 01:26:15.157721 2026] [security2:error] [pid 12469:tid 12469] [client 216.40.74.111:56957] M ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.74.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 01:26:15.157721 2026] [security2:error] [pid 12469:tid 12469] [client 216.40.74.111:56957] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||campnecon.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "campnecon.com"] [uri "/necon38/necon-38-call-for-volunteers/attachment/calling-all-skeletons-2/"] [unique_id "at7kdwFRO99OICp9Uvh4IQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
fineservice
2026-09-12 05:22:41
UTC ·
(2 months ago)
PrestaShop Security Module: WordPress probe path detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 08:01:53
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 216.40.74.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 04:01:46.841256 2026] [security2:error] [pid 11383:tid 11383] [client 216.40.74.111:56347] M ...
show more
(mod_security) mod_security (id:225170) triggered by 216.40.74.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 04:01:46.841256 2026] [security2:error] [pid 11383:tid 11383] [client 216.40.74.111:56347] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||modalsoftware.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "modalsoftware.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akTJaiB1MR46C36U2HDdCwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 05:22:44
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 216.40.74.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 01:22:41.290786 2026] [security2:error] [pid 2854:tid 2854] [client 216.40.74.111:27735] Mod ...
show more
(mod_security) mod_security (id:225170) triggered by 216.40.74.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 01:22:41.290786 2026] [security2:error] [pid 2854:tid 2854] [client 216.40.74.111:27735] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||ironsightsarmory.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ironsightsarmory.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akSkIVI8Pb7waOM-UtTVzQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Tilellit.PRO
2026-05-18 19:39:52
UTC ·
(5 months ago)
Fail2Ban banned 216.40.74.111 for security violations in jail wp-armour. Log: 2026/05/18 19:39:51 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 216.40.74.111 | Target: wplogin" , client: 216.40.74.111, server: [REDACTED], request: ...
show more
Fail2Ban banned 216.40.74.111 for security violations in jail wp-armour. Log: 2026/05/18 19:39:51 [error] FastCGI sent in stderr: "PHP message: [WP_ARMOUR_BAN] IP: 216.40.74.111 | Target: wplogin" , client: 216.40.74.111, server: [REDACTED], request: "POST /wp-login.php HTTP/1.1", upstream: [REDACTED], host: [REDACTED], referrer: "https://comerciogallego.es/wp-login.php"
...
show less
Web Spam
🇩🇪
BlueWire Hosting
2026-02-28 12:48:33
UTC ·
(8 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇨🇿
lp
2026-02-24 06:02:10
UTC ·
(8 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 216.40.74.111
2026-02-24T05:55:47+01:00 vpn Access-Reject 'administrator1' station: 216.40.74.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '< ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 216.40.74.111
2026-02-24T05:55:47+01:00 vpn Access-Reject 'administrator1' station: 216.40.74.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-02-23 20:57:53
UTC ·
(8 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 216.40.74.111
2026-02-23T21:31:20+01:00 vpn Access-Reject 'sample' station: 216.40.74.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 216.40.74.111
2026-02-23T21:31:20+01:00 vpn Access-Reject 'sample' station: 216.40.74.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2026-02-23 13:28:25
UTC ·
(8 months ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 216.40.74.111
2026-02-23T13:06:33+01:00 vpn Access-Reject 'sslvpnuser' station: 216.40.74.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<reda ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 216.40.74.111
2026-02-23T13:06:33+01:00 vpn Access-Reject 'sslvpnuser' station: 216.40.74.111 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
