Total reports
5 from
2 distinct
reporters
First reported
October 8th 2026
Most recent report
3 days ago
Last 60 days
Top reporter locations
🇺🇸
United States of America
4
🇬🇧
United Kingdom of Great Britain and Northern Ireland
1
Most common categories
Brute-Force
5
Web App Attack
5
Bad Web Bot
4
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-11-11 21:43:41
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 216.40.74.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:43:34.688733 2026] [security2:error] [pid 13517:tid 13517] [client 216.40.74.188:64553] M ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.74.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 16:43:34.688733 2026] [security2:error] [pid 13517:tid 13517] [client 216.40.74.188:64553] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.fundingangelinvestors.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.fundingangelinvestors.com"] [uri "/tag/melbourne-startup-funding/"] [unique_id "avThho7Gwc6O4HOrwxlI4wAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:57:09
UTC ·
(5 days ago)
(mod_security) mod_security (id:210350) triggered by 216.40.74.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:57:05.799147 2026] [security2:error] [pid 22918:tid 22918] [client 216.40.74.188:33941] M ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.74.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:57:05.799147 2026] [security2:error] [pid 22918:tid 22918] [client 216.40.74.188:33941] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2014/07/18/my-favorite-mark-twain-book/"] [unique_id "avHfQaIS1R0TkiJfjspVtgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 23:14:51
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 216.40.74.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 19:14:46.111711 2026] [security2:error] [pid 17444:tid 17444] [client 216.40.74.188:49929] M ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.74.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 19:14:46.111711 2026] [security2:error] [pid 17444:tid 17444] [client 216.40.74.188:49929] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.neconebooks.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.neconebooks.com"] [uri "/blog/"] [unique_id "auEwZv9DtiUfcnvMrZVlAAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 20:15:54
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 216.40.74.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 16:15:46.937090 2026] [security2:error] [pid 31114:tid 31114] [client 216.40.74.188:53255] M ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.74.188 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 16:15:46.937090 2026] [security2:error] [pid 31114:tid 31114] [client 216.40.74.188:53255] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||lfrmtmorris.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "lfrmtmorris.com"] [uri "/robots.txt"] [unique_id "at0R8jSmirBSGjnIJoKC0gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
adnscom.net
2026-10-08 13:40:18
UTC ·
(1 month ago)
IPS trigger: Brute force WebApp/CMS scanning/attack
Brute-Force
Web App Attack
