🇺🇸
TPI-Abuse
2026-11-11 19:13:52
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210350) triggered by 216.40.75.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:13:43.192055 2026] [security2:error] [pid 16448:tid 16562] [client 216.40.75.158:27399] M ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.75.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 14:13:43.192055 2026] [security2:error] [pid 16448:tid 16562] [client 216.40.75.158:27399] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.leaderoftheopposition.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.leaderoftheopposition.com"] [uri "/category/usa-rank"] [unique_id "avS-Z7Xg1meYVPCR9Ku-owAAANQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 15:21:29
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 216.40.75.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:21:25.644980 2026] [security2:error] [pid 14088:tid 14088] [client 216.40.75.158:19611] M ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.75.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 10:21:25.644980 2026] [security2:error] [pid 14088:tid 14088] [client 216.40.75.158:19611] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.bodybuildbid.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.bodybuildbid.com"] [uri "/articles/msolympia/carla-dunlap.html"] [unique_id "avM2dY1Ad8aK9MYJNbglUwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 22:41:23
UTC ·
(3 days ago)
(mod_security) mod_security (id:210350) triggered by 216.40.75.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:41:19.250683 2026] [security2:error] [pid 668:tid 668] [client 216.40.75.158:43567] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.75.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 17:41:19.250683 2026] [security2:error] [pid 668:tid 668] [client 216.40.75.158:43567] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||cometoorderva.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "cometoorderva.com"] [uri "/black-friday-decorating-deal/"] [unique_id "au-pDy-a-WSvVFaDABV11QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Sklurk
2026-11-06 00:27:22
UTC ·
(5 days ago)
Web App Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 11:57:40
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 216.40.75.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 06:57:33.368035 2026] [security2:error] [pid 1524:tid 1524] [client 216.40.75.158:21099] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.75.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 06:57:33.368035 2026] [security2:error] [pid 1524:tid 1524] [client 216.40.75.158:21099] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/tag/gold/"] [unique_id "ausdrZdEv5K0L5nebDZebAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 02:47:21
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 216.40.75.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 21:47:18.648331 2026] [security2:error] [pid 15097:tid 15097] [client 216.40.75.158:17359] M ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.75.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 21:47:18.648331 2026] [security2:error] [pid 15097:tid 15097] [client 216.40.75.158:17359] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.perthdps.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.perthdps.com"] [uri "/research/gar02.html"] [unique_id "auqctuTx9h0XWc7Le4FWQgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 11:39:03
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210350) triggered by 216.40.75.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 07:38:56.810381 2026] [security2:error] [pid 19943:tid 19943] [client 216.40.75.158:24429] M ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.75.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 07:38:56.810381 2026] [security2:error] [pid 19943:tid 19943] [client 216.40.75.158:24429] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.10mostwantedfugitives.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.10mostwantedfugitives.com"] [uri "/dir/index.php"] [unique_id "attHUNin6j6PTm1WrQmRlgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-13 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇿
Countryman
2026-09-12 00:10:01
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇨🇭
Origon
2026-07-17 09:23:38
UTC ·
(3 months ago)
http-wordpress_user-enum - IP: 216.40.75.158 - time="2026-07-17T11:23:38+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress_user-enum by ip 216.40.75.158 (US/213954) : 4h ban on Ip 216.40. ...
show more
http-wordpress_user-enum - IP: 216.40.75.158 - time="2026-07-17T11:23:38+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-wordpress_user-enum by ip 216.40.75.158 (US/213954) : 4h ban on Ip 216.40.75.158" module=db
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 07:44:31
UTC ·
(4 months ago)
(mod_security) mod_security (id:225170) triggered by 216.40.75.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 03:44:26.017224 2026] [security2:error] [pid 30655:tid 30655] [client 216.40.75.158:47793] M ...
show more
(mod_security) mod_security (id:225170) triggered by 216.40.75.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 03:44:26.017224 2026] [security2:error] [pid 30655:tid 30655] [client 216.40.75.158:47793] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||stacyfarm.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "stacyfarm.com"] [uri "/wp-json/wp/v2/users"] [unique_id "akdoWstau4x8ZHZNiXV7DAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
abuseiphack
2026-07-03 04:57:37
UTC ·
(4 months ago)
Automatic report for brute force attack
Web App Attack
🇺🇸
rsa
2026-03-04 00:13:00
UTC ·
(8 months ago)
ddos
DDoS Attack
🇺🇸
TPI-Abuse
2026-02-23 20:10:32
UTC ·
(8 months ago)
(mod_security) mod_security (id:210350) triggered by 216.40.75.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 15:10:26.402950 2026] [security2:error] [pid 22828:tid 22907] [client 216.40.75.158:45225] M ...
show more
(mod_security) mod_security (id:210350) triggered by 216.40.75.158 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 23 15:10:26.402950 2026] [security2:error] [pid 22828:tid 22907] [client 216.40.75.158:45225] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||tristatepropertymgmt.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "tristatepropertymgmt.com"] [uri "/"] [unique_id "aZy0Ms-zJruhVtT6v5GmkQAAAZg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
