🇺🇸
TPI-Abuse
2026-11-08 17:34:50
UTC ·
(4 days ago)
(mod_security) mod_security (id:210350) triggered by 45.88.13.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:34:46.866093 2026] [security2:error] [pid 22339:tid 22339] [client 45.88.13.195:45033] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.88.13.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:34:46.866093 2026] [security2:error] [pid 22339:tid 22339] [client 45.88.13.195:45033] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.themadwriter.us|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.themadwriter.us"] [uri "/trump-americas-version-of-stalin-1812.htm/trackback"] [unique_id "avCytq4Np1XoNZHuVDBQtAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:16:54
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 45.88.13.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:16:49.727226 2026] [security2:error] [pid 20940:tid 20940] [client 45.88.13.195:59711] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.88.13.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:16:49.727226 2026] [security2:error] [pid 20940:tid 20940] [client 45.88.13.195:59711] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||arsenalfordemocracy.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "arsenalfordemocracy.com"] [uri "/2010/07/08/guinea-heads-to-a-runoff/"] [unique_id "au1GoQzpjgQRKaB9ZT309wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 16:21:58
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.88.13.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:21:51.319522 2026] [security2:error] [pid 27788:tid 27788] [client 45.88.13.195:56713] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.88.13.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:21:51.319522 2026] [security2:error] [pid 27788:tid 27788] [client 45.88.13.195:56713] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.misscharlottemusic.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.misscharlottemusic.com"] [uri "/yourweeklylisten/music/stop-forcing-your-child-to-take-music-lessons/"] [unique_id "atJPHz6p3VhiNvVX5cOFLAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 14:41:50
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210350) triggered by 45.88.13.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:41:45.844627 2026] [security2:error] [pid 12846:tid 12846] [client 45.88.13.195:13563] Mod ...
show more
(mod_security) mod_security (id:210350) triggered by 45.88.13.195 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 10:41:45.844627 2026] [security2:error] [pid 12846:tid 12846] [client 45.88.13.195:13563] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||plasterprose.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "plasterprose.com"] [uri "/stories/collegeboy01.html"] [unique_id "atDmKbx3AOnTp1DAJxw-TAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-01-17 13:20:08
UTC ·
(9 months ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
2025-09-18 17:09:45
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇨🇿
lp
2025-08-01 19:54:15
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 2 attempts were recorded from 45.88.13.195
2025-08-01T20:46:27+02:00 vpn Access-Reject 'pflores' station: 45.88.13.195 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted> ...
show more
Unauthorized VPN login attempts: 2 attempts were recorded from 45.88.13.195
2025-08-01T20:46:27+02:00 vpn Access-Reject 'pflores' station: 45.88.13.195 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
2025-08-01T21:32:23+02:00 vpn Access-Reject 'atorres' station: 45.88.13.195 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-07-16 21:21:40
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.88.13.195
2025-07-16T23:13:31+02:00 vpn Access-Reject 'voscribe' station: 45.88.13.195 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.88.13.195
2025-07-16T23:13:31+02:00 vpn Access-Reject 'voscribe' station: 45.88.13.195 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>'
show less
Brute-Force
Web App Attack
🇨🇿
lp
2025-07-14 01:50:54
UTC ·
(1 year ago)
Unauthorized VPN login attempts: 1 attempts were recorded from 45.88.13.195
2025-07-14T03:29:20+02:00 vpn Access-Reject 'SAN storage' station: 45.88.13.195 auth-type: - realm: - nas: <redacted> called: <redacted> => address-pool: - msg: 'Rejected: U ...
show more
Unauthorized VPN login attempts: 1 attempts were recorded from 45.88.13.195
2025-07-14T03:29:20+02:00 vpn Access-Reject 'SAN storage' station: 45.88.13.195 auth-type: - realm: - nas: <redacted> called: <redacted> => address-pool: - msg: 'Rejected: User-Name contains whitespace'
show less
Brute-Force
Web App Attack
🇨🇳
ThreatBook.io
2025-04-24 22:45:54
UTC ·
(1 year ago)
ThreatBook Intelligence: Dynamic IP,Spam more details on https://threatbook.io/ip/45.88.13.195
2025-04-24 13:17:17 /+CSCOE+/logon.html
Web App Attack
2025-03-28 13:46:29
UTC ·
(1 year ago)
This IP was involved in an brute force and password spray attack on 2025/03/28 08:04:55
Port Scan
Brute-Force
Exploited Host
Web App Attack
