🇺🇸
TPI-Abuse
2026-06-17 15:59:50
(7 hours ago)
(mod_security) mod_security (id:210740) triggered by 88.218.75.112 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 88.218.75.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 11:59:42.586708 2026] [security2:error] [pid 28953:tid 28953] [client 88.218.75.112:34807] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||gamepart.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/"] [unique_id "ajLEbrTs77W36BGWvufksQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 05:22:22
(17 hours ago)
(mod_security) mod_security (id:210740) triggered by 88.218.75.112 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 88.218.75.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 01:22:18.670096 2026] [security2:error] [pid 13383:tid 13383] [client 88.218.75.112:59241] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||cultureal.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "cultureal.com"] [uri "/"] [unique_id "ajIvChn2qHQkcoW_x6_dowAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 07:08:15
(1 day ago)
(mod_security) mod_security (id:210740) triggered by 88.218.75.112 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 88.218.75.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 03:08:08.907683 2026] [security2:error] [pid 9551:tid 9551] [client 88.218.75.112:34833] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||fullyevil.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "fullyevil.com"] [uri "/"] [unique_id "ajD2WJqqy_pnmXaIWNa3FwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 05:19:46
(4 days ago)
(mod_security) mod_security (id:210740) triggered by 88.218.75.112 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 88.218.75.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 01:19:38.675766 2026] [security2:error] [pid 6227:tid 6227] [client 88.218.75.112:51941] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||franzexpress.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "franzexpress.com"] [uri "/"] [unique_id "aizoaktKJN2epZ7tAwPFWQAAADk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-12 06:06:03
(5 days ago)
Blocked: Reason='Vulnerability probing — PHP scan detected (13/60 min)'; Requests=13
Port Scan
🇺🇸
TPI-Abuse
2026-06-10 01:16:47
(1 week ago)
(mod_security) mod_security (id:210740) triggered by 88.218.75.112 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 88.218.75.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 21:16:43.245834 2026] [security2:error] [pid 13964:tid 13964] [client 88.218.75.112:55475] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||flugstad.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "flugstad.com"] [uri "/"] [unique_id "aii6-70TJFhFonR6rCoxXAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 19:42:37
(1 week ago)
(mod_security) mod_security (id:210740) triggered by 88.218.75.112 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210740) triggered by 88.218.75.112 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 15:42:29.917425 2026] [security2:error] [pid 12592:tid 12592] [client 88.218.75.112:42599] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||fishing-links.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "fishing-links.com"] [uri "/"] [unique_id "aiR4JdCG-4NguqS6WIfEYQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-06-02 21:44:06
(2 weeks ago)
[TueJun0223:44:00.9337202026][security2:error][pid743047:tid743159][client88.218.75.112:0]ModSecurit ...
show more
[TueJun0223:44:00.9337202026][security2:error][pid743047:tid743159][client88.218.75.112:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(curl\|wget\|python\|nikto\|sqlmap\|acunetix\|fimap\|dirbuster\|cmsmap\)\"atREQUEST_HEADERS:User-Agent.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"217\"][id\"990210\"][msg\"Suspicioususer-agentblocked\"][hostname\"beyondsecurity.ch\"][uri\"/robots.txt\"][unique_id\"ah9OoCvyC0_Q0i08kjQ0bwAAAQQ\"]
show less
Port Scan
Brute-Force
Web App Attack
2026-05-29 23:41:00
(2 weeks ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
🇩🇪
NxtGenIT
2024-02-14 16:19:50
(2 years ago)
88.218.75.112 has been observed attacking Port 123. Observed Threat: NTP Amplification REQ_MON_GETLI ...
show more
88.218.75.112 has been observed attacking Port 123. Observed Threat: NTP Amplification REQ_MON_GETLIST Request Found
show less
DDoS Attack