🇮🇹
A000Z
2026-07-10 14:39:24
(2 days ago)
Fail2Ban: 38.174.166.253 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5 ...
show more
Fail2Ban: 38.174.166.253 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-13 19:14:02
(1 month ago)
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 15:13:58.622063 2026] [security2:error] [pid 25335:tid 25335] [client 38.174.166.253:54802] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||siragusafamily.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "siragusafamily.com"] [uri "/images/1901-baptism-mabel-denny-thumb.jpg"] [unique_id "agTNdu85DcwC-CsDiTzqGgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 17:03:57
(1 month ago)
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 13:03:50.553851 2026] [security2:error] [pid 30756:tid 30756] [client 38.174.166.253:36654] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||backyardbrickoven.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "backyardbrickoven.com"] [uri "/oven3890t.JPG"] [unique_id "agSu9g-KVHkT9L8DwRhPOwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 11:51:41
(1 month ago)
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 07:51:36.367293 2026] [security2:error] [pid 11262:tid 11262] [client 38.174.166.253:9868] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||phoboschildren.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "phoboschildren.com"] [uri "/lite/wp-content/uploads/2016/08/Help-page-15-EN-169x300.png"] [unique_id "agRlyJxHvySE23JsKYcGFQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-12 01:23:49
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 21:23:42.732425 2026] [security2:error] [pid 22384:tid 22384] [client 38.174.166.253:22562] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.jessicalevant.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.jessicalevant.com"] [uri "/wp-content/gallery/inanimata/cache/fourchairs-1.jpg-nggid041596-ngg0dyn-190x200x100-00f0w010c011r110f110r010t010.jpg"] [unique_id "agKBHrrt6X93TPLBssOlPgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-09 18:31:27
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 14:31:24.801373 2026] [security2:error] [pid 572:tid 572] [client 38.174.166.253:59096] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||carolinafootprints.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "carolinafootprints.com"] [uri "/images/11_Nov_27_WildHorse11_cf.jpg"] [unique_id "af99fEAD9VsyfVS3CC7dPAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 20:50:41
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 16:50:37.983280 2026] [security2:error] [pid 3421:tid 3430] [client 38.174.166.253:1046] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||neotienda.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "neotienda.com"] [uri "/tienda/4532-large_default/ps4-need-for-speed-usado-.jpg"] [unique_id "af5MnQru-egV8Fxl77qLVwAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 10:02:26
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 06:02:17.503298 2026] [security2:error] [pid 11077:tid 11077] [client 38.174.166.253:10000] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||cyclingboardgames.net|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "cyclingboardgames.net"] [uri "/images2/worldcyclinggame5.jpg"] [unique_id "af20qUL_0frnlgLoJupgcQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 06:26:29
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 02:26:25.099667 2026] [security2:error] [pid 22382:tid 22382] [client 38.174.166.253:23006] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||backstore.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "backstore.com"] [uri "/backstore/Showroom/Corner-Table-Walnut-small.jpg"] [unique_id "af2CEYGhcdOjUEYxM3R5nAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 20:28:54
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 16:28:47.112080 2026] [security2:error] [pid 22106:tid 22106] [client 38.174.166.253:58926] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.tobyjohnson.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.tobyjohnson.com"] [uri "/Images/martinmcmurtrey_young.jpg"] [unique_id "afz1_xB334vQBgrQMPkOsgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 17:12:56
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 13:12:51.854019 2026] [security2:error] [pid 6645:tid 6645] [client 38.174.166.253:28372] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||neff.family.name|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "neff.family.name"] [uri "/unwiki/lib/exe/fetch.php"] [unique_id "afzIE8Ncv_rmriVY9w65MgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 15:58:18
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 11:58:02.827491 2026] [security2:error] [pid 26945:tid 26945] [client 38.174.166.253:56194] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||cosplayculture.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "cosplayculture.com"] [uri "/staging/wp-content/uploads/2017/12/km9-bp.jpg"] [unique_id "afy2ikmzP1NN8uAPlGVsngAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-07 14:47:18
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210740) triggered by 38.174.166.253 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 10:47:07.384896 2026] [security2:error] [pid 22047:tid 22047] [client 38.174.166.253:54574] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||modmove.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "modmove.com"] [uri "/wp-content/uploads/2015/11/The_Program_Movie.jpg"] [unique_id "afyl6-GJHR5p3t30jh30CwAAADE"]
show less
Brute-Force
Bad Web Bot
Web App Attack