🇩🇪
SCHAPPY
2026-07-22 21:20:01
(2 days ago)
IP was involved in L7 DDoS attack.
DDoS Attack
🇮🇹
A000Z
2026-07-10 12:38:08
(2 weeks ago)
Fail2Ban: 38.63.191.59 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 ...
show more
Fail2Ban: 38.63.191.59 was banned for Aggressive Bad Bot detected by Nginx/Fail2Ban. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-13 15:59:44
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 11:59:35.994640 2026] [security2:error] [pid 12904:tid 12904] [client 38.63.191.59:59188] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||cosplayculture.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "cosplayculture.com"] [uri "/wp-content/uploads/2018/09/2xs-1b.jpg"] [unique_id "agSf55QFMWwYajjasB85TAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 14:05:11
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 10:04:55.804754 2026] [security2:error] [pid 7521:tid 7521] [client 38.63.191.59:57454] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||cyclingboardgames.net|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "cyclingboardgames.net"] [uri "/images2/toutautour7.jpg"] [unique_id "agSFB8QIA7xFcfjkr_TM9QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 13:34:04
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 13 09:33:58.058752 2026] [security2:error] [pid 2645:tid 2645] [client 38.63.191.59:56576] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.rochesterhistorical.org|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.rochesterhistorical.org"] [uri "/wp-content/gallery/architecture/cache/Soilders Monument s20.jpg-nggid03303-ngg0dyn-320x240x100-00f0w010c010r110f110r010t010.jpg"] [unique_id "agR9xmtmMiAPVjBdmmAkhQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-13 02:11:32
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue May 12 22:11:28.645776 2026] [security2:error] [pid 21312:tid 21312] [client 38.63.191.59:41256] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||enriquejezik.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "enriquejezik.com"] [uri "/wp-content/uploads/2018/04/d_sesentaintentos.jpg"] [unique_id "agPd0M8CJzxlHT3uDiPS7QAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-12 00:11:55
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 11 20:11:51.245228 2026] [security2:error] [pid 30966:tid 30966] [client 38.63.191.59:33760] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.yarbroughfamily.org|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.yarbroughfamily.org"] [uri "/conf/image9.jpg"] [unique_id "agJwR6CRmXEAyPB_49wrPwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-10 15:50:31
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 10 11:50:23.281849 2026] [security2:error] [pid 18250:tid 18250] [client 38.63.191.59:48992] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||persnicketyinc.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "persnicketyinc.com"] [uri "/wp-content/uploads/Dotted-Day-1.jpg"] [unique_id "agCpP99PWJ-ygy0KwOPnEgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-09 11:38:30
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 09 07:38:23.841380 2026] [security2:error] [pid 29565:tid 29565] [client 38.63.191.59:59284] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||modmove.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "modmove.com"] [uri "/wp-content/uploads/2016/09/The_Temper_Trap_2016.jpg"] [unique_id "af8cr7OR4qljPbazLPau5QAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-09 00:54:46
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 20:54:42.597418 2026] [security2:error] [pid 4891:tid 4936] [client 38.63.191.59:37628] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.adprospb.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.adprospb.com"] [uri "/custom-logo-promotional-products/backpack/clear/backpack-wheels-sm.jpg"] [unique_id "af6F0l-kXgxln4dDfBUw_gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 09:38:23
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 05:38:20.261978 2026] [security2:error] [pid 27154:tid 27154] [client 38.63.191.59:38918] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||www.greenquince.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "www.greenquince.com"] [uri "/wp-content/uploads/2014/04/SecretSocietySlide-1-500x350.jpg"] [unique_id "af2vDGln9FHjwy5ks5dFnAAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 08:46:53
(2 months ago)
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 04:46:49.469838 2026] [security2:error] [pid 32041:tid 32041] [client 38.63.191.59:47072] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||backstore.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "backstore.com"] [uri "/backstore/HumanTouch/pics/Human-Touch-PC-610-Perfect-Chair-Colors-600.jpg"] [unique_id "af2i-X2xQzCGfTfTbQdRQwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-13 04:08:09
(3 months ago)
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210740) triggered by 38.63.191.59 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 13 00:08:04.417918 2026] [security2:error] [pid 2951059:tid 2951059] [client 38.63.191.59:49284] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/Proxy-Connection/" at TX:header_name. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "33"] [id "210740"] [rev "2"] [msg "COMODO WAF: HTTP header is restricted by policy||fashionmenswear.com|F|4"] [data "/Proxy-Connection/"] [severity "WARNING"] [tag "CWAF"] [tag "HTTP"] [hostname "fashionmenswear.com"] [uri "/store/media/catalog/product/cache/1/small_image/400x600/9df78eab33525d08d6e5fb8d27136e95/6/2/6237.jpg"] [unique_id "adxsJDgj7QG-n1pIJKX42wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack