🇺🇸
TPI-Abuse
2026-07-18 08:36:37
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 103.108.96.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 103.108.96.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 04:36:31.400674 2026] [security2:error] [pid 2037379:tid 2037379] [client 103.108.96.80:16470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eileensharaga.com"] [uri "/sftp-config.json"] [unique_id "als7D-oNbzUqs55NzDNxnQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
findlab
2026-07-18 03:25:02
(18 hours ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 20:14:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 103.108.96.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 103.108.96.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 16:14:00.376157 2026] [security2:error] [pid 3996:tid 3996] [client 103.108.96.80:64850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "capecodweddingideas.com"] [uri "/sftp-config.json"] [unique_id "alqNCIyArpq9cooxuqZUoQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 10:13:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 103.108.96.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 103.108.96.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 06:12:56.604597 2026] [security2:error] [pid 26550:tid 26550] [client 103.108.96.80:36682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "canadagreenrecycling.com"] [uri "/sftp-config.json"] [unique_id "aloAKJxr4eY6YEEkCnD80AAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-07-17 06:30:22
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
i-turnradio.nl
2026-07-17 04:15:14
(1 day ago)
2026-07-17 @ 06:15:13 (CET) ~ Blocked for trying to access: /.vscode/sftp.json
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 01:24:03
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 103.108.96.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 103.108.96.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 21:23:53.373713 2026] [security2:error] [pid 73165:tid 73165] [client 103.108.96.80:21092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "calogerolawfirm.com"] [uri "/sftp-config.json"] [unique_id "almEKUCUdUzD5Om_WhqIlwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 22:25:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 103.108.96.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 103.108.96.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 18:25:44.137924 2026] [security2:error] [pid 9612:tid 9612] [client 103.108.96.80:6690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "californiastarsfarm.com"] [uri "/sftp-config.json"] [unique_id "allaaHcsRiuEsEI9ERpoSwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 21:05:58
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 103.108.96.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 103.108.96.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 17:05:51.952935 2026] [security2:error] [pid 26678:tid 26678] [client 103.108.96.80:19420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "calfirstrealty.net"] [uri "/sftp-config.json"] [unique_id "allHrwO33kecSY2r7o4o9AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 17:03:35
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 103.108.96.80 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 103.108.96.80 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 13:03:29.938004 2026] [security2:error] [pid 32502:tid 32502] [client 103.108.96.80:64452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cageliners.net"] [uri "/sftp-config.json"] [unique_id "alkO4cKJa5sfdt4YuZFCIQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack