🇺🇸
TPI-Abuse
2026-06-12 12:29:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 103.117.92.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 103.117.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 08:29:00.939294 2026] [security2:error] [pid 14957:tid 14957] [client 103.117.92.55:21036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "f4fbbs.com"] [uri "/sftp-config.json"] [unique_id "aiv7jC98gPfE2j4hTUf1CQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 00:07:56
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 103.117.92.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:949110) triggered by 103.117.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 20:07:47.515625 2026] [security2:error] [pid 1167:tid 1167] [client 103.117.92.55:20708] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "exorex.com"] [uri "/.vscode/sftp.json"] [unique_id "aitN01k-cMLCixFSGzLumAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 23:05:43
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 103.117.92.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 103.117.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 19:05:26.631415 2026] [security2:error] [pid 23546:tid 23546] [client 103.117.92.55:13958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "exhaustthelimits.org"] [uri "/sftp-config.json"] [unique_id "ais_NtlDlOifp7o2Cs8BOAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 19:43:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 103.117.92.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 103.117.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 15:43:32.717368 2026] [security2:error] [pid 24405:tid 24492] [client 103.117.92.55:24208] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ewoolsey.com"] [uri "/sftp-config.json"] [unique_id "aisP5Kj6d9Cs1i-WUx0yPQAAAMA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 17:50:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 103.117.92.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 103.117.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 13:50:14.621569 2026] [security2:error] [pid 18782:tid 18782] [client 103.117.92.55:29734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "evolutionmedical.help"] [uri "/sftp-config.json"] [unique_id "air1VlNkuas90pvZhKzDcwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 11:20:54
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 103.117.92.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 103.117.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 07:20:49.819912 2026] [security2:error] [pid 15994:tid 15994] [client 103.117.92.55:38766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "evannine.com"] [uri "/sftp-config.json"] [unique_id "aiqaEQG36hXRXlqLjr40_gAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-06-11 10:14:34
(2 days ago)
[ThuJun1112:14:30.0531152026][security2:error][pid2748464:tid2748748][client103.117.92.55:0]ModSecur ...
show more
[ThuJun1112:14:30.0531152026][security2:error][pid2748464:tid2748748][client103.117.92.55:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"eutecne.ch\"][uri\"/sftp-config.json\"][unique_id\"aiqKhr24q2N5M4IAZf-TCwAAAQQ\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 09:46:12
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 103.117.92.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 103.117.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 05:46:03.864915 2026] [security2:error] [pid 14716:tid 14716] [client 103.117.92.55:18626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eurosoni.com"] [uri "/sftp-config.json"] [unique_id "aiqD2xG67jYGbupN1YhptQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 00:15:44
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 103.117.92.55 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 103.117.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 20:15:37.886617 2026] [security2:error] [pid 15643:tid 15643] [client 103.117.92.55:10342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "estellenussbaum.com"] [uri "/sftp-config.json"] [unique_id "ain-KUWyf3tSEn6tyOZmBAAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
bescared
2026-06-10 23:28:30
(2 days ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack