🇩🇪
FeG Deutschland
2026-11-14 18:06:46
UTC ·
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 11:04:55
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:04:49.674090 2026] [security2:error] [pid 10217:tid 10217] [client 104.222.165.89:39310] ...
show more
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:04:49.674090 2026] [security2:error] [pid 10217:tid 10217] [client 104.222.165.89:39310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.laboquimia.es"] [uri "/sftp-config.json"] [unique_id "avRL0TX7GUOx4twRHZL_QQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 16:56:47
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:56:43.150850 2026] [security2:error] [pid 31514:tid 31514] [client 104.222.165.89:3330] ...
show more
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 11:56:43.150850 2026] [security2:error] [pid 31514:tid 31514] [client 104.222.165.89:3330] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ajvaage.com"] [uri "/sftp-config.json"] [unique_id "avH7S_XgeI5qHjmFqRaBLwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 19:37:01
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 14:36:55.993151 2026] [security2:error] [pid 14832:tid 14832] [client 104.222.165.89:18112] ...
show more
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 14:36:55.993151 2026] [security2:error] [pid 14832:tid 14832] [client 104.222.165.89:18112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chrischamberlain.com"] [uri "/sftp-config.json"] [unique_id "au9912447V-TRBTvgsP5YQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:30:07
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:30:01.500866 2026] [security2:error] [pid 614:tid 614] [client 104.222.165.89:58582] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:30:01.500866 2026] [security2:error] [pid 614:tid 614] [client 104.222.165.89:58582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextlevelcharge.com"] [uri "/sftp-config.json"] [unique_id "au1JuSDt1sfHI2chqFxzFAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 16:39:47
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:38:35.975533 2026] [security2:error] [pid 17690:tid 17690] [client 104.222.165.89:51912] ...
show more
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:38:35.975533 2026] [security2:error] [pid 17690:tid 17690] [client 104.222.165.89:51912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "labcomputers.com"] [uri "/sftp-config.json"] [unique_id "at4wi-Of1-8K9kyBq8nCnAAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 16:17:30
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:17:25.302388 2026] [security2:error] [pid 18281:tid 18281] [client 104.222.165.89:0] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:17:25.302388 2026] [security2:error] [pid 18281:tid 18281] [client 104.222.165.89:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sportsbookcommission.com"] [uri "/sftp-config.json"] [unique_id "at4rlYMNz3ApBHYgkXPVAgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 03:15:33
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 23:15:28.235062 2026] [security2:error] [pid 14826:tid 14826] [client 104.222.165.89:28462] ...
show more
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 23:15:28.235062 2026] [security2:error] [pid 14826:tid 14826] [client 104.222.165.89:28462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gesegurospma.com"] [uri "/sftp-config.json"] [unique_id "at10UNPmWiW5CVmjtOJ4lgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 23:48:10
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 19:48:04.142116 2026] [security2:error] [pid 19783:tid 19783] [client 104.222.165.89:15382] ...
show more
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 19:48:04.142116 2026] [security2:error] [pid 19783:tid 19783] [client 104.222.165.89:15382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "majersigns.com"] [uri "/sftp-config.json"] [unique_id "atf9tHC9-M16qG9ByTj6lAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 03:11:56
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 23:11:51.428766 2026] [security2:error] [pid 15880:tid 15880] [client 104.222.165.89:64400] ...
show more
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 23:11:51.428766 2026] [security2:error] [pid 15880:tid 15880] [client 104.222.165.89:64400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "camouflagebikinis.com"] [uri "/sftp-config.json"] [unique_id "atWKd_t0IQ_gkrwLwORkbwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 02:53:09
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 22:53:04.511205 2026] [security2:error] [pid 16865:tid 16865] [client 104.222.165.89:43912] ...
show more
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 22:53:04.511205 2026] [security2:error] [pid 16865:tid 16865] [client 104.222.165.89:43912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spiritofacorn.com"] [uri "/sftp-config.json"] [unique_id "atWGELm0zKfN53-xU2CNrgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 11:33:44
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 07:33:37.456871 2026] [security2:error] [pid 4146:tid 4146] [client 104.222.165.89:50204] M ...
show more
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 07:33:37.456871 2026] [security2:error] [pid 4146:tid 4146] [client 104.222.165.89:50204] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carefreesol.com"] [uri "/sftp-config.json"] [unique_id "atSukXp0AIu5bYewNsXkIQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 18:18:20
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 14:18:15.598239 2026] [security2:error] [pid 13731:tid 13731] [client 104.222.165.89:39386] ...
show more
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 14:18:15.598239 2026] [security2:error] [pid 13731:tid 13731] [client 104.222.165.89:39386] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jazziiafoundation.org"] [uri "/sftp-config.json"] [unique_id "atO755vuONsixVfp0XpUNwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 20:52:02
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 16:51:56.552012 2026] [security2:error] [pid 23575:tid 23575] [client 104.222.165.89:55858] ...
show more
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 16:51:56.552012 2026] [security2:error] [pid 23575:tid 23575] [client 104.222.165.89:55858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kontikimotorcycles.com"] [uri "/sftp-config.json"] [unique_id "atKObJF8883olebTy9-6CQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 18:44:32
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 14:44:29.247536 2026] [security2:error] [pid 6882:tid 6882] [client 104.222.165.89:46472] M ...
show more
(mod_security) mod_security (id:210492) triggered by 104.222.165.89 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 14:44:29.247536 2026] [security2:error] [pid 6882:tid 6882] [client 104.222.165.89:46472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kobraagencies.com"] [uri "/sftp-config.json"] [unique_id "atJwjTiCe61qfC0zJnJuzgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
