🇺🇸
TPI-Abuse
2026-11-15 21:54:30
UTC ·
(9 minutes ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 16:54:21.506597 2026] [security2:error] [pid 23701:tid 237 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 16:54:21.506597 2026] [security2:error] [pid 23701:tid 23707] [client 108.165.75.31:22894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ceresfund.com"] [uri "/sftp-config.json"] [unique_id "avoqDcvhPQaGHnDBXdjwDwAAAMM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-11-15 03:46:45
UTC ·
(18 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 07:22:25
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 02:22:19.782347 2026] [security2:error] [pid 14765:tid 147 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 02:22:19.782347 2026] [security2:error] [pid 14765:tid 14765] [client 108.165.75.31:6336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "africanwisdominimageandproverb.com"] [uri "/sftp-config.json"] [unique_id "avgMKxwuZV8EOyVSi7YDyQAAAC4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 00:41:49
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 19:41:45.130759 2026] [security2:error] [pid 27747:tid 277 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 19:41:45.130759 2026] [security2:error] [pid 27747:tid 27747] [client 108.165.75.31:38054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jiffycareers.com"] [uri "/sftp-config.json"] [unique_id "aveuSTA-5kofXnMnNDC0PwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:46:22
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:46:16.380818 2026] [security2:error] [pid 3337:tid 3337 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:46:16.380818 2026] [security2:error] [pid 3337:tid 3337] [client 108.165.75.31:47716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.totenclaus.es"] [uri "/sftp-config.json"] [unique_id "avTwOLEweKRg8mBnKblRXAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-11-07 19:41:18
UTC ·
(1 week ago)
(web_sensitive_file) srv104 Sensitive file probe (.env/.git/backup) 108.165.75.31 (TR/Turkey/108-165-75-31.ips.acedatacenter.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 15:05:24
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:05:16.654124 2026] [security2:error] [pid 20186:tid 201 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:05:16.654124 2026] [security2:error] [pid 20186:tid 20186] [client 108.165.75.31:46928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "designamb.com"] [uri "/sftp-config.json"] [unique_id "au8-LOhuUtWk5hj2WtY5hwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 10:03:36
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 05:03:33.746334 2026] [security2:error] [pid 5076:tid 5076 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 05:03:33.746334 2026] [security2:error] [pid 5076:tid 5076] [client 108.165.75.31:32494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "diepeveen.net"] [uri "/sftp-config.json"] [unique_id "auhf9XhjQBBuyPHE7czpbAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 19:01:11
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:59:25.753913 2026] [security2:error] [pid 26085:tid 260 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:59:25.753913 2026] [security2:error] [pid 26085:tid 26085] [client 108.165.75.31:64390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hischurchatwork.org"] [uri "/sftp-config.json"] [unique_id "auOXjePtDSYZ65cD6y2phwAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 08:23:25
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 04:23:16.823528 2026] [security2:error] [pid 2889:tid 2889 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 04:23:16.823528 2026] [security2:error] [pid 2889:tid 2889] [client 108.165.75.31:37834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hawleyrentals.com"] [uri "/sftp-config.json"] [unique_id "auGw9AzAuT0qPwSJ9ItG7gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
jcbriar
2026-10-26 22:33:00
UTC ·
(2 weeks ago)
Searching for vulnerable scripts
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 14:07:18
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210580) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 10:07:11.958057 2026] [security2:error] [pid 21761:tid 217 ...
show more
(mod_security) mod_security (id:210580) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 10:07:11.958057 2026] [security2:error] [pid 21761:tid 21761] [client 108.165.75.31:62346] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||timlandry.com|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: https:/theimmigrationadvocates.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "timlandry.com"] [uri "/.vscode/sftp.json"] [unique_id "aty7j73qZ17kX-joLDFf4QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 22:14:29
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 18:14:21.528915 2026] [security2:error] [pid 16643:tid 166 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 18:14:21.528915 2026] [security2:error] [pid 16643:tid 16643] [client 108.165.75.31:2538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jpwatters.com"] [uri "/sftp-config.json"] [unique_id "atfnvTssZJh6zrs0pKmQWgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 19:13:49
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 15:13:44.918466 2026] [security2:error] [pid 24743:tid 247 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.31 (108-165-75-31.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 15:13:44.918466 2026] [security2:error] [pid 24743:tid 24757] [client 108.165.75.31:41926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "briteh.com"] [uri "/sftp-config.json"] [unique_id "ate9aEVdH4eqRjpCA6i6GQAAAQw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
francelink.fr
2026-10-20 02:11:26
UTC ·
(3 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-20T02:09:27.000Z.
Web App Attack
