🇺🇸
TPI-Abuse
2026-11-13 05:41:38
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:41:32.761199 2026] [security2:error] [pid 21348:tid 213 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:41:32.761199 2026] [security2:error] [pid 21348:tid 21348] [client 108.165.75.61:50994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whiteblackbird.com"] [uri "/sftp-config.json"] [unique_id "avajDMFnG3Evvwbl-s3f_AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 02:33:18
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:33:13.734245 2026] [security2:error] [pid 22204:tid 222 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 21:33:13.734245 2026] [security2:error] [pid 22204:tid 22270] [client 108.165.75.61:56570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "visionforandfromchildren.org"] [uri "/sftp-config.json"] [unique_id "avZ26U3dyivGLDIm_FWxrgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 13:31:06
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:30:56.712401 2026] [security2:error] [pid 9672:tid 9672 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 08:30:56.712401 2026] [security2:error] [pid 9672:tid 9672] [client 108.165.75.61:21328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.washcountyfair.com"] [uri "/sftp-config.json"] [unique_id "avW_kBhE5dggM7phwcDbIQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:37:32
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:37:26.008704 2026] [security2:error] [pid 536:tid 536] ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:37:26.008704 2026] [security2:error] [pid 536:tid 536] [client 108.165.75.61:60356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virttee.com"] [uri "/sftp-config.json"] [unique_id "avVepubX_iq0--3HR0Lr8gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:37:59
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:37:54.787773 2026] [security2:error] [pid 4639:tid 4639 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:37:54.787773 2026] [security2:error] [pid 4639:tid 4639] [client 108.165.75.61:29366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.enriquelaw.com"] [uri "/sftp-config.json"] [unique_id "avRFglsXqXL8VPGWXVNJSwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 10:34:29
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:32:57.984371 2026] [security2:error] [pid 11082:tid 110 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:32:57.984371 2026] [security2:error] [pid 11082:tid 11082] [client 108.165.75.61:38184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "syscompcuenca.com"] [uri "/sftp-config.json"] [unique_id "au2s2QIoC9haED8s7MUCTgAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-11-06 08:40:57
UTC ·
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-02 11:19:42
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:19:33.262825 2026] [security2:error] [pid 9199:tid 9199 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:19:33.262825 2026] [security2:error] [pid 9199:tid 9199] [client 108.165.75.61:62608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mitchellamazing.com"] [uri "/sftp-config.json"] [unique_id "auhxxc_3npIPc41rvzF8ZQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 07:42:23
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 03:42:18.656296 2026] [security2:error] [pid 3841:tid 3841 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 03:42:18.656296 2026] [security2:error] [pid 3841:tid 3841] [client 108.165.75.61:24482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cajunfriedturkey.com"] [uri "/sftp-config.json"] [unique_id "auWb2oa7vok9BTFqyVWe-AAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 11:54:57
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:54:18.084111 2026] [security2:error] [pid 342:tid 342] ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:54:18.084111 2026] [security2:error] [pid 342:tid 342] [client 108.165.75.61:61662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "listerman.org"] [uri "/sftp-config.json"] [unique_id "auSFauLq241HfSHfod5IRAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 13:50:09
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 09:50:02.622709 2026] [security2:error] [pid 17153:tid 171 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.61 (108-165-75-61.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 09:50:02.622709 2026] [security2:error] [pid 17153:tid 17153] [client 108.165.75.61:13830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "georgeberkedesign.com"] [uri "/sftp-config.json"] [unique_id "atdxivEhw7nFDhcN8CFakgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-20 08:45:53
UTC ·
(3 weeks ago)
Secret file probe | method: GET | path: /.vscode/sftp.json | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
Hacking
Web App Attack
