🇺🇸
TPI-Abuse
2026-11-14 09:56:49
UTC ·
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:56:45.637824 2026] [security2:error] [pid 30630:tid 306 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:56:45.637824 2026] [security2:error] [pid 30630:tid 30656] [client 108.165.75.69:26408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "resort4pets.com"] [uri "/sftp-config.json"] [unique_id "avgwXYzHTA_c2axQTe48zAAAARI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 08:03:34
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:03:29.032759 2026] [security2:error] [pid 14958:tid 149 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 03:03:29.032759 2026] [security2:error] [pid 14958:tid 14958] [client 108.165.75.69:27152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lajoze.com"] [uri "/sftp-config.json"] [unique_id "avgV0WpxWqCsdTDC5t5K2AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 05:35:13
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:35:07.130999 2026] [security2:error] [pid 398487:tid 39 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:35:07.130999 2026] [security2:error] [pid 398487:tid 398487] [client 108.165.75.69:15770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wordandspiritministrycenter.com"] [uri "/sftp-config.json"] [unique_id "avahi1EU316sMGL9giJExgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:24:42
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:24:36.523433 2026] [security2:error] [pid 12877:tid 130 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:24:36.523433 2026] [security2:error] [pid 12877:tid 13014] [client 108.165.75.69:10782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hooknpatch.com"] [uri "/sftp-config.json"] [unique_id "avTrJMsjqZ1L5ND5cBvmhQAAARQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:46:07
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:46:00.844582 2026] [security2:error] [pid 28157:tid 281 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:46:00.844582 2026] [security2:error] [pid 28157:tid 28157] [client 108.165.75.69:57782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mitchellamazing.com"] [uri "/sftp-config.json"] [unique_id "avRHaHBdeo3XllM8nb5LCQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 17:58:23
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 12:58:16.861143 2026] [security2:error] [pid 12228:tid 122 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 12:58:16.861143 2026] [security2:error] [pid 12228:tid 12228] [client 108.165.75.69:63170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cms2020.com"] [uri "/sftp-config.json"] [unique_id "au9muLqNciXuD91TVPTjjQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 11:09:19
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 06:09:13.206532 2026] [security2:error] [pid 5196:tid 5196 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 06:09:13.206532 2026] [security2:error] [pid 5196:tid 5196] [client 108.165.75.69:56440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "penisbreath.com"] [uri "/sftp-config.json"] [unique_id "auxj2UJZ7NcNO-sMmmsJMgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 06:58:37
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 01:58:32.216126 2026] [security2:error] [pid 21946:tid 219 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 01:58:32.216126 2026] [security2:error] [pid 21946:tid 21946] [client 108.165.75.69:30600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "logicpuzzles.com"] [uri "/sftp-config.json"] [unique_id "auwpGAM_z4UsK-4jQpezNgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 18:07:27
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 13:07:20.450722 2026] [security2:error] [pid 11369:tid 113 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 13:07:20.450722 2026] [security2:error] [pid 11369:tid 11369] [client 108.165.75.69:55308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beautyradio.com"] [uri "/sftp-config.json"] [unique_id "aujRWIW9LGfSJwmn9KG9GgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:33:17
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:33:12.839230 2026] [security2:error] [pid 6800:tid 6800 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:33:12.839230 2026] [security2:error] [pid 6800:tid 6800] [client 108.165.75.69:58870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luvmypuggle.com"] [uri "/sftp-config.json"] [unique_id "auh0-Nxd5sMNbL2Y4gCClAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 14:29:41
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 10:27:25.482053 2026] [security2:error] [pid 9700:tid 9700 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 10:27:25.482053 2026] [security2:error] [pid 9700:tid 9700] [client 108.165.75.69:36312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boat-registration-hong-kong.com"] [uri "/sftp-config.json"] [unique_id "auSpTVWqi0fEKME_7Cuc1QAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 23:44:11
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 19:44:06.283050 2026] [security2:error] [pid 1559:tid 1559 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 19:44:06.283050 2026] [security2:error] [pid 1559:tid 1559] [client 108.165.75.69:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jspsf.com"] [uri "/sftp-config.json"] [unique_id "atf8xvn3Zm0vcdvJuRqvngAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 12:22:58
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 08:22:51.483652 2026] [security2:error] [pid 20343:tid 203 ...
show more
(mod_security) mod_security (id:210492) triggered by 108.165.75.69 (108-165-75-69.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 08:22:51.483652 2026] [security2:error] [pid 20343:tid 20370] [client 108.165.75.69:38008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "twobeagsbarkingphotography.com"] [uri "/sftp-config.json"] [unique_id "atddG9spVig0mPVJdE1R_QAAANc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-10-20 09:01:36
UTC ·
(3 weeks ago)
High-confidence malicious configuration/VCS probe
Web App Attack
2026-10-19 18:46:35
UTC ·
(3 weeks ago)
108.165.75.69 - - [19/Oct/2026:18:46:35 +0000] "GET /.vscode/sftp.json HTTP/1.1" 302 509 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
...
Bad Web Bot
Web App Attack
