🇺🇸
TPI-Abuse
2026-11-14 11:58:32
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:58:24.949108 2026] [security2:error] [pid 1054936:tid 1054936] [client 142.252.10.28:4607 ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:58:24.949108 2026] [security2:error] [pid 1054936:tid 1054936] [client 142.252.10.28:46078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.janicestewart.net"] [uri "/sftp-config.json"] [unique_id "avhM4OkiBO5J1D2QidQxKwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 03:44:53
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:44:46.378005 2026] [security2:error] [pid 2149:tid 2149] [client 142.252.10.28:7566] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 22:44:46.378005 2026] [security2:error] [pid 2149:tid 2149] [client 142.252.10.28:7566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "matterofbritain.com"] [uri "/sftp-config.json"] [unique_id "avfZLnH6lf_m4yBIkFINFAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 00:54:13
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 19:54:10.338402 2026] [security2:error] [pid 24832:tid 24832] [client 142.252.10.28:49360] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 19:54:10.338402 2026] [security2:error] [pid 24832:tid 24832] [client 142.252.10.28:49360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karyaenigma.com"] [uri "/sftp-config.json"] [unique_id "avexMtDkn4kYM8weHA_xowAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 04:37:46
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:37:40.980462 2026] [security2:error] [pid 26868:tid 26939] [client 142.252.10.28:23730] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:37:40.980462 2026] [security2:error] [pid 26868:tid 26939] [client 142.252.10.28:23730] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "starlinksales.net"] [uri "/sftp-config.json"] [unique_id "au1ZlBh-wgJNKWR5gKhfQAAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:37:20
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:37:15.255140 2026] [security2:error] [pid 31810:tid 31810] [client 142.252.10.28:63166] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:37:15.255140 2026] [security2:error] [pid 31810:tid 31810] [client 142.252.10.28:63166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "speedysremodeling.com"] [uri "/sftp-config.json"] [unique_id "au1La4awtqoS7b39AZqlZwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 05:14:05
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 00:14:00.010505 2026] [security2:error] [pid 30581:tid 30581] [client 142.252.10.28:19234] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 00:14:00.010505 2026] [security2:error] [pid 30581:tid 30581] [client 142.252.10.28:19234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "africanwisdominimageandproverb.com"] [uri "/sftp-config.json"] [unique_id "aultmGBx9Iz9vYgbux9z8wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 00:21:12
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 19:21:05.156953 2026] [security2:error] [pid 22746:tid 22746] [client 142.252.10.28:64328] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 19:21:05.156953 2026] [security2:error] [pid 22746:tid 22746] [client 142.252.10.28:64328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "curriergallery.com"] [uri "/sftp-config.json"] [unique_id "aufXcYxbU6I_8WPhpxSoawAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 04:46:39
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 00:45:26.353588 2026] [security2:error] [pid 28063:tid 28063] [client 142.252.10.28:16262] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 00:45:26.353588 2026] [security2:error] [pid 28063:tid 28063] [client 142.252.10.28:16262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agworldmissions.org"] [uri "/sftp-config.json"] [unique_id "aubD5kCcD3ifw3wVy189eQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 11:54:50
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:54:12.741337 2026] [security2:error] [pid 337:tid 337] [client 142.252.10.28:7966] ModSec ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:54:12.741337 2026] [security2:error] [pid 337:tid 337] [client 142.252.10.28:7966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mldlnn.com"] [uri "/sftp-config.json"] [unique_id "auSFZJ9ZYLt-2aw6tj9QbAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 08:53:40
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 04:53:37.314751 2026] [security2:error] [pid 1937:tid 1962] [client 142.252.10.28:20414] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 04:53:37.314751 2026] [security2:error] [pid 1937:tid 1962] [client 142.252.10.28:20414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vavryn.net"] [uri "/sftp-config.json"] [unique_id "atxyEYY78Fyy7cCf4CozRgAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:09:22
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:09:19.301091 2026] [security2:error] [pid 26604:tid 26604] [client 142.252.10.28:46996] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:09:19.301091 2026] [security2:error] [pid 26604:tid 26604] [client 142.252.10.28:46996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jimmyshakes.org"] [uri "/sftp-config.json"] [unique_id "atv3L0Ex6tRKE3fcNGF5pwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 17:38:01
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 13:37:57.687729 2026] [security2:error] [pid 20773:tid 20773] [client 142.252.10.28:31118] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 13:37:57.687729 2026] [security2:error] [pid 20773:tid 20773] [client 142.252.10.28:31118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "se-advisorsgroup.com"] [uri "/sftp-config.json"] [unique_id "atem9UaZeW2x72k9V38hcwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-10-19 07:41:26
UTC ·
(3 weeks ago)
[MonOct1909:41:23.5324722026][security2:error][pid4161637:tid4161712][client142.252.10.28:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-B ...
show more
[MonOct1909:41:23.5324722026][security2:error][pid4161637:tid4161712][client142.252.10.28:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"shakary.com\"][uri\"/sftp-config.json\"][unique_id\"atXJoxIPGC_H1Kj8v8ol3wAAAME\"]
show less
Hacking
Web App Attack
🇳🇱
BlueWire Hosting
2026-10-19 07:40:17
UTC ·
(3 weeks ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 19:34:39
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 15:34:36.528305 2026] [security2:error] [pid 15924:tid 15924] [client 142.252.10.28:43138] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.10.28 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 15:34:36.528305 2026] [security2:error] [pid 15924:tid 15924] [client 142.252.10.28:43138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brupharm.org"] [uri "/sftp-config.json"] [unique_id "atUfTEc-zYLaw9tn9f-sxAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
