🇩🇪
s@ch@
2026-11-12 22:00:04
UTC ·
(21 hours ago)
Jail: plesk-modsecurity | Web application attack (Plesk ModSecurity)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 05:31:48
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 00:31:21.307665 2026] [security2:error] [pid 682:tid 682] [client 154.37.80.192:10546] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 00:31:21.307665 2026] [security2:error] [pid 682:tid 682] [client 154.37.80.192:10546] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nationalenq.com"] [uri "/sftp-config.json"] [unique_id "auggKY_KNzoM1bC5BQNGOwAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 18:59:17
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:59:13.745454 2026] [security2:error] [pid 24107:tid 24107] [client 154.37.80.192:49134] M ...
show more
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:59:13.745454 2026] [security2:error] [pid 24107:tid 24107] [client 154.37.80.192:49134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dr-taylor.com"] [uri "/sftp-config.json"] [unique_id "auOXgXOSbtTdwT-MqgRNVQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 00:37:07
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:35:44.577196 2026] [security2:error] [pid 9679:tid 9700] [client 154.37.80.192:59312] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:35:44.577196 2026] [security2:error] [pid 9679:tid 9700] [client 154.37.80.192:59312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lead-sleds.com"] [uri "/sftp-config.json"] [unique_id "auFDYPX3VIhqry-LAZPaVAAAARI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 15:44:23
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 11:44:19.907572 2026] [security2:error] [pid 23262:tid 23262] [client 154.37.80.192:22018] M ...
show more
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 11:44:19.907572 2026] [security2:error] [pid 23262:tid 23262] [client 154.37.80.192:22018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vampireproductions.com"] [uri "/sftp-config.json"] [unique_id "atzSUyX7fda2AN8I-5nzkQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 15:21:07
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 11:21:01.004649 2026] [security2:error] [pid 28481:tid 28481] [client 154.37.80.192:17670] M ...
show more
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 11:21:01.004649 2026] [security2:error] [pid 28481:tid 28481] [client 154.37.80.192:17670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tinseltownartificials.com"] [uri "/sftp-config.json"] [unique_id "atzM3dBwDK75fOgKdNOQPwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
openstrike.co.uk
2026-10-21 05:15:11
UTC ·
(3 weeks ago)
2 attacks on password/key grabbing URLs:
GET /.vscode/sftp.json HTTP/1.1
Hacking
🇺🇸
TPI-Abuse
2026-10-19 14:33:16
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 10:33:10.138198 2026] [security2:error] [pid 19022:tid 19022] [client 154.37.80.192:60802] M ...
show more
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 10:33:10.138198 2026] [security2:error] [pid 19022:tid 19022] [client 154.37.80.192:60802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schonplanet.com"] [uri "/sftp-config.json"] [unique_id "atYqJuDVXL5ygZIY9upMigAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 16:11:38
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 12:11:29.921967 2026] [security2:error] [pid 27646:tid 27646] [client 154.37.80.192:25276] M ...
show more
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 12:11:29.921967 2026] [security2:error] [pid 27646:tid 27646] [client 154.37.80.192:25276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rondeal.com"] [uri "/sftp-config.json"] [unique_id "atOeMfd-DH4UcChWmg1b6wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 10:00:33
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 06:00:28.546740 2026] [security2:error] [pid 8529:tid 8529] [client 154.37.80.192:40012] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 06:00:28.546740 2026] [security2:error] [pid 8529:tid 8529] [client 154.37.80.192:40012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "puckerbuttbikinis.com"] [uri "/sftp-config.json"] [unique_id "atNHPOAP3auQvRuXc3sxoAAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 09:13:11
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 05:12:34.317024 2026] [security2:error] [pid 4305:tid 4305] [client 154.37.80.192:13102] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 154.37.80.192 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 05:12:34.317024 2026] [security2:error] [pid 4305:tid 4305] [client 154.37.80.192:13102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendykim.com"] [uri "/sftp-config.json"] [unique_id "atM8Aq09qk8HxeIDS8joXAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
