🇺🇸
TPI-Abuse
2026-11-11 10:37:44
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:37:39.895472 2026] [security2:error] [pid 26489:tid 26489] [client 157.254.69.66:21648] M ...
show more
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:37:39.895472 2026] [security2:error] [pid 26489:tid 26489] [client 157.254.69.66:21648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flashbackmusicmemories.com"] [uri "/sftp-config.json"] [unique_id "avRFcydaGcZ1V1tKsrG4HQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:21:19
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:21:15.110281 2026] [security2:error] [pid 13949:tid 13949] [client 157.254.69.66:50268] M ...
show more
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:21:15.110281 2026] [security2:error] [pid 13949:tid 13949] [client 157.254.69.66:50268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gilgoinn.com"] [uri "/sftp-config.json"] [unique_id "au1Hq86Z9VwUvGP7JgVu2AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 11:12:30
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 06:12:27.505032 2026] [security2:error] [pid 5788:tid 5788] [client 157.254.69.66:10892] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 06:12:27.505032 2026] [security2:error] [pid 5788:tid 5788] [client 157.254.69.66:10892] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rocknwalktours.com"] [uri "/sftp-config.json"] [unique_id "auxkm9NEzm8rOnxx47SsygAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:40:26
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:40:19.200009 2026] [security2:error] [pid 3838:tid 3838] [client 157.254.69.66:21822] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:40:19.200009 2026] [security2:error] [pid 3838:tid 3838] [client 157.254.69.66:21822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oualierealty.com"] [uri "/sftp-config.json"] [unique_id "auh2o31guOAYAqzOAbM9jgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 01:46:43
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 20:46:39.443122 2026] [security2:error] [pid 17837:tid 17837] [client 157.254.69.66:17490] M ...
show more
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 20:46:39.443122 2026] [security2:error] [pid 17837:tid 17837] [client 157.254.69.66:17490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "customhumanrobots.com"] [uri "/sftp-config.json"] [unique_id "aufrf0Db0gBVUOQXNnrcXwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 08:46:51
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:46:43.540568 2026] [security2:error] [pid 28258:tid 28258] [client 157.254.69.66:60100] M ...
show more
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:46:43.540568 2026] [security2:error] [pid 28258:tid 28258] [client 157.254.69.66:60100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "californiarhythmproject.org"] [uri "/sftp-config.json"] [unique_id "auWq84dsl9wQdvjWhh5o-AAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 14:23:35
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 10:23:27.656346 2026] [security2:error] [pid 21368:tid 21368] [client 157.254.69.66:51424] M ...
show more
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 10:23:27.656346 2026] [security2:error] [pid 21368:tid 21368] [client 157.254.69.66:51424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3beeze.com"] [uri "/sftp-config.json"] [unique_id "auSoX_Jn7JkACk1KBQzvnQAAAC4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 08:12:41
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 04:12:35.883149 2026] [security2:error] [pid 18942:tid 18942] [client 157.254.69.66:64052] M ...
show more
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 04:12:35.883149 2026] [security2:error] [pid 18942:tid 18942] [client 157.254.69.66:64052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bobbyunser.com"] [uri "/sftp-config.json"] [unique_id "auGuc1bIc6cEt7Vtsc0eFQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TIScore
2026-10-24 08:09:25
UTC ·
(2 weeks ago)
Automated web attack / probing. Signals: Secret / VCS probing; Unexpected path. Last path: /sftp-config.json
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 06:53:46
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 02:53:39.087425 2026] [security2:error] [pid 9759:tid 9759] [client 157.254.69.66:17840] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 02:53:39.087425 2026] [security2:error] [pid 9759:tid 9759] [client 157.254.69.66:17840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "murphylumber.ca"] [uri "/sftp-config.json"] [unique_id "atcP88GgZgElwcDLq4WVMwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 06:12:33
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 02:12:28.290226 2026] [security2:error] [pid 20161:tid 20186] [client 157.254.69.66:60584] M ...
show more
(mod_security) mod_security (id:210492) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 02:12:28.290226 2026] [security2:error] [pid 20161:tid 20186] [client 157.254.69.66:60584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "busybeerestaurant.com"] [uri "/sftp-config.json"] [unique_id "atRjTNH0yHV3TrrXLsycZwAAAUU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-18 05:18:57
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 01:18:51.512703 2026] [security2:error] [pid 29204:tid 29204] [client 157.254.69.66:64444] M ...
show more
(mod_security) mod_security (id:210730) triggered by 157.254.69.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 01:18:51.512703 2026] [security2:error] [pid 29204:tid 29204] [client 157.254.69.66:64444] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.berkelmiami.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.berkelmiami.com"] [uri "/autodiscover/autodiscover.json/v1.0/[email protected] "] [unique_id "aqzJu6JOEc-P18dJ4ncR2gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
inlink.ltd
2026-05-19 23:31:16
UTC ·
(5 months ago)
Known malicious PHP file or CMS probe
Web App Attack
🇫🇷
masterguru
2026-04-27 08:50:41
UTC ·
(6 months ago)
(modsec_5015) ModSec 5015: Suspicious User-Agent from 157.254.69.66 (US/United States/-): 1 in the last 3600 secs (0-201)
Hacking
