🇺🇸
TPI-Abuse
2026-11-14 14:00:29
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:00:23.497087 2026] [security2:error] [pid 13031:tid 130 ...
show more
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 09:00:23.497087 2026] [security2:error] [pid 13031:tid 13031] [client 166.0.249.186:2090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "t9teamsportinggoods.com"] [uri "/sftp-config.json"] [unique_id "avhpdyC7DvTCJ2vGh9_axAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 09:47:15
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:47:07.596604 2026] [security2:error] [pid 25963:tid 259 ...
show more
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:47:07.596604 2026] [security2:error] [pid 25963:tid 25963] [client 166.0.249.186:61752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jmichaelpope.com"] [uri "/sftp-config.json"] [unique_id "avguG4T3GlUSxpewbs5q8gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 12:32:36
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:32:31.896434 2026] [security2:error] [pid 29689:tid 296 ...
show more
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:32:31.896434 2026] [security2:error] [pid 29689:tid 29689] [client 166.0.249.186:15830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lobibilisim.com"] [uri "/sftp-config.json"] [unique_id "avcDX8aAf-u4aYCkpgr74wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 05:25:58
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 00:25:54.280988 2026] [security2:error] [pid 17868:tid 178 ...
show more
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 00:25:54.280988 2026] [security2:error] [pid 17868:tid 17868] [client 166.0.249.186:42324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wraycurtis.com"] [uri "/sftp-config.json"] [unique_id "avP8Yrm81GrqzriogD1KpQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 15:00:55
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:00:48.382503 2026] [security2:error] [pid 9393:tid 9417 ...
show more
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:00:48.382503 2026] [security2:error] [pid 9393:tid 9417] [client 166.0.249.186:8094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ceresfund.com"] [uri "/sftp-config.json"] [unique_id "au3roHxX19UZeEX7nVI4owAAAJY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:31:33
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:31:25.865321 2026] [security2:error] [pid 27870:tid 278 ...
show more
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:31:25.865321 2026] [security2:error] [pid 27870:tid 27870] [client 166.0.249.186:38196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keystonestandard.com"] [uri "/sftp-config.json"] [unique_id "auh0jdoZr2ynjGApcxm4IAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 19:02:45
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:59:34.536279 2026] [security2:error] [pid 18793:tid 187 ...
show more
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:59:34.536279 2026] [security2:error] [pid 18793:tid 18793] [client 166.0.249.186:11944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sloaviation.com"] [uri "/sftp-config.json"] [unique_id "auOXlvvBHljFHVhPLfypsgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 16:40:20
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:38:30.744100 2026] [security2:error] [pid 17692:tid 176 ...
show more
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:38:30.744100 2026] [security2:error] [pid 17692:tid 17692] [client 166.0.249.186:49660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jadonbooth.com"] [uri "/sftp-config.json"] [unique_id "at4whkGhwRjmWBuWkXbOfAAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:12:03
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:11:55.832552 2026] [security2:error] [pid 10896:tid 108 ...
show more
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:11:55.832552 2026] [security2:error] [pid 10896:tid 10896] [client 166.0.249.186:9704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marcelacalvet.com"] [uri "/sftp-config.json"] [unique_id "atv3y04yIhMKVgMOThg_mgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 19:31:33
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 15:31:27.050242 2026] [security2:error] [pid 25193:tid 251 ...
show more
(mod_security) mod_security (id:210492) triggered by 166.0.249.186 (166-0-249-186.ips.acedatacenter.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 15:31:27.050242 2026] [security2:error] [pid 25193:tid 25193] [client 166.0.249.186:64790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "getyourjevon.com"] [uri "/sftp-config.json"] [unique_id "atfBj3zC9-e6CBmCWt2acgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
