🇺🇸
TPI-Abuse
2026-11-06 14:55:17
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 172.84.186.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:55:11.941131 2026] [security2:error] [pid 17866:tid 17866] [client 172.84.186.3:13950] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.84.186.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:55:11.941131 2026] [security2:error] [pid 17866:tid 17866] [client 172.84.186.3:13950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thecrimsonpirate.com"] [uri "/sftp-config.json"] [unique_id "au3qTzxFEX6AHRal3I6dvAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 01:25:45
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.84.186.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 20:25:40.453024 2026] [security2:error] [pid 12724:tid 12724] [client 172.84.186.3:44926] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.84.186.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 20:25:40.453024 2026] [security2:error] [pid 12724:tid 12724] [client 172.84.186.3:44926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "djemjaybeats.com"] [uri "/sftp-config.json"] [unique_id "aufmlOmdkl1gtvO3p5h2OAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 00:37:34
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 172.84.186.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:35:46.991106 2026] [security2:error] [pid 27999:tid 28007] [client 172.84.186.3:3812] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 172.84.186.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:35:46.991106 2026] [security2:error] [pid 27999:tid 28007] [client 172.84.186.3:3812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "moidawg.gg"] [uri "/sftp-config.json"] [unique_id "auFDYiZm2dWi4JhLFbl8jwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-26 20:25:08
UTC ·
(2 weeks ago)
Secret file probe | method: GET | path: /.vscode/sftp.json | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 | src_port: 54354
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 14:06:00
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.84.186.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 10:05:53.842607 2026] [security2:error] [pid 14533:tid 14533] [client 172.84.186.3:25838] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.84.186.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 10:05:53.842607 2026] [security2:error] [pid 14533:tid 14533] [client 172.84.186.3:25838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "usbea.com"] [uri "/sftp-config.json"] [unique_id "aty7Qepx_lvQjJEF3NINfwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 10:19:03
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.84.186.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 06:18:54.897617 2026] [security2:error] [pid 21563:tid 21563] [client 172.84.186.3:20084] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.84.186.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 06:18:54.897617 2026] [security2:error] [pid 21563:tid 21563] [client 172.84.186.3:20084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sayhellotometamodernism.com"] [uri "/sftp-config.json"] [unique_id "atiRjkuIC0kqItiCYZnaggAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 11:52:41
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.84.186.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 07:52:38.357465 2026] [security2:error] [pid 7928:tid 7928] [client 172.84.186.3:12790] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 172.84.186.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 07:52:38.357465 2026] [security2:error] [pid 7928:tid 7928] [client 172.84.186.3:12790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seacorre.de"] [uri "/sftp-config.json"] [unique_id "atYEhqu3XzYcFCZ2ZM2rFgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 21:45:23
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 172.84.186.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 17:44:58.243772 2026] [security2:error] [pid 23310:tid 23310] [client 172.84.186.3:64054] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 172.84.186.3 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 17:44:58.243772 2026] [security2:error] [pid 23310:tid 23310] [client 172.84.186.3:64054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thomasgardner.com"] [uri "/sftp-config.json"] [unique_id "atKa2qGv-1FX64blLBWQPQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-09-05 20:17:30
UTC ·
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
