🇺🇸
TPI-Abuse
2026-11-14 23:48:44
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:48:41.323819 2026] [security2:error] [pid 21538:tid 21538] [client 185.193.82.41:0] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 18:48:41.323819 2026] [security2:error] [pid 21538:tid 21538] [client 185.193.82.41:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swarnar.com"] [uri "/sftp-config.json"] [unique_id "avjzWT0aMvWJIJqYVluYdgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-11-14 01:20:19
UTC ·
(1 day ago)
Secret file probe | method: GET | path: /sftp-config.json | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 16:20:41
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:20:33.117705 2026] [security2:error] [pid 25973:tid 25973] [client 185.193.82.41:33892] M ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:20:33.117705 2026] [security2:error] [pid 25973:tid 25973] [client 185.193.82.41:33892] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "learningbyshipping.com"] [uri "/sftp-config.json"] [unique_id "avc40U8CPQ5AhEjsYeoyGAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 14:27:04
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 09:27:00.399481 2026] [security2:error] [pid 23008:tid 23029] [client 185.193.82.41:27928] M ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 09:27:00.399481 2026] [security2:error] [pid 23008:tid 23029] [client 185.193.82.41:27928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "managementlaw.com"] [uri "/sftp-config.json"] [unique_id "avceNBILB4PNYgjclEuGwQAAARM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:07:44
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:07:38.245348 2026] [security2:error] [pid 5252:tid 5252] [client 185.193.82.41:53682] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:07:38.245348 2026] [security2:error] [pid 5252:tid 5252] [client 185.193.82.41:53682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kikopoke.com"] [uri "/sftp-config.json"] [unique_id "avbTWrnHBK59UlDHJU7ZUgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:49:23
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:49:20.020143 2026] [security2:error] [pid 21013:tid 21013] [client 185.193.82.41:22794] M ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:49:20.020143 2026] [security2:error] [pid 21013:tid 21013] [client 185.193.82.41:22794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/sftp-config.json"] [unique_id "avRIMGUSDiYzUNj6f273cwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 11:39:58
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 06:39:51.144296 2026] [security2:error] [pid 18297:tid 18297] [client 185.193.82.41:48756] M ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 06:39:51.144296 2026] [security2:error] [pid 18297:tid 18297] [client 185.193.82.41:48756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "suffolksystems.com"] [uri "/sftp-config.json"] [unique_id "au28h1QF2lJ4uzaWZ-6XFwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 10:34:45
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:32:48.728485 2026] [security2:error] [pid 23836:tid 23836] [client 185.193.82.41:36610] M ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:32:48.728485 2026] [security2:error] [pid 23836:tid 23836] [client 185.193.82.41:36610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crockett.ws"] [uri "/sftp-config.json"] [unique_id "au2s0KLAiNc2jT7vmaXOsgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 01:19:51
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 20:19:43.359141 2026] [security2:error] [pid 24057:tid 24057] [client 185.193.82.41:48994] M ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 20:19:43.359141 2026] [security2:error] [pid 24057:tid 24057] [client 185.193.82.41:48994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cmexico.co"] [uri "/sftp-config.json"] [unique_id "auflL8OwZkRYhgEBL06kVAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:24:28
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:24:24.528497 2026] [security2:error] [pid 1916:tid 1916] [client 185.193.82.41:50964] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:24:24.528497 2026] [security2:error] [pid 1916:tid 1916] [client 185.193.82.41:50964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bowdens-landing.com"] [uri "/sftp-config.json"] [unique_id "atv6uEWhP_Mztw4Y46U1UwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 18:59:42
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 14:59:35.395391 2026] [security2:error] [pid 6653:tid 6657] [client 185.193.82.41:53960] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 14:59:35.395391 2026] [security2:error] [pid 6653:tid 6657] [client 185.193.82.41:53960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "catishly.com"] [uri "/sftp-config.json"] [unique_id "atuulwPpYMoYdnKTuSGStQAAAUI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
conseilgouz
2026-10-19 23:20:11
UTC ·
(3 weeks ago)
doe-17 : Block hidden directories=>/.vscode/sftp.json(/)
Hacking
🇺🇸
TPI-Abuse
2026-10-16 22:09:00
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:07:18.054127 2026] [security2:error] [pid 12835:tid 12835] [client 185.193.82.41:24798] M ...
show more
(mod_security) mod_security (id:210492) triggered by 185.193.82.41 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:07:18.054127 2026] [security2:error] [pid 12835:tid 12835] [client 185.193.82.41:24798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ic1surplus.com"] [uri "/sftp-config.json"] [unique_id "atKgFtrpdHMJ_cSdawrJRQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-03-02 07:47:21
UTC ·
(8 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 09-47.185.193.82.41.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
2026-02-14 03:43:43
UTC ·
(9 months ago)
IM360 WAF: Block IP which is in the web-spammers RBL MV:RBL lookup of 05-43.185.193.82.41.web-spammers.v2.rbl.imunify.com._v4 succeeded.
Web App Attack
