🇺🇸
TPI-Abuse
2026-06-08 09:43:44
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 05:43:37.943486 2026] [security2:error] [pid 17833:tid 17833] [client 188.241.126.4:10938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kaibeth.com"] [uri "/sftp-config.json"] [unique_id "aiaOyXOMK0Ub2ok9H9V0DgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-07 22:42:38
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 18:42:31.264224 2026] [security2:error] [pid 7259:tid 7259] [client 188.241.126.4:33556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "k2servicesinc.net"] [uri "/sftp-config.json"] [unique_id "aiXz15i9xrknch-idxUTvAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-06-06 11:38:20
(2 days ago)
[SatJun0613:38:16.9956202026][security2:error][pid2228457:tid2228478][client188.241.126.4:0]ModSecur ...
show more
[SatJun0613:38:16.9956202026][security2:error][pid2228457:tid2228478][client188.241.126.4:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"jrtradeinnovation.ch\"][uri\"/sftp-config.json\"][unique_id\"aiQGqGKhFOQCqW8JX7slzQAAAAo\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 06:23:03
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:949110) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 06 02:22:58.888043 2026] [security2:error] [pid 12028:tid 12028] [client 188.241.126.4:8426] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "joycepelham.com"] [uri "/sftp-config.json"] [unique_id "aiO8wjNOlNNuLgaOfNdNhQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-06 03:23:00
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 23:22:54.639875 2026] [security2:error] [pid 4501:tid 4501] [client 188.241.126.4:41040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joshseipel.com"] [uri "/sftp-config.json"] [unique_id "aiOSjoB_-0TU_doTQ60eDwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
technojoe99
2026-06-06 02:30:21
(2 days ago)
Exploit scan from 188.241.126.4. GET /sftp-config.json HTTP/1.1.
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 23:13:40
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 19:13:36.884416 2026] [security2:error] [pid 11734:tid 11734] [client 188.241.126.4:22404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jonathanwilsonphotography.com"] [uri "/sftp-config.json"] [unique_id "aiNYIBTFr4b1muimORvahQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 15:33:49
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 11:33:46.291151 2026] [security2:error] [pid 10417:tid 10417] [client 188.241.126.4:18960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joebankx.com"] [uri "/sftp-config.json"] [unique_id "aiLsWsuT_Q2twBi09dAciwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 12:31:58
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 08:31:50.799331 2026] [security2:error] [pid 5915:tid 5915] [client 188.241.126.4:61394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jnpmarinesolutions.com"] [uri "/sftp-config.json"] [unique_id "aiLBtmn9que7_ovY2Bf0vgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 11:00:38
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 07:00:34.110036 2026] [security2:error] [pid 20823:tid 20823] [client 188.241.126.4:47202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jmgrigg.com"] [uri "/sftp-config.json"] [unique_id "aiKsUhURiUWsTTp5L8V5aQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
jkcunningham
2026-06-05 08:26:14
(3 days ago)
Vulnerability scanner. Targets os and filesystem.
Bad Web Bot
Port Scan
🇺🇸
TPI-Abuse
2026-06-05 04:53:19
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 00:53:14.608940 2026] [security2:error] [pid 16768:tid 16768] [client 188.241.126.4:8916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jinkokyudojo.com"] [uri "/sftp-config.json"] [unique_id "aiJWOhOQlMpX4eD0RclM-QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 02:23:35
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 22:23:28.617712 2026] [security2:error] [pid 26609:tid 26609] [client 188.241.126.4:59004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jikishin-kai.org"] [uri "/sftp-config.json"] [unique_id "aiIzIBB-hCiINtAljMELOwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 21:39:53
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 17:39:46.847890 2026] [security2:error] [pid 30905:tid 30905] [client 188.241.126.4:10996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jewishventura.org"] [uri "/sftp-config.json"] [unique_id "aiHwote8ccnTDRoasxN-HwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-04 16:39:56
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 188.241.126.4 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 12:39:50.535002 2026] [security2:error] [pid 24542:tid 24542] [client 188.241.126.4:6486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jennlaurenphotography.com"] [uri "/sftp-config.json"] [unique_id "aiGqVjY9fiPNRMGW9maFJAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack