🇺🇸
TPI-Abuse
2026-11-09 08:12:40
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:12:33.937573 2026] [security2:error] [pid 18583:tid 18583] [client 195.128.178.114:1526 ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 03:12:33.937573 2026] [security2:error] [pid 18583:tid 18583] [client 195.128.178.114:15262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accommodation-perthairport.com"] [uri "/sftp-config.json"] [unique_id "avGAcQciYUtTjII3qVlBHQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 09:25:20
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 04:24:44.423849 2026] [security2:error] [pid 4215:tid 4215] [client 195.128.178.114:12412] ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 04:24:44.423849 2026] [security2:error] [pid 4215:tid 4215] [client 195.128.178.114:12412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emmlogistics.com"] [uri "/sftp-config.json"] [unique_id "avA_3GY4rq2phD_tBw-7IQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-11-07 19:40:06
UTC ·
(3 days ago)
(web_sensitive_file) srv104 Sensitive file probe (.env/.git/backup) 195.128.178.114 (NL/The Netherlands/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 23:17:05
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 18:16:58.739490 2026] [security2:error] [pid 24701:tid 24701] [client 195.128.178.114:2702 ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 18:16:58.739490 2026] [security2:error] [pid 24701:tid 24701] [client 195.128.178.114:27022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.amazingwelding.com"] [uri "/sftp-config.json"] [unique_id "aukZ6m2Msp5EFZBCJwiqXQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:47:17
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:47:09.507921 2026] [security2:error] [pid 27766:tid 27789] [client 195.128.178.114:1316 ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:47:09.507921 2026] [security2:error] [pid 27766:tid 27789] [client 195.128.178.114:13160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sloveniaflyfishing.com"] [uri "/sftp-config.json"] [unique_id "auh4Pde29zyO0sQrlXxjAAAAAFU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 04:46:32
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 00:45:20.870394 2026] [security2:error] [pid 2372:tid 2372] [client 195.128.178.114:32706] ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 00:45:20.870394 2026] [security2:error] [pid 2372:tid 2372] [client 195.128.178.114:32706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flyingwithstan.com"] [uri "/sftp-config.json"] [unique_id "aubD4DwOhXJhzZcTeMAYhwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 04:50:45
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 00:50:37.150929 2026] [security2:error] [pid 9013:tid 9013] [client 195.128.178.114:46990] ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 00:50:37.150929 2026] [security2:error] [pid 9013:tid 9013] [client 195.128.178.114:46990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jboomergrenier.com"] [uri "/sftp-config.json"] [unique_id "auF_HcaQdnLR0Gu1IIRALAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 05:07:53
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210580) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 01:06:06.492430 2026] [security2:error] [pid 16216:tid 16216] [client 195.128.178.114:1601 ...
show more
(mod_security) mod_security (id:210580) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 01:06:06.492430 2026] [security2:error] [pid 16216:tid 16216] [client 195.128.178.114:16010] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||digitalmarketing-group.com|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: https:/myralcondominiums.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "digitalmarketing-group.com"] [uri "/403.shtml"] [unique_id "auAxPpeElj0gJWwG1MwrCgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:26:34
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:26:30.615258 2026] [security2:error] [pid 28932:tid 28932] [client 195.128.178.114:2071 ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:26:30.615258 2026] [security2:error] [pid 28932:tid 28932] [client 195.128.178.114:20718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wallpaperpro.com"] [uri "/sftp-config.json"] [unique_id "atv7NjZMvfJFYYH97fwzVQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 01:23:21
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 21:23:17.025721 2026] [security2:error] [pid 3064:tid 3064] [client 195.128.178.114:38798] ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 21:23:17.025721 2026] [security2:error] [pid 3064:tid 3064] [client 195.128.178.114:38798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jugsnet.com"] [uri "/sftp-config.json"] [unique_id "atgUBe3JWAtdocWcSwcTvAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 12:39:33
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 08:39:24.028812 2026] [security2:error] [pid 13010:tid 13010] [client 195.128.178.114:2340 ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.114 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 08:39:24.028812 2026] [security2:error] [pid 13010:tid 13010] [client 195.128.178.114:23404] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schonplanet.com"] [uri "/sftp-config.json"] [unique_id "atdg_JS_BVh8Gthe6qsy-gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-18 18:59:42
UTC ·
(3 weeks ago)
Secret file probe | method: GET | path: /sftp-config.json | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Hacking
Web App Attack
