🇺🇸
TPI-Abuse
2026-11-13 09:51:53
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:51:47.950417 2026] [security2:error] [pid 820:tid 820] [client 195.128.178.95:4260] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:51:47.950417 2026] [security2:error] [pid 820:tid 820] [client 195.128.178.95:4260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "roguetechhub.com"] [uri "/sftp-config.json"] [unique_id "avbdsw6sep-LcMc5wcHPaQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
eposs-it.de
2026-11-13 01:25:19
UTC ·
(2 days ago)
Blocked by os-abuseipdb; 4 hits, proto=tcp, ports=80
Port Scan
Hacking
🇩🇪
LRob
2026-11-12 13:06:53
UTC ·
(3 days ago)
Secret file probe | method: GET | path: /sftp-config.json | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:25:17
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:25:14.410275 2026] [security2:error] [pid 29952:tid 29952] [client 195.128.178.95:48138] ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:25:14.410275 2026] [security2:error] [pid 29952:tid 29952] [client 195.128.178.95:48138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accordionfactory.com"] [uri "/sftp-config.json"] [unique_id "avRCijx9UsPmwJGWWujSqwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 10:34:50
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:32:57.263071 2026] [security2:error] [pid 24725:tid 24725] [client 195.128.178.95:64806] ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:32:57.263071 2026] [security2:error] [pid 24725:tid 24725] [client 195.128.178.95:64806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wordscount.biz"] [uri "/sftp-config.json"] [unique_id "au2s2fk-dc24tiMqbLV10gAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:31:18
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:31:13.142916 2026] [security2:error] [pid 6846:tid 6846] [client 195.128.178.95:31248] M ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:31:13.142916 2026] [security2:error] [pid 6846:tid 6846] [client 195.128.178.95:31248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "palmerattaway.com"] [uri "/sftp-config.json"] [unique_id "au1KAYquapfmMM-0kCDKSQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 14:28:31
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 10:27:16.673430 2026] [security2:error] [pid 6589:tid 6589] [client 195.128.178.95:19612] M ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 10:27:16.673430 2026] [security2:error] [pid 6589:tid 6589] [client 195.128.178.95:19612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "30daysout.com"] [uri "/sftp-config.json"] [unique_id "auSpRJAAWsg2rKicnNZCGgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 01:25:05
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 21:24:59.235714 2026] [security2:error] [pid 31564:tid 31564] [client 195.128.178.95:40836] ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 21:24:59.235714 2026] [security2:error] [pid 31564:tid 31564] [client 195.128.178.95:40836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tersch.com"] [uri "/sftp-config.json"] [unique_id "at_9a5DPZam0Wbs8B7ieRAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-10-25 06:36:58
UTC ·
(3 weeks ago)
[SunOct2507:36:53.2956522026][security2:error][pid231181:tid231272][client195.128.178.95:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][l ...
show more
[SunOct2507:36:53.2956522026][security2:error][pid231181:tid231272][client195.128.178.95:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"giuristifriburgo.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"at2jhbuRNFp9zuhHBbATJgAAAMA\"]
show less
Hacking
Web App Attack
🇩🇪
FeG Deutschland
2026-10-19 12:11:04
UTC ·
(3 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 08:10:57
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 04:10:49.776554 2026] [security2:error] [pid 14226:tid 14226] [client 195.128.178.95:29830] ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 04:10:49.776554 2026] [security2:error] [pid 14226:tid 14226] [client 195.128.178.95:29830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "infodrop.info"] [uri "/news/sftp-config.json"] [unique_id "atXQiWelUJ1vc7FgrmVnnQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 01:01:22
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 21:01:18.542177 2026] [security2:error] [pid 8645:tid 8645] [client 195.128.178.95:51754] M ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 21:01:18.542177 2026] [security2:error] [pid 8645:tid 8645] [client 195.128.178.95:51754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "budgetbyron.com"] [uri "/sftp-config.json"] [unique_id "atVr3rE47a48k8AbBx0jQgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 15:05:00
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 11:04:52.669520 2026] [security2:error] [pid 11490:tid 11490] [client 195.128.178.95:12192] ...
show more
(mod_security) mod_security (id:210492) triggered by 195.128.178.95 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 11:04:52.669520 2026] [security2:error] [pid 11490:tid 11490] [client 195.128.178.95:12192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brittaniaenterprises.com"] [uri "/sftp-config.json"] [unique_id "atTgFHtimzyWYxzOgVSyQQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
