🇺🇸
TPI-Abuse
2026-11-15 18:29:42
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 13:29:37.341957 2026] [security2:error] [pid 5666:tid 5666] [clie ...
show more
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 13:29:37.341957 2026] [security2:error] [pid 5666:tid 5666] [client 199.115.195.236:8534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rkstewart.com"] [uri "/sftp-config.json"] [unique_id "avn6EaNa1vnTlj5ryoGqJgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 07:59:06
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 02:58:59.911465 2026] [security2:error] [pid 10438:tid 10508] [cl ...
show more
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 02:58:59.911465 2026] [security2:error] [pid 10438:tid 10508] [client 199.115.195.236:62554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rubenluis.com"] [uri "/sftp-config.json"] [unique_id "avlmQ_GI-jw-BkMoNXpYEwAAAIU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
ALPHANET
2026-11-14 14:10:39
UTC ·
(1 day ago)
web exploits
Hacking
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:59:59
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:59:51.648957 2026] [security2:error] [pid 18300:tid 18300] [cl ...
show more
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:59:51.648957 2026] [security2:error] [pid 18300:tid 18300] [client 199.115.195.236:24394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vesalappi.com"] [uri "/sftp-config.json"] [unique_id "avbflxHPOg971C7K_5zSSgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:40:44
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:40:38.787585 2026] [security2:error] [pid 2710309:tid 2710404] ...
show more
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:40:38.787585 2026] [security2:error] [pid 2710309:tid 2710404] [client 199.115.195.236:11556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "healingwithtouch.com"] [uri "/sftp-config.json"] [unique_id "avRGJurn5IeLig5QES6zBgAAAMg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-11-11 00:06:50
UTC ·
(4 days ago)
(web_sensitive_file) srv101 Sensitive file probe (.env/.git/backup) 199.115.195.236 (GB/United Kingdom/199-115-195-236.aceips.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 10:34:33
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:32:51.964360 2026] [security2:error] [pid 24271:tid 24271] [cl ...
show more
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:32:51.964360 2026] [security2:error] [pid 24271:tid 24271] [client 199.115.195.236:39588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "veenstras.com"] [uri "/sftp-config.json"] [unique_id "au2s08OBR7hdUxtW-vETrgAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:39:47
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:39:40.529861 2026] [security2:error] [pid 23645:tid 23645] [cl ...
show more
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:39:40.529861 2026] [security2:error] [pid 23645:tid 23645] [client 199.115.195.236:8338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hardcountryrock.com"] [uri "/sftp-config.json"] [unique_id "au1L_HAjhs1rVQg6lE44aAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:44:38
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:44:32.569093 2026] [security2:error] [pid 8460:tid 8460] [clie ...
show more
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:44:32.569093 2026] [security2:error] [pid 8460:tid 8460] [client 199.115.195.236:41638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pointillistic.com"] [uri "/ren//sftp-config.json"] [unique_id "auh3oBTOyTqy67KKBRLaqgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 21:10:13
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 16:10:07.368904 2026] [security2:error] [pid 20946:tid 20946] [cl ...
show more
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 16:10:07.368904 2026] [security2:error] [pid 20946:tid 20946] [client 199.115.195.236:3938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cuetzpalin.org"] [uri "/sftp-config.json"] [unique_id "aueqr44R3ZNKZRONY2F0cgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 16:38:30
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:38:24.599384 2026] [security2:error] [pid 16974:tid 16974] [cl ...
show more
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:38:24.599384 2026] [security2:error] [pid 16974:tid 16974] [client 199.115.195.236:12580] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "andiamocomputers.com"] [uri "/sftp-config.json"] [unique_id "at4wgJW0mKHopVO0RYfJCQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 08:26:33
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 04:26:26.926008 2026] [security2:error] [pid 30713:tid 30713] [cl ...
show more
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 04:26:26.926008 2026] [security2:error] [pid 30713:tid 30713] [client 199.115.195.236:24842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "callahan-co.com"] [uri "/sftp-config.json"] [unique_id "at29Mt2dp_uHOqtZ4f2DygAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 00:31:38
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 20:31:34.877999 2026] [security2:error] [pid 6713:tid 6741] [clie ...
show more
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 20:31:34.877999 2026] [security2:error] [pid 6713:tid 6741] [client 199.115.195.236:12260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "workconfident.com"] [uri "/sftp-config.json"] [unique_id "ata2Zi8JRst0ROfByaEveAAAAZg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 22:08:38
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:07:22.383054 2026] [security2:error] [pid 18728:tid 18728] [cl ...
show more
(mod_security) mod_security (id:210492) triggered by 199.115.195.236 (199-115-195-236.aceips.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:07:22.383054 2026] [security2:error] [pid 18728:tid 18728] [client 199.115.195.236:13628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salazartransfers.com"] [uri "/sftp-config.json"] [unique_id "atKgGt8qqjV6sLFUHEUSPwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
