Total reports
8 from
5 distinct
reporters
First reported
November 6th 2026
Most recent report
3 days ago
Last 60 days
Top reporter locations
🇬🇧
United Kingdom of Great Britain and Northern Ireland
3
🇺🇸
United States of America
3
🇦🇺
Australia
1
Most common categories
Web App Attack
7
Brute-Force
6
Bad Web Bot
5
Hacking
4
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-11-08 17:02:57
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 20.41.98.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:02:50.115219 2026] [security2:error] [pid 13781:tid 13785] [client 20.41.98.66:61697] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 20.41.98.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:02:50.115219 2026] [security2:error] [pid 13781:tid 13785] [client 20.41.98.66:61697] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "totheendsoftheearth.com"] [uri "/sftp-config.json"] [unique_id "avCrOujcq5iMX2aN-KwgTgAAAMI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 15:30:40
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 20.41.98.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:30:37.803912 2026] [security2:error] [pid 20204:tid 20204] [client 20.41.98.66:0] ModSecuri ...
show more
(mod_security) mod_security (id:210492) triggered by 20.41.98.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:30:37.803912 2026] [security2:error] [pid 20204:tid 20204] [client 20.41.98.66:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "totalsafe-security.com"] [uri "/sftp-config.json"] [unique_id "avCVnS1gs6Rc465zV0qBWwAAADE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
nzhost.co.nz
2026-11-08 03:50:59
UTC ·
(3 days ago)
$f2bV_matches
Hacking
Brute-Force
🇬🇧
consul.to
2026-11-07 21:48:16
UTC ·
(4 days ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-11-07 21:08:01
UTC ·
(4 days ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-11-07 20:05:05
UTC ·
(4 days ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa01]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Optimatiq (ThreatBite)
2026-11-07 03:08:38
UTC ·
(4 days ago)
Probe for secrets or exploit paths (fail2ban)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 15:18:45
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 20.41.98.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:18:42.126990 2026] [security2:error] [pid 18315:tid 18318] [client 20.41.98.66:60636] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 20.41.98.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 10:18:42.126990 2026] [security2:error] [pid 18315:tid 18318] [client 20.41.98.66:60636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tmsx2.com"] [uri "/sftp-config.json"] [unique_id "au3v0veAlStpIq-bSYxqMQAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
