🇺🇸
TPI-Abuse
2026-11-13 09:53:28
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:53:23.770537 2026] [security2:error] [pid 14191:tid 14191] [client 201.24.163.237:27440] ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:53:23.770537 2026] [security2:error] [pid 14191:tid 14191] [client 201.24.163.237:27440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thechoiceint.com"] [uri "/sftp-config.json"] [unique_id "avbeE-bI9T5kTONscfH1ygAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HERA - Operations
2026-11-12 23:16:22
UTC ·
(2 days ago)
club-herrmann - searching for vulnerable scripts: sftp-config.json 2026/11/13 00:16:22
Web App Attack
🇳🇱
Mangelot Hosting
2026-11-12 08:22:39
UTC ·
(3 days ago)
(web_sensitive_file) srv104 Sensitive file probe (.env/.git/backup) 201.24.163.237 (FR/France/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:57:54
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:57:48.802863 2026] [security2:error] [pid 3710:tid 3710] [client 201.24.163.237:53124] M ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:57:48.802863 2026] [security2:error] [pid 3710:tid 3710] [client 201.24.163.237:53124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wwfstudio.com"] [uri "/sftp-config.json"] [unique_id "avVjbPbXEdoOo0Oby_g8_wAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:51:08
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:51:01.111132 2026] [security2:error] [pid 29567:tid 29577] [client 201.24.163.237:8694] ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:51:01.111132 2026] [security2:error] [pid 29567:tid 29577] [client 201.24.163.237:8694] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newtrendmag.org"] [uri "/sftp-config.json"] [unique_id "avRIleXeMMRWRNbZyJp8JwAAAUc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-11-08 13:19:36
UTC ·
(1 week ago)
Try to access /arrangementen/.vscode/sftp.json
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:18:51
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:18:47.771525 2026] [security2:error] [pid 10561:tid 10561] [client 201.24.163.237:65350] ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:18:47.771525 2026] [security2:error] [pid 10561:tid 10561] [client 201.24.163.237:65350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "encoreporchfest.info"] [uri "/sftp-config.json"] [unique_id "au1HFw0VbX1boYx2C8OQZgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 09:28:55
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 04:28:45.288545 2026] [security2:error] [pid 17298:tid 17298] [client 201.24.163.237:56834] ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 04:28:45.288545 2026] [security2:error] [pid 17298:tid 17298] [client 201.24.163.237:56834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mysticalparadise.com"] [uri "/sftp-config.json"] [unique_id "auxMTXKZ_p4WBZwmovND0AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 22:11:12
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 17:11:07.678892 2026] [security2:error] [pid 2060194:tid 2060222] [client 201.24.163.237:39 ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 17:11:07.678892 2026] [security2:error] [pid 2060194:tid 2060222] [client 201.24.163.237:39228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alzooma.com"] [uri "/sftp-config.json"] [unique_id "aukKe-oENrS1P_abIDaTiwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 19:00:43
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:59:23.740676 2026] [security2:error] [pid 25765:tid 25765] [client 201.24.163.237:52494] ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:59:23.740676 2026] [security2:error] [pid 25765:tid 25765] [client 201.24.163.237:52494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "halotoys.com"] [uri "/sftp-config.json"] [unique_id "auOXi0rZigjZRwvEYv2r-gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 16:40:01
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:38:30.554234 2026] [security2:error] [pid 17679:tid 17679] [client 201.24.163.237:14932] ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:38:30.554234 2026] [security2:error] [pid 17679:tid 17679] [client 201.24.163.237:14932] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ironpagoda.com"] [uri "/sftp-config.json"] [unique_id "at4whmRZdUnAvdGNMOC9ywAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:26:38
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:26:30.924701 2026] [security2:error] [pid 22262:tid 22262] [client 201.24.163.237:56806] ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:26:30.924701 2026] [security2:error] [pid 22262:tid 22262] [client 201.24.163.237:56806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/sftp-config.json"] [unique_id "atv7NsKquq2KNUrSsF-5UAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 13:04:53
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 09:04:48.031759 2026] [security2:error] [pid 18175:tid 18175] [client 201.24.163.237:4530] ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.163.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 09:04:48.031759 2026] [security2:error] [pid 18175:tid 18175] [client 201.24.163.237:4530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "karinproctor.com"] [uri "/sftp-config.json"] [unique_id "atdm8HPWUF05iK8XxmeLZgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
