🇺🇸
TPI-Abuse
2026-11-15 22:03:28
UTC ·
(27 minutes ago)
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 17:03:23.776830 2026] [security2:error] [pid 27873:tid 27873] [client 201.24.183.61:12434] M ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 17:03:23.776830 2026] [security2:error] [pid 27873:tid 27873] [client 201.24.183.61:12434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "invisatrax.catzpaw.com"] [uri "/sftp-config.json"] [unique_id "avosK1x8yHp4Gw3izF6spgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 09:41:01
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:40:57.097143 2026] [security2:error] [pid 25771:tid 25771] [client 201.24.183.61:62940] M ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:40:57.097143 2026] [security2:error] [pid 25771:tid 25771] [client 201.24.183.61:62940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cityslickerstomp.info"] [uri "/sftp-config.json"] [unique_id "avgsqQ3tjwdvurXc61-PZAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 05:54:54
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:54:49.529637 2026] [security2:error] [pid 27227:tid 27242] [client 201.24.183.61:63058] M ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 00:54:49.529637 2026] [security2:error] [pid 27227:tid 27242] [client 201.24.183.61:63058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joanagauer.com"] [uri "/sftp-config.json"] [unique_id "avf3qdraDbE2zigP8ZEl4QAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 17:25:05
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 12:24:56.766009 2026] [security2:error] [pid 7348:tid 7348] [client 201.24.183.61:56114] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 12:24:56.766009 2026] [security2:error] [pid 7348:tid 7348] [client 201.24.183.61:56114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kochcreative.com"] [uri "/sftp-config.json"] [unique_id "avdH6IzL8nS8w_HiKLivPwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:34:29
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:34:23.538497 2026] [security2:error] [pid 4398:tid 4398] [client 201.24.183.61:6574] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:34:23.538497 2026] [security2:error] [pid 4398:tid 4398] [client 201.24.183.61:6574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ichi51e.net"] [uri "/otera-nakaso.net//sftp-config.json"] [unique_id "avTtbwoDcp9zMxSFqJz0egAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:35:39
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:35:33.550510 2026] [security2:error] [pid 20737:tid 20737] [client 201.24.183.61:30412] M ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:35:33.550510 2026] [security2:error] [pid 20737:tid 20737] [client 201.24.183.61:30412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quakeprediction.com"] [uri "/sftp-config.json"] [unique_id "avRE9Uv1a5kIwlWmljwBBQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 14:51:31
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:51:28.891092 2026] [security2:error] [pid 18315:tid 18338] [client 201.24.183.61:57730] M ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:51:28.891092 2026] [security2:error] [pid 18315:tid 18338] [client 201.24.183.61:57730] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cocoonprojects.com"] [uri "/sftp-config.json"] [unique_id "au3pcPeAlStpIq-bSYxgLgAAAFU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:22:38
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:22:33.637782 2026] [security2:error] [pid 10043:tid 10043] [client 201.24.183.61:11130] M ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:22:33.637782 2026] [security2:error] [pid 10043:tid 10043] [client 201.24.183.61:11130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bowdens-landing.com"] [uri "/sftp-config.json"] [unique_id "auhyeZyMDgPbq5fCX4ogoQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 18:12:00
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 14:10:42.955948 2026] [security2:error] [pid 18317:tid 18317] [client 201.24.183.61:40178] M ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 14:10:42.955948 2026] [security2:error] [pid 18317:tid 18317] [client 201.24.183.61:40178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deindo.com"] [uri "/sftp-config.json"] [unique_id "at-XoocbLSL3zciMv8TBnAAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-10-25 17:02:08
UTC ·
(3 weeks ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇳🇱
Mangelot Hosting
2026-10-24 07:22:53
UTC ·
(3 weeks ago)
(web_sensitive_file) srv101 Sensitive file probe (.env/.git/backup) 201.24.183.61 (FR/France/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:10:36
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:10:31.890929 2026] [security2:error] [pid 26391:tid 26408] [client 201.24.183.61:59054] M ...
show more
(mod_security) mod_security (id:210492) triggered by 201.24.183.61 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:10:31.890929 2026] [security2:error] [pid 26391:tid 26408] [client 201.24.183.61:59054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coloradosellers.com"] [uri "/sftp-config.json"] [unique_id "atv3d7TQBvECEVvb3PrXgQAAAM4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
