🇺🇸
TPI-Abuse
2026-09-13 01:35:40
(34 minutes ago)
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 21:35:35.631487 2026] [security2:error] [pid 19739:tid 19739] [client 202.93.153.246:22941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amazeconsultants.org"] [uri "/sftp-config.json"] [unique_id "aqX9541YXiOomxYl3c70kwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Didier Lagaert
2026-09-13 01:29:42
(39 minutes ago)
lie-17 : Block hidden directories=>/consultations-gratuites/.vscode/sftp.json(/)
Hacking
🇺🇸
TPI-Abuse
2026-09-13 01:11:17
(58 minutes ago)
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 21:11:12.247881 2026] [security2:error] [pid 6235:tid 6235] [client 202.93.153.246:29255] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boens.org"] [uri "/sftp-config.json"] [unique_id "aqX4MJdGJ51DkEYq4lC3EwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
andypiper
2026-09-13 01:02:52
(1 hour ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇩🇪
LRob
2026-09-13 00:11:12
(1 hour ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-13 00:11 UTC
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-12 23:34:06
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 19:33:59.496892 2026] [security2:error] [pid 1523:tid 1523] [client 202.93.153.246:26768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bairentang.org"] [uri "/sftp-config.json"] [unique_id "aqXhZ1f0nETDFR2n4jAQigAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 23:05:19
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 19:05:16.194350 2026] [security2:error] [pid 11782:tid 11798] [client 202.93.153.246:52193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anglicancouncil.org"] [uri "/sftp-config.json"] [unique_id "aqXarBW0fddzy_Y6Kml30AAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ParaBug
2026-09-12 22:59:03
(3 hours ago)
202.93.153.246 - - [13/Sep/2026:00:59:02 +0200] "GET /sftp-config.json HTTP/1.1" 301 557 "-" "Mozill ...
show more
202.93.153.246 - - [13/Sep/2026:00:59:02 +0200] "GET /sftp-config.json HTTP/1.1" 301 557 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
...
show less
Phishing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 22:35:36
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 18:35:29.025572 2026] [security2:error] [pid 5507:tid 5507] [client 202.93.153.246:25669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "centralbaptistalcoa.org"] [uri "/sftp-config.json"] [unique_id "aqXTsXGDHWYzVMQOTywBiAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 22:12:23
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 18:12:14.930796 2026] [security2:error] [pid 27487:tid 27487] [client 202.93.153.246:46296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carmichaellaw.org"] [uri "/sftp-config.json"] [unique_id "aqXOPsXQqHsHoqRcw0VNvgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 21:26:24
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 17:26:17.337144 2026] [security2:error] [pid 27986:tid 27986] [client 202.93.153.246:51202] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.beechleafdesign.com"] [uri "/sftp-config.json"] [unique_id "aqXDefN2z4CIwNdGEy_uUwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
oisecnet
2026-09-12 21:02:15
(5 hours ago)
Automated report: Unauthorized vulnerability scanning detected on 2026-09-12. 4 requests from this I ...
show more
Automated report: Unauthorized vulnerability scanning detected on 2026-09-12. 4 requests from this IP.
show less
Port Scan
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 20:36:34
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 16:36:28.370935 2026] [security2:error] [pid 29818:tid 29818] [client 202.93.153.246:46011] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "decroos.org"] [uri "/sftp-config.json"] [unique_id "aqW3zBzwK6U6-a5AzVVbxwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-09-12 20:17:04
(5 hours ago)
Repeated requests for suspicious nonexistent URLs, for example: /.vscode/sftp.json (HTTP/1.1 port 44 ...
show more
Repeated requests for suspicious nonexistent URLs, for example: /.vscode/sftp.json (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0")
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 20:08:54
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 202.93.153.246 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 16:08:50.498608 2026] [security2:error] [pid 11430:tid 11430] [client 202.93.153.246:5569] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arapi.org"] [uri "/"] [unique_id "aqWxUn6tzb48inCy7R3oygAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
