🇺🇸
TPI-Abuse
2026-11-15 13:24:38
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 08:24:33.950616 2026] [security2:error] [pid 16777:tid 16777] [client 204.217.207.229:3594 ...
show more
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 08:24:33.950616 2026] [security2:error] [pid 16777:tid 16777] [client 204.217.207.229:35942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seshetmusic.com"] [uri "/sftp-config.json"] [unique_id "avmykf74g4Egfxc2iJKp1wAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 06:16:34
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:16:29.105046 2026] [security2:error] [pid 11371:tid 11378] [client 204.217.207.229:4972 ...
show more
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:16:29.105046 2026] [security2:error] [pid 11371:tid 11378] [client 204.217.207.229:49726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "workbykathryn.com"] [uri "/sftp-config.json"] [unique_id "avarPWikrIXs02-KDCLbYwAAAYQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 12:49:00
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 07:48:57.660190 2026] [security2:error] [pid 6834:tid 6834] [client 204.217.207.229:3758] ...
show more
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 07:48:57.660190 2026] [security2:error] [pid 6834:tid 6834] [client 204.217.207.229:3758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vittariacapital.com"] [uri "/sftp-config.json"] [unique_id "avRkORtLxC-3h11usLRmDAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:28:27
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:28:19.841665 2026] [security2:error] [pid 17208:tid 17208] [client 204.217.207.229:3094 ...
show more
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:28:19.841665 2026] [security2:error] [pid 17208:tid 17208] [client 204.217.207.229:30940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.benshermanguitar.com"] [uri "/classical//sftp-config.json"] [unique_id "avRDQ4fChzUTmM2lBkotGgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 05:17:27
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 00:17:21.554431 2026] [security2:error] [pid 3623:tid 3623] [client 204.217.207.229:49266] ...
show more
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 00:17:21.554431 2026] [security2:error] [pid 3623:tid 3623] [client 204.217.207.229:49266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wildpete.com"] [uri "/sftp-config.json"] [unique_id "avP6YRxSnkN1Ixq1niixNQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
HERA - Operations
2026-11-04 21:09:46
UTC ·
(1 week ago)
sensobox - searching for vulnerable scripts: sftp-config.json 2026/11/04 22:09:46
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:53:57
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:53:17.731455 2026] [security2:error] [pid 3484:tid 3484] [client 204.217.207.229:22272] ...
show more
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:53:17.731455 2026] [security2:error] [pid 3484:tid 3484] [client 204.217.207.229:22272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/sftp-config.json"] [unique_id "auh5rT0kDyQFRyXpNGtX7AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 14:29:32
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 10:27:25.976569 2026] [security2:error] [pid 9858:tid 9858] [client 204.217.207.229:47328] ...
show more
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 10:27:25.976569 2026] [security2:error] [pid 9858:tid 9858] [client 204.217.207.229:47328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lovelybeyondwords.com"] [uri "/sftp-config.json"] [unique_id "auSpTXvJaxwrccTcZF5LOQAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 19:00:55
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:59:35.448625 2026] [security2:error] [pid 23657:tid 23657] [client 204.217.207.229:5118 ...
show more
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:59:35.448625 2026] [security2:error] [pid 23657:tid 23657] [client 204.217.207.229:5118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "louiemobilemixology.com"] [uri "/sftp-config.json"] [unique_id "auOXlxLr9vwNGlWqSM9WawAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 16:47:15
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:47:08.061416 2026] [security2:error] [pid 16041:tid 16041] [client 204.217.207.229:5704 ...
show more
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 12:47:08.061416 2026] [security2:error] [pid 16041:tid 16041] [client 204.217.207.229:57044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jardineriamaison.com"] [uri "/sftp-config.json"] [unique_id "auN4jHNQP2w81JhaMaB1nwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 10:03:10
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 06:03:06.863894 2026] [security2:error] [pid 17598:tid 17727] [client 204.217.207.229:3917 ...
show more
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 06:03:06.863894 2026] [security2:error] [pid 17598:tid 17727] [client 204.217.207.229:39170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casademontemaior.com"] [uri "/sftp-config.json"] [unique_id "at3T2mv9_UtH2AnoEbOhMwAAAQg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 15:07:01
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 11:06:54.775640 2026] [security2:error] [pid 10219:tid 10219] [client 204.217.207.229:3207 ...
show more
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 11:06:54.775640 2026] [security2:error] [pid 10219:tid 10219] [client 204.217.207.229:32072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kathydumesnilart.com"] [uri "/sftp-config.json"] [unique_id "ateDjkNRQMfCLEdu6moYIAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 10:40:43
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 06:40:38.081495 2026] [security2:error] [pid 28929:tid 28929] [client 204.217.207.229:6290 ...
show more
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 06:40:38.081495 2026] [security2:error] [pid 28929:tid 28929] [client 204.217.207.229:62904] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clubfansite.com"] [uri "/sftp-config.json"] [unique_id "atSiJt05Qz68T5IF0Mj6RgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 09:12:42
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 05:12:34.894194 2026] [security2:error] [pid 3632:tid 3632] [client 204.217.207.229:15476] ...
show more
(mod_security) mod_security (id:210492) triggered by 204.217.207.229 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 05:12:34.894194 2026] [security2:error] [pid 3632:tid 3632] [client 204.217.207.229:15476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thebronsons.com"] [uri "/sftp-config.json"] [unique_id "atM8ArXhSHTDEIaYI68-wwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
