🇺🇸
TPI-Abuse
2026-11-15 00:19:38
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 19:19:32.093351 2026] [security2:error] [pid 1900495:tid 1900495] [client 23.109.207.34:5510 ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 19:19:32.093351 2026] [security2:error] [pid 1900495:tid 1900495] [client 23.109.207.34:55104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nancysmithgibson.com"] [uri "/sftp-config.json"] [unique_id "avj6lPOUwLtC1YQ39IY2wQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-11-14 13:13:30
UTC ·
(18 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-14 10:07:22
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:07:17.441500 2026] [security2:error] [pid 19739:tid 19739] [client 23.109.207.34:59602] M ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:07:17.441500 2026] [security2:error] [pid 19739:tid 19739] [client 23.109.207.34:59602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wallpaperpro.com"] [uri "/sftp-config.json"] [unique_id "avgy1RNHCd4pvwdYvkzJuQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 02:47:31
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 21:47:26.139726 2026] [security2:error] [pid 25784:tid 25784] [client 23.109.207.34:63744] M ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 21:47:26.139726 2026] [security2:error] [pid 25784:tid 25784] [client 23.109.207.34:63744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vtwins.us"] [uri "/sftp-config.json"] [unique_id "avUovnZ3bNUkMH2JJJ1yAAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:21:57
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:21:53.942966 2026] [security2:error] [pid 20313:tid 20313] [client 23.109.207.34:25274] M ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:21:53.942966 2026] [security2:error] [pid 20313:tid 20313] [client 23.109.207.34:25274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "comicpreservation.com"] [uri "/sftp-config.json"] [unique_id "au_cwYud5KgkKIAEG1ukFgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:42:46
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:42:38.434594 2026] [security2:error] [pid 29974:tid 29974] [client 23.109.207.34:48742] M ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:42:38.434594 2026] [security2:error] [pid 29974:tid 29974] [client 23.109.207.34:48742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "westernmassaa.net"] [uri "/sftp-config.json"] [unique_id "au1Mrpp2u-ixVsMxiCYAlwAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:11:09
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:11:02.342579 2026] [security2:error] [pid 17670:tid 17685] [client 23.109.207.34:33092] M ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:11:02.342579 2026] [security2:error] [pid 17670:tid 17685] [client 23.109.207.34:33092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artmarialeon.com"] [uri "/sftp-config.json"] [unique_id "au1FRlVhUYG3SCe_mfeNggAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 18:25:30
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 13:25:25.904417 2026] [security2:error] [pid 29387:tid 29387] [client 23.109.207.34:63550] M ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 13:25:25.904417 2026] [security2:error] [pid 29387:tid 29387] [client 23.109.207.34:63550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kittencream.com"] [uri "/sftp-config.json"] [unique_id "aujVlZpqZDO3iG0TjPFmDAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 12:24:49
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 07:24:41.699900 2026] [security2:error] [pid 14672:tid 14672] [client 23.109.207.34:25496] M ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 07:24:41.699900 2026] [security2:error] [pid 14672:tid 14672] [client 23.109.207.34:25496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isyourcompanysafe.com"] [uri "/sftp-config.json"] [unique_id "aucviSXJXf36bzyXFY6onwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-31 09:15:10
UTC ·
(2 weeks ago)
Secret file probe | method: GET | path: /.vscode/sftp.json | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 07:42:26
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 03:42:20.250244 2026] [security2:error] [pid 20131:tid 20131] [client 23.109.207.34:6514] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 03:42:20.250244 2026] [security2:error] [pid 20131:tid 20131] [client 23.109.207.34:6514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thegattrells.com"] [uri "/sftp-config.json"] [unique_id "aths3EGIFUpejGOabctylQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 06:47:48
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 02:47:43.651671 2026] [security2:error] [pid 6367:tid 6367] [client 23.109.207.34:13578] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 02:47:43.651671 2026] [security2:error] [pid 6367:tid 6367] [client 23.109.207.34:13578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vincenzorusso.com"] [uri "/sftp-config.json"] [unique_id "atcOj9Jnccn91JgXRO3vEQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-10-19 06:56:35
UTC ·
(3 weeks ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 22:08:02
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:07:14.098976 2026] [security2:error] [pid 9234:tid 9234] [client 23.109.207.34:36394] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.207.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:07:14.098976 2026] [security2:error] [pid 9234:tid 9234] [client 23.109.207.34:36394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artspacecleveland.com"] [uri "/sftp-config.json"] [unique_id "atKgEr8D-AnQFycQlW-UswAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
