🇺🇸
TPI-Abuse
2026-11-13 16:30:26
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:30:23.500347 2026] [security2:error] [pid 5147:tid 5147] [client 23.230.94.148:18910] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:30:23.500347 2026] [security2:error] [pid 5147:tid 5147] [client 23.230.94.148:18910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abecasis.com"] [uri "/sftp-config.json"] [unique_id "avc7H7eyAAoedDOiJtg1UAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:29:32
UTC ·
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:29:23.361499 2026] [security2:error] [pid 657404:tid 657404] [client 23.230.94.148:27160] ...
show more
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:29:23.361499 2026] [security2:error] [pid 657404:tid 657404] [client 23.230.94.148:27160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.decroos.org"] [uri "/sftp-config.json"] [unique_id "avbYc91XMIfvnmN6S5KljAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-12 19:34:53
UTC ·
(22 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 07:05:53
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 02:05:49.935434 2026] [security2:error] [pid 5123:tid 5123] [client 23.230.94.148:45522] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 02:05:49.935434 2026] [security2:error] [pid 5123:tid 5123] [client 23.230.94.148:45522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virtuallyinfinitesystems.com"] [uri "/sftp-config.json"] [unique_id "avVlTU48jQymSootrLcPHAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:10:13
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:10:07.585434 2026] [security2:error] [pid 32192:tid 32192] [client 23.230.94.148:44504] M ...
show more
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:10:07.585434 2026] [security2:error] [pid 32192:tid 32192] [client 23.230.94.148:44504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "answeringamerica.net"] [uri "/sftp-config.json"] [unique_id "avTnv604pzXRjWhdYg9fHgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 20:27:00
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:26:54.758968 2026] [security2:error] [pid 19453:tid 19453] [client 23.230.94.148:47106] M ...
show more
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:26:54.758968 2026] [security2:error] [pid 19453:tid 19453] [client 23.230.94.148:47106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wbcsnet.com"] [uri "/sftp-config.json"] [unique_id "avTPjqW2N5oi0THOy4_4-QAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 10:34:53
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:32:56.963722 2026] [security2:error] [pid 24269:tid 24269] [client 23.230.94.148:28078] M ...
show more
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:32:56.963722 2026] [security2:error] [pid 24269:tid 24269] [client 23.230.94.148:28078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wmbbqing.com"] [uri "/sftp-config.json"] [unique_id "au2s2Aoy0Chw7sIbDgkbEQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 15:09:18
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:09:13.206259 2026] [security2:error] [pid 4851:tid 4851] [client 23.230.94.148:33700] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:09:13.206259 2026] [security2:error] [pid 4851:tid 4851] [client 23.230.94.148:33700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carbtestingidaho.com"] [uri "/sftp-config.json"] [unique_id "aun5GRw_Kj2AdVAT2iTc0gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 23:13:56
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 19:12:53.771044 2026] [security2:error] [pid 10741:tid 10741] [client 23.230.94.148:62350] M ...
show more
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 19:12:53.771044 2026] [security2:error] [pid 10741:tid 10741] [client 23.230.94.148:62350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "megaandina.com"] [uri "/sftp-config.json"] [unique_id "auEv9TCOVPCnnyqAu0VTfwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 16:39:46
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:38:26.521855 2026] [security2:error] [pid 16607:tid 16607] [client 23.230.94.148:17306] M ...
show more
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 12:38:26.521855 2026] [security2:error] [pid 16607:tid 16607] [client 23.230.94.148:17306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "astariamusic.com"] [uri "/sftp-config.json"] [unique_id "at4wgs2QFkQYfip3wvbURQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 12:09:30
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 08:09:24.063232 2026] [security2:error] [pid 13943:tid 13943] [client 23.230.94.148:43914] M ...
show more
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 08:09:24.063232 2026] [security2:error] [pid 13943:tid 13943] [client 23.230.94.148:43914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/sftp-config.json"] [unique_id "at3xdHUgyx1ZtN0_NVo0GwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 02:05:33
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 22:05:28.912064 2026] [security2:error] [pid 16950:tid 16950] [client 23.230.94.148:36030] M ...
show more
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 22:05:28.912064 2026] [security2:error] [pid 16950:tid 16950] [client 23.230.94.148:36030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "velmat.com"] [uri "/sftp-config.json"] [unique_id "atV66JONWzGyTy5eC13l1QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 22:08:53
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:07:23.677149 2026] [security2:error] [pid 18728:tid 18728] [client 23.230.94.148:48348] M ...
show more
(mod_security) mod_security (id:210492) triggered by 23.230.94.148 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:07:23.677149 2026] [security2:error] [pid 18728:tid 18728] [client 23.230.94.148:48348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vanduijnencoaching.nl"] [uri "/sftp-config.json"] [unique_id "atKgG98qqjV6sLFUHEUSQwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
