🇺🇸
TPI-Abuse
2026-06-17 04:32:17
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 00:32:13.373009 2026] [security2:error] [pid 30430:tid 30430] [client 23.95.212.149:57310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "relationshipecology.com"] [uri "/sftp-config.json"] [unique_id "ajIjTS3mTtMGL69OcmH4HwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Oakley
2026-06-17 00:10:09
(8 hours ago)
(confirmed_bot_sig) Confirmed bot
Hacking
🇺🇸
TPI-Abuse
2026-06-16 23:43:45
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 19:43:41.985376 2026] [security2:error] [pid 13437:tid 13437] [client 23.95.212.149:15380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tiesidebikinis.com"] [uri "/sftp-config.json"] [unique_id "ajHfrV6wFvJ-n_k5RN26JAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-06-16 21:28:17
(10 hours ago)
[TueJun1623:28:11.8103512026][security2:error][pid1888585:tid1888803][client23.95.212.149:0]ModSecur ...
show more
[TueJun1623:28:11.8103512026][security2:error][pid1888585:tid1888803][client23.95.212.149:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"ticinoscout.ch\"][uri\"/sftp-config.json\"][unique_id\"ajG_665BX5p-1LliCGA0pgAAARA\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 19:22:52
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 15:22:48.601401 2026] [security2:error] [pid 26605:tid 26605] [client 23.95.212.149:34022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thumbmotorsales.com"] [uri "/sftp-config.json"] [unique_id "ajGiiCOaj51i8xSPgxgxvQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-16 14:15:44
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 10:15:40.798350 2026] [security2:error] [pid 16464:tid 16464] [client 23.95.212.149:32222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "darrow.biz"] [uri "/sftp-config.json"] [unique_id "ajFajKfk7iHGWizLqaugfAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 21:57:24
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 17:57:19.094916 2026] [security2:error] [pid 31286:tid 31286] [client 23.95.212.149:19584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crr-construction.com"] [uri "/sftp-config.json"] [unique_id "ai8jv5EilLVY9UMLTEvgrwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 18:47:49
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 14:47:46.415831 2026] [security2:error] [pid 31839:tid 31839] [client 23.95.212.149:38942] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crosswalk2026.org"] [uri "/sftp-config.json"] [unique_id "ai73UgYEGOPWPmDDzsjfZgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 23:14:28
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 19:14:24.758469 2026] [security2:error] [pid 31659:tid 31659] [client 23.95.212.149:55192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ypsisda.net"] [uri "/cte/sftp-config.json"] [unique_id "aiyS0KTWZLdA66PmFXXBwAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 11:21:15
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 07:21:10.607649 2026] [security2:error] [pid 13773:tid 13773] [client 23.95.212.149:18712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "corepsychotherapycenter.com"] [uri "/sftp-config.json"] [unique_id "aivrpurrIRcJaB7Mbs-muwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 03:41:51
(5 days ago)
(mod_security) mod_security (id:210580) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing. ...
show more
(mod_security) mod_security (id:210580) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 23:41:44.459327 2026] [security2:error] [pid 1638:tid 1638] [client 23.95.212.149:21496] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.cook-islands-boat-registration.com|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: http:/conceptionsflorida.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.cook-islands-boat-registration.com"] [uri "/.vscode/sftp.json"] [unique_id "ait_-PCbIjv6936tqIPObAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 03:18:26
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 23:18:18.958387 2026] [security2:error] [pid 14879:tid 14879] [client 23.95.212.149:35284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "perthdps.com"] [uri "/convicts//sftp-config.json"] [unique_id "ait6evZWuOtDVxwJwb11WAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 23:46:02
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 19:45:56.670079 2026] [security2:error] [pid 8284:tid 8284] [client 23.95.212.149:34446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "contactsportsagility.com"] [uri "/sftp-config.json"] [unique_id "aitItJm5H8ZSoDop9Cn7MAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 21:58:20
(5 days ago)
(mod_security) mod_security (id:210580) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing. ...
show more
(mod_security) mod_security (id:210580) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 17:58:17.161089 2026] [security2:error] [pid 2030:tid 2030] [client 23.95.212.149:60620] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||constructiondomex.com|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: http:/conceptionsflorida.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "constructiondomex.com"] [uri "/.vscode/sftp.json"] [unique_id "aisvefmQJakPu1p012zA0QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 16:19:51
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing. ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.212.149 (23-95-212-149-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 12:19:45.195598 2026] [security2:error] [pid 27859:tid 27882] [client 23.95.212.149:45570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "condo.management"] [uri "/sftp-config.json"] [unique_id "airgIZdvlCtvv8FfWlY2OQAAARU"]
show less
Brute-Force
Bad Web Bot
Web App Attack