๐บ๐ธ
TPI-Abuse
2026-07-07 21:31:22
(21 minutes ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 17:31:16.670920 2026] [security2:error] [pid 28457:tid 28457] [client 2400:8901::2000:4bff:feda:623d:49866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tandemfamilycoaching.com"] [uri "/sftp-config.json"] [unique_id "ak1wJDLpK2N4f5tPVvQVPAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-07 16:31:53
(5 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐บ๐ธ
TPI-Abuse
2026-07-07 16:13:04
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 12:12:59.209415 2026] [security2:error] [pid 16133:tid 16133] [client 2400:8901::2000:4bff:feda:623d:60852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.takemehomedogrescue.org"] [uri "/sftp-config.json"] [unique_id "ak0li02xhoC-5OLu2zieQgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-07 15:07:55
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 11:07:50.143540 2026] [security2:error] [pid 23960:tid 23960] [client 2400:8901::2000:4bff:feda:623d:64379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "telecompros.net"] [uri "/sftp-config.json"] [unique_id "ak0WRiTKPEH-LzaTYZFnAwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
ambor
2026-07-07 14:44:16
(7 hours ago)
Honeypot triggered on tcpdata.com - Attempted to access /sftp-config.json (config_file_probe). User- ...
show more
Honeypot triggered on tcpdata.com - Attempted to access /sftp-config.json (config_file_probe). User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-07 14:19:19
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 10:19:12.215713 2026] [security2:error] [pid 936:tid 936] [client 2400:8901::2000:4bff:feda:623d:60522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tanandteh.com"] [uri "/sftp-config.json"] [unique_id "ak0K4NfKSNpsVLtRgd31uAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-07 13:49:21
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 09:49:15.599935 2026] [security2:error] [pid 4012:tid 4012] [client 2400:8901::2000:4bff:feda:623d:63669] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "techamerica.net"] [uri "/sftp-config.json"] [unique_id "ak0D25BeMpawuX8fsR1MJgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-07-07 13:04:45
(8 hours ago)
Try to access /.vscode/sftp.json
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-07 11:48:04
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 07:47:59.318123 2026] [security2:error] [pid 24158:tid 24158] [client 2400:8901::2000:4bff:feda:623d:55687] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tekbit.com"] [uri "/sftp-config.json"] [unique_id "akznbxzlAHAZAMjk9BSyPgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-07 11:10:04
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 07:09:57.694940 2026] [security2:error] [pid 8531:tid 8531] [client 2400:8901::2000:4bff:feda:623d:62611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "technicallydental.com"] [uri "/sftp-config.json"] [unique_id "akzehcCqEh9F2F1pN6YsyAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-07-07 10:32:05
(11 hours ago)
232 requests with url.path *config.json
142 requests with url.path *ftp-sync.json
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-07-07 08:39:37
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 04:39:29.412657 2026] [security2:error] [pid 14566:tid 14566] [client 2400:8901::2000:4bff:feda:623d:51732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tcmu.org"] [uri "/sftp-config.json"] [unique_id "aky7QYF1veBgVon92pZzlwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-07 04:55:08
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 00:55:02.772067 2026] [security2:error] [pid 27729:tid 27729] [client 2400:8901::2000:4bff:feda:623d:59636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "taschstudios.com"] [uri "/sftp-config.json"] [unique_id "akyGpnCIgBtyclsCJxZ8KgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-07 03:40:07
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 23:39:58.509158 2026] [security2:error] [pid 4901:tid 4901] [client 2400:8901::2000:4bff:feda:623d:52724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "technesa.com"] [uri "/sftp-config.json"] [unique_id "akx1DsAty3UFmKjHWYakKwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-07 02:06:50
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:4bff:feda:623d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 22:06:45.952850 2026] [security2:error] [pid 12099:tid 12099] [client 2400:8901::2000:4bff:feda:623d:65367] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tek-front.com"] [uri "/sftp-config.json"] [unique_id "akxfNVGbR0UM8vzoY1gDeQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack