๐บ๐ธ
TPI-Abuse
2026-06-24 22:33:31
(9 minutes ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 18:33:17.951916 2026] [security2:error] [pid 1153:tid 1224] [client 2400:8901::2000:adff:fe38:26ce:49165] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pref-realestate.com"] [uri "/sftp-config.json"] [unique_id "ajxbLW0IlBVWiZrRCQbGHQAAAII"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
2000cn.com.au
2026-06-24 19:48:06
(2 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-24 18:22:30
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 14:22:19.768040 2026] [security2:error] [pid 29656:tid 29656] [client 2400:8901::2000:adff:fe38:26ce:57126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "questiondezyn.com"] [uri "/sftp-config.json"] [unique_id "ajwgW7v6Lj5h3_Q-VJF1NQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-24 16:54:34
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 12:54:24.771973 2026] [security2:error] [pid 32598:tid 32598] [client 2400:8901::2000:adff:fe38:26ce:64412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "professionalpianomoversinc.com"] [uri "/sftp-config.json"] [unique_id "ajwLwGY0gCxAAFlCIXToWQAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-24 15:44:57
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 11:44:52.667443 2026] [security2:error] [pid 26174:tid 26174] [client 2400:8901::2000:adff:fe38:26ce:65509] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pulleasy.com"] [uri "/sftp-config.json"] [unique_id "ajv7dKl7uaJCe0mfZ4Mr5QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
alferez
2026-06-24 14:11:19
(8 hours ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-24 13:31:46
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 09:31:39.525253 2026] [security2:error] [pid 6967:tid 6967] [client 2400:8901::2000:adff:fe38:26ce:58136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proinsaca.com"] [uri "/sftp-config.json"] [unique_id "ajvcO_NC92mkVpkHJ7XWLQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-24 10:12:53
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 06:12:41.431434 2026] [security2:error] [pid 10626:tid 10626] [client 2400:8901::2000:adff:fe38:26ce:49662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rohn.com"] [uri "/sftp-config.json"] [unique_id "ajutmYomxWVh7pLdLOkTMQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-24 08:38:07
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 04:37:54.471140 2026] [security2:error] [pid 1622:tid 1622] [client 2400:8901::2000:adff:fe38:26ce:62451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prodivediving.com"] [uri "/sftp-config.json"] [unique_id "ajuXYle7eayNSst_N1rzZAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-24 04:35:52
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 00:35:46.169622 2026] [security2:error] [pid 14374:tid 14374] [client 2400:8901::2000:adff:fe38:26ce:59442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "printorganic.com"] [uri "/sftp-config.json"] [unique_id "ajteoiLu-mYe8aHFvsVCfwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-24 03:57:01
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 23:56:56.045427 2026] [security2:error] [pid 31922:tid 31922] [client 2400:8901::2000:adff:fe38:26ce:64377] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.proprocessor.com"] [uri "/sftp-config.json"] [unique_id "ajtViMzp32M8e-rpeoDUkQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
SiyCah
2026-06-24 03:00:02
(19 hours ago)
IP banned by fail2ban; banned in jail apache-modsecurity. Report generated by fail2abuseipdb.
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-24 02:02:27
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 22:02:19.942072 2026] [security2:error] [pid 6097:tid 6097] [client 2400:8901::2000:adff:fe38:26ce:61978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "progresstraining.info"] [uri "/sftp-config.json"] [unique_id "ajs6qy9S3uJ2BIjjY3NnnwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-23 23:10:25
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 19:10:21.209926 2026] [security2:error] [pid 27204:tid 27219] [client 2400:8901::2000:adff:fe38:26ce:54171] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coloradosellers.com"] [uri "/sftp-config.json"] [unique_id "ajsSXcSlSBzuI02NpaEQTAAAAM0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-23 21:01:47
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:adff:fe38:26ce (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 17:01:40.928626 2026] [security2:error] [pid 32123:tid 32133] [client 2400:8901::2000:adff:fe38:26ce:54713] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "princesscastlebunkbed.com"] [uri "/sftp-config.json"] [unique_id "ajr0NPWaKGvOGZm7YsueFgAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack