🇺🇸
TPI-Abuse
2026-09-16 15:21:04
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 11:20:59.184475 2026] [security2:error] [pid 10433:tid 10433] [client 2400:8901::2000:c3ff:feb3:eed7:61246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vesalappi.com"] [uri "/sftp-config.json"] [unique_id "aqqz2zQs5t3wj0czkz5VvQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 14:39:25
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 10:39:07.432249 2026] [security2:error] [pid 31602:tid 31602] [client 2400:8901::2000:c3ff:feb3:eed7:58896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virginiatouchatruck.com"] [uri "/sftp-config.json"] [unique_id "aqqqC2nYtWa_ojEu1YdpBAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 12:20:21
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:20:13.571131 2026] [security2:error] [pid 23467:tid 23467] [client 2400:8901::2000:c3ff:feb3:eed7:56146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virginiabeachlovebird.com"] [uri "/sftp-config.json"] [unique_id "aqqJfXKnDsQnJDI01gCcrgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-16 12:00:03
(2 days ago)
| [Dangerous/Singapore] Aggressive IP 2400:8901::2000:c3ff:feb3:eed7 (~30 hits). Type: DoS Defender- ...
show more
| [Dangerous/Singapore] Aggressive IP 2400:8901::2000:c3ff:feb3:eed7 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-09-16 11:03:17
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 07:03:08.284094 2026] [security2:error] [pid 11587:tid 11587] [client 2400:8901::2000:c3ff:feb3:eed7:62516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virginians.com"] [uri "/sftp-config.json"] [unique_id "aqp3bFCHpw27QebXd762zQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-16 10:55:07
(2 days ago)
[ti-27al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-27al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 2400:8901::2000:c3ff:feb3:eed7 - - [16/Sep/2026:12:53:58 +0200] "GET /sftp-config.json HTTP/1.1" 404 160310 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
2400:8901::2000:c3ff:feb3:eed7 - - [16/Sep/2026:12:54:00 +0200] "GET /.vscode/sftp.json HTTP/1.1" 404 160310 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
2400:8901::2000:c3ff:feb3:eed7 - - [16/Sep/2026:12:54:02 +0200] "GET /.vscode/ftp-config.json HTTP/1.1" 404 160310 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
2400:8901::2000:c3ff:feb3:eed7 - - [16/Sep/2026:12:54:05 +0200] "GET /.vscode/ftp-sync.json HTTP/1.1"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 10:03:16
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:03:08.742443 2026] [security2:error] [pid 11678:tid 11678] [client 2400:8901::2000:c3ff:feb3:eed7:54911] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.laboquimia.es"] [uri "/catalogo/producto.php"] [unique_id "aqppXH9JriDmFQ08wrMpdwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 09:42:44
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 05:42:40.038816 2026] [security2:error] [pid 3129:tid 3129] [client 2400:8901::2000:c3ff:feb3:eed7:57998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vicrp.com"] [uri "/sftp-config.json"] [unique_id "aqpkkJ0cCtqxTVLb8IpmcgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 09:13:35
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 05:13:27.560936 2026] [security2:error] [pid 7796:tid 7796] [client 2400:8901::2000:c3ff:feb3:eed7:55520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vibratingharvard.com"] [uri "/sftp-config.json"] [unique_id "aqpdt4tXdaMBXcg_r-J7kAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 06:41:19
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 02:41:09.944157 2026] [security2:error] [pid 27962:tid 27981] [client 2400:8901::2000:c3ff:feb3:eed7:63707] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "victorchiarizia.com"] [uri "/sftp-config.json"] [unique_id "aqo6BXeP9FourQEkKXXqQgAAAVE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Viveronese
2026-09-16 06:29:47
(2 days ago)
HTTP vulnerability scanning
Web App Attack
2026-09-16 04:32:28
(2 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2026-09-16 04:18:00
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 00:17:56.318360 2026] [security2:error] [pid 31961:tid 31961] [client 2400:8901::2000:c3ff:feb3:eed7:58508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "volteracommerce.com"] [uri "/sftp-config.json"] [unique_id "aqoYdCKrWqBgbNlY1zaSjgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 03:28:07
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 23:28:03.528368 2026] [security2:error] [pid 28306:tid 28306] [client 2400:8901::2000:c3ff:feb3:eed7:57060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "visithavelock.ca"] [uri "/sftp-config.json"] [unique_id "aqoMw62vC62SAd_uDxk5PwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 03:06:53
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:c3ff:feb3:eed7 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 23:06:47.010956 2026] [security2:error] [pid 26818:tid 26818] [client 2400:8901::2000:c3ff:feb3:eed7:50979] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "visithastingsvillage.com"] [uri "/sftp-config.json"] [unique_id "aqoHxx9ocw-DaJGbr0rRsQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack