🇺🇸
TPI-Abuse
2026-11-11 22:08:44
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 27.99.129.97 (spk.laws.ms): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:08:39.702106 2026] [security2:error] [pid 21391:tid 21391] [client 27.99.129.97: ...
show more
(mod_security) mod_security (id:210492) triggered by 27.99.129.97 (spk.laws.ms): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:08:39.702106 2026] [security2:error] [pid 21391:tid 21391] [client 27.99.129.97:6224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abilityengraving.com"] [uri "/sftp-config.json"] [unique_id "avTnZ4zIeTPr9ruYnxAI1gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 09:46:23
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 27.99.129.97 (spk.laws.ms): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:46:16.196287 2026] [security2:error] [pid 25142:tid 25142] [client 27.99.129.97: ...
show more
(mod_security) mod_security (id:210492) triggered by 27.99.129.97 (spk.laws.ms): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:46:16.196287 2026] [security2:error] [pid 25142:tid 25142] [client 27.99.129.97:43526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "skipspsaexchange.com"] [uri "/sftp-config.json"] [unique_id "au2h6KXTuVhaYqE0LT8SqQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:14:12
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 27.99.129.97 (spk.laws.ms): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:14:07.089923 2026] [security2:error] [pid 22600:tid 22600] [client 27.99.129.97: ...
show more
(mod_security) mod_security (id:210492) triggered by 27.99.129.97 (spk.laws.ms): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:14:07.089923 2026] [security2:error] [pid 22600:tid 22600] [client 27.99.129.97:17618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casagrotto.com"] [uri "/sftp-config.json"] [unique_id "au1F_145mt15qpwY0tyD-AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:36:50
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 27.99.129.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:36:33.725327 2026] [security2:error] [pid 27766:tid 27781] [client 27.99.129.97:32742] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 27.99.129.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:36:33.725327 2026] [security2:error] [pid 27766:tid 27781] [client 27.99.129.97:32742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coloradosellers.com"] [uri "/sftp-config.json"] [unique_id "auh1wde29zyO0sQrlXxf7wAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
Mga Admin
2026-10-29 23:37:36
UTC ·
(1 week ago)
27.99.129.97 - - [30/Oct/2026:06:37:36 +0700] "GET /sumFREGAT/bychr/PRPF38B.RData HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
...
Web App Attack
🇩🇪
LRob
2026-10-19 21:28:01
UTC ·
(3 weeks ago)
Secret file probe | method: GET | path: /.vscode/sftp.json | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 15:56:42
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 27.99.129.97 (spk.laws.ms): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 11:56:36.012152 2026] [security2:error] [pid 14668:tid 14668] [client 27.99.129.97: ...
show more
(mod_security) mod_security (id:210492) triggered by 27.99.129.97 (spk.laws.ms): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 11:56:36.012152 2026] [security2:error] [pid 14668:tid 14668] [client 27.99.129.97:9388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scoretopicturenetwork.com"] [uri "/sftp-config.json"] [unique_id "atY9tP7uLeUrgaUsWiDXSQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 11:46:54
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 27.99.129.97 (spk.laws.ms): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 07:46:48.865845 2026] [security2:error] [pid 29108:tid 29108] [client 27.99.129.97: ...
show more
(mod_security) mod_security (id:210492) triggered by 27.99.129.97 (spk.laws.ms): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 07:46:48.865845 2026] [security2:error] [pid 29108:tid 29108] [client 27.99.129.97:18800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "safeharbourfund.com"] [uri "/sftp-config.json"] [unique_id "atYDKDaEv8kxhWlF3ejUogAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
