🇺🇸
TPI-Abuse
2026-06-20 23:25:06
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 19:24:58.385063 2026] [security2:error] [pid 20780:tid 20780] [client 2a09:bac1:31a0:8::245:10d:51718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stuartpearson.net"] [uri "/sftp-config.json"] [unique_id "ajchSk_1HMThIJuWGTJNRQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 22:49:13
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 18:49:07.404560 2026] [security2:error] [pid 9672:tid 9672] [client 2a09:bac1:31a0:8::245:10d:45864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bobfaw.com"] [uri "/faws//sftp-config.json"] [unique_id "ajcY4xuNkXbTFPYxKI-7wAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 22:23:09
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 18:23:02.735186 2026] [security2:error] [pid 27751:tid 27751] [client 2a09:bac1:31a0:8::245:10d:34290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "superiorhandyman.net"] [uri "/sftp-config.json"] [unique_id "ajcSxv5JXz4_6qsakzBAFQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-20 21:10:20
(1 week ago)
"GET /.vscode/sftp.json HTTP/1.1"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 20:16:03
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 16:15:55.583290 2026] [security2:error] [pid 30660:tid 30660] [client 2a09:bac1:31a0:8::245:10d:60584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ryanc.net"] [uri "/sftp-config.json"] [unique_id "ajb0-zdooqzozab1OWrObwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 16:42:44
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 12:42:36.556938 2026] [security2:error] [pid 14293:tid 14293] [client 2a09:bac1:31a0:8::245:10d:10348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lajoyadelmar.net"] [uri "/sftp-config.json"] [unique_id "ajbC_MiWs8UUYPmqxZtFoAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 07:22:02
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:949110) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 03:21:57.514194 2026] [security2:error] [pid 11146:tid 11146] [client 2a09:bac1:31a0:8::245:10d:29624] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "novintzkiariste.net"] [uri "/sftp-config.json"] [unique_id "ajY_lRtjA-7hBFUhLqnhSwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 06:00:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 02:00:21.496328 2026] [security2:error] [pid 24924:tid 24924] [client 2a09:bac1:31a0:8::245:10d:11282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/sftp-config.json"] [unique_id "ajYsdTFlz8CEtoWKzP6AtgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 05:32:59
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 20 01:32:52.973177 2026] [security2:error] [pid 14520:tid 14520] [client 2a09:bac1:31a0:8::245:10d:9446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextstepplus.net"] [uri "/sftp-config.json"] [unique_id "ajYmBFINV2Zytq60p4lpzgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-20 02:10:16
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:31a0:8::245:10d (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 22:10:10.647098 2026] [security2:error] [pid 18317:tid 18317] [client 2a09:bac1:31a0:8::245:10d:23320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextlevelcharge.com"] [uri "/sftp-config.json"] [unique_id "ajX2guO8ZwWy3L2Nb_WkAwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack