🇺🇸
TPI-Abuse
2026-09-03 19:57:58
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3ca0::279:22 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3ca0::279:22 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 15:57:52.393479 2026] [security2:error] [pid 25628:tid 25628] [client 2a09:bac1:3ca0::279:22:29294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desertautoworks.com"] [uri "/sftp-config.json"] [unique_id "apnRQJcx_ECiYAZoiPE3VwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 19:17:30
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3ca0::279:22 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3ca0::279:22 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 15:17:24.212831 2026] [security2:error] [pid 1769:tid 1769] [client 2a09:bac1:3ca0::279:22:35486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daebakdesign.com"] [uri "/sftp-config.json"] [unique_id "apnHxBQNKW-0omRQqE6cDwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 18:55:56
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3ca0::279:22 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3ca0::279:22 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 14:55:48.749892 2026] [security2:error] [pid 5474:tid 5474] [client 2a09:bac1:3ca0::279:22:51078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dbfitwell.com"] [uri "/sftp-config.json"] [unique_id "apnCtHJ7CmsweCtyHidwUQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 16:26:35
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3ca0::279:22 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3ca0::279:22 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 12:26:27.366928 2026] [security2:error] [pid 3088:tid 3088] [client 2a09:bac1:3ca0::279:22:22220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deltasouls.com"] [uri "/sftp-config.json"] [unique_id "apmfsytUyiT-Jmrf3GcRFAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-03 15:37:02
(2 days ago)
205 requests with url.path *config.json
167 requests with url.path *sftp.json
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-03 14:33:48
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3ca0::279:22 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3ca0::279:22 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 10:33:40.970119 2026] [security2:error] [pid 17552:tid 17552] [client 2a09:bac1:3ca0::279:22:46926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jdeloa.com"] [uri "/sftp-config.json"] [unique_id "apmFRCo8RZN005jaowTX5QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 14:06:22
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3ca0::279:22 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3ca0::279:22 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 10:06:14.025897 2026] [security2:error] [pid 5000:tid 5000] [client 2a09:bac1:3ca0::279:22:44296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ibeautyexchange.com"] [uri "/sftp-config.json"] [unique_id "apl-1rbDF05jxl4yhxqJ3wAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 13:46:37
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3ca0::279:22 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3ca0::279:22 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 09:46:33.750267 2026] [security2:error] [pid 23178:tid 23178] [client 2a09:bac1:3ca0::279:22:58126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "debbieparisi.com"] [uri "/sftp-config.json"] [unique_id "apl6Ob49zbDcpff_3G1wqQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 13:02:44
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3ca0::279:22 (Unknown): 1 in the last ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3ca0::279:22 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 09:02:38.157525 2026] [security2:error] [pid 17275:tid 17275] [client 2a09:bac1:3ca0::279:22:31464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danielbrower.com"] [uri "/sftp-config.json"] [unique_id "aplv7u84aLT9tG6sZRvwSgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
