🇺🇸
TPI-Abuse
2026-08-29 04:39:10
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 00:39:06.142749 2026] [security2:error] [pid 28388:tid 28388] [client 2a09:bac1:3cc0::19b:177:23158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "briannalls.com"] [uri "/sftp-config.json"] [unique_id "apJiav0zS3kBOJWchfViagAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 03:36:19
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 23:36:12.217887 2026] [security2:error] [pid 24650:tid 24650] [client 2a09:bac1:3cc0::19b:177:21470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chickiesbeef.com"] [uri "/sftp-config.json"] [unique_id "apJTrAn5nMJ75GrzqBMJ9gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
YF
2026-08-29 03:31:16
(20 hours ago)
Config JSON probe
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 03:07:00
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 23:06:53.608886 2026] [security2:error] [pid 29808:tid 29921] [client 2a09:bac1:3cc0::19b:177:43960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "busybeerestaurant.com"] [uri "/sftp-config.json"] [unique_id "apJMzerV_3_S5WwiJEI10gAAAQc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 02:04:23
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 22:04:17.417118 2026] [security2:error] [pid 23468:tid 23468] [client 2a09:bac1:3cc0::19b:177:30748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "waynos.net"] [uri "/sftp-config.json"] [unique_id "apI-ITF8ctNuyQvy9_Q5fgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 01:37:58
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 21:37:51.191181 2026] [security2:error] [pid 7248:tid 7248] [client 2a09:bac1:3cc0::19b:177:51840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "axiomemail.net"] [uri "/sftp-config.json"] [unique_id "apI3796YgI-Oj-bvSN2xxAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 01:15:38
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 21:15:34.294176 2026] [security2:error] [pid 24982:tid 24982] [client 2a09:bac1:3cc0::19b:177:50744] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "studioarmanni.com"] [uri "/sftp-config.json"] [unique_id "apIytmBVdWx3A9vkD06WNQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 00:58:36
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:58:31.764189 2026] [security2:error] [pid 6126:tid 6129] [client 2a09:bac1:3cc0::19b:177:49126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coasterdvdsonline.com"] [uri "/sftp-config.json"] [unique_id "apIutwQrNQQ0pHdSiPfb8QAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 00:31:22
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:31:14.467630 2026] [security2:error] [pid 20521:tid 20521] [client 2a09:bac1:3cc0::19b:177:62200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tinkerlabyrinth.com"] [uri "/sftp-config.json"] [unique_id "apIoUkwKkTAyxZwjHjHprAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 00:12:14
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:12:07.862888 2026] [security2:error] [pid 2023:tid 2023] [client 2a09:bac1:3cc0::19b:177:17532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stortfordmedical.com"] [uri "/sftp-config.json"] [unique_id "apIj1x-wTADJguVWif-KZAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-08-28 23:43:28
(1 day ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 23:30:32
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 19:30:27.905218 2026] [security2:error] [pid 25686:tid 25686] [client 2a09:bac1:3cc0::19b:177:50926] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "azcrittergetter.com"] [uri "/sftp-config.json"] [unique_id "apIaEw2LqnOPQtk4ZwXNPQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-08-28 23:26:00
(1 day ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /sftp-config.json | 2026-08-28 23:26 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 22:52:25
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 18:52:20.419934 2026] [security2:error] [pid 21502:tid 21502] [client 2a09:bac1:3cc0::19b:177:9402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boatregistrationdelaware.com"] [uri "/sftp-config.json"] [unique_id "apIRJPulibMwlQR1H6WzUAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 22:26:47
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the las ...
show more
(mod_security) mod_security (id:210492) triggered by 2a09:bac1:3cc0::19b:177 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 18:26:40.982709 2026] [security2:error] [pid 11198:tid 11198] [client 2a09:bac1:3cc0::19b:177:21658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barecreationsaz.com"] [uri "/sftp-config.json"] [unique_id "apILIK3T8SXATZgwkt9bowAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
