🇺🇸
TPI-Abuse
2026-11-08 19:33:49
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:33:44.444652 2026] [security2:error] [pid 16564:tid 16564] [client 4.247.132.249:60376] M ...
show more
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 14:33:44.444652 2026] [security2:error] [pid 16564:tid 16564] [client 4.247.132.249:60376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stmaarten-boatcharters.com"] [uri "/sftp-config.json"] [unique_id "avDOmGgvCiPgCqT4E56hlwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 17:06:42
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:06:37.353649 2026] [security2:error] [pid 22149:tid 22149] [client 4.247.132.249:62634] M ...
show more
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:06:37.353649 2026] [security2:error] [pid 22149:tid 22149] [client 4.247.132.249:62634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "studioarmanni.com"] [uri "/sftp-config.json"] [unique_id "avCsHQVtP6PmgeWTIjOqKAAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:15:00
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:14:56.187383 2026] [security2:error] [pid 25948:tid 25948] [client 4.247.132.249:53331] M ...
show more
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:14:56.187383 2026] [security2:error] [pid 25948:tid 25948] [client 4.247.132.249:53331] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oualierealty.com"] [uri "/sftp-config.json"] [unique_id "avCgAHpBmo93LdVCou5DlQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-08 16:12:26
UTC ·
(7 hours ago)
[Mon Nov 09 03:12:25.481268 2026] [security2:error] [pid 2138] [client 4.247.132.249:52217] [client 4.247.132.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUES ...
show more
[Mon Nov 09 03:12:25.481268 2026] [security2:error] [pid 2138] [client 4.247.132.249:52217] [client 4.247.132.249] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "stkildashule.org.au"] [uri "/sftp-config.json"] [unique_id "avCfaUEpIsG5SWJR5Z47ywAAAAc"]
...
show less
Web App Attack
2026-11-08 12:51:27
UTC ·
(10 hours ago)
apache vulnerability scan
Web App Attack
🇺🇸
jcbriar
2026-11-08 11:06:28
UTC ·
(12 hours ago)
Searching for vulnerable scripts
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 09:37:53
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 04:37:48.664068 2026] [security2:error] [pid 23881:tid 23881] [client 4.247.132.249:49865] M ...
show more
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 04:37:48.664068 2026] [security2:error] [pid 23881:tid 23881] [client 4.247.132.249:49865] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "supaskills.com"] [uri "/sftp-config.json"] [unique_id "avBC7AUj60E91NuGyn-4QQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-11-08 08:01:38
UTC ·
(15 hours ago)
[SunNov0809:01:32.6694362026][security2:error][pid3876252:tid3876341][client4.247.132.249:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-B ...
show more
[SunNov0809:01:32.6694362026][security2:error][pid3876252:tid3876341][client4.247.132.249:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"subitotraslochi.ch\"][uri\"/sftp-config.json\"][unique_id\"avAsXPAOieMGGGH1HcCVFwAAAJI\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 04:17:41
UTC ·
(18 hours ago)
(mod_security) mod_security (id:949110) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:17:35.183041 2026] [security2:error] [pid 7360:tid 7360] [client 4.247.132.249:52449] Mod ...
show more
(mod_security) mod_security (id:949110) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 23:17:35.183041 2026] [security2:error] [pid 7360:tid 7360] [client 4.247.132.249:52449] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sunstrongmetal.com"] [uri "/sftp-config.json"] [unique_id "au_33xj-3LXYFyXD5FrrpwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
Jova
2026-11-08 03:59:08
UTC ·
(19 hours ago)
Probing a web server for sensitive files (.env, backups, configs): 3 requests.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:05:00
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:04:56.677882 2026] [security2:error] [pid 16679:tid 16679] [client 4.247.132.249:58180] M ...
show more
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:04:56.677882 2026] [security2:error] [pid 16679:tid 16679] [client 4.247.132.249:58180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "styxfreeworld.com"] [uri "/sftp-config.json"] [unique_id "au_YyPZH13usawsTglZiGAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 23:35:13
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:35:07.270701 2026] [security2:error] [pid 10751:tid 10751] [client 4.247.132.249:63530] M ...
show more
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 18:35:07.270701 2026] [security2:error] [pid 10751:tid 10751] [client 4.247.132.249:63530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stpetersplayers.co.uk"] [uri "/sftp-config.json"] [unique_id "au-1q9RHwITpU2l6TdW3NwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 19:42:25
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 14:42:22.065974 2026] [security2:error] [pid 28307:tid 28307] [client 4.247.132.249:58906] M ...
show more
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 14:42:22.065974 2026] [security2:error] [pid 28307:tid 28307] [client 4.247.132.249:58906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stoughtonpipeandwelding.net"] [uri "/sftp-config.json"] [unique_id "au9_HuJTHvi9Necz_VerPgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 15:32:01
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:31:56.810244 2026] [security2:error] [pid 24316:tid 24316] [client 4.247.132.249:57797] M ...
show more
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 10:31:56.810244 2026] [security2:error] [pid 24316:tid 24316] [client 4.247.132.249:57797] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stortfordmedical.com"] [uri "/sftp-config.json"] [unique_id "au9EbMcabP4kbl2V8eZjbAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 14:57:06
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 09:57:01.643403 2026] [security2:error] [pid 4529:tid 4529] [client 4.247.132.249:57578] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 4.247.132.249 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 09:57:01.643403 2026] [security2:error] [pid 4529:tid 4529] [client 4.247.132.249:57578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stormwlf.com"] [uri "/sftp-config.json"] [unique_id "au88PdMVkEuEtiEd9GHtXQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
