🇺🇸
TPI-Abuse
2026-11-14 11:53:37
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:53:30.448210 2026] [security2:error] [pid 20750:tid 20750] [client 45.129.234.104:37806] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:53:30.448210 2026] [security2:error] [pid 20750:tid 20750] [client 45.129.234.104:37806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.laboquimia.es"] [uri "/sftp-config.json"] [unique_id "avhLujEDLMYmXXfvtJwfZAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-11-14 11:21:23
UTC ·
(1 day ago)
(web_sensitive_file) srv104 Sensitive file probe (.env/.git/backup) 45.129.234.104 (NL/The Netherlands/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:46:10
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:46:06.494869 2026] [security2:error] [pid 22570:tid 22570] [client 45.129.234.104:15016] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:46:06.494869 2026] [security2:error] [pid 22570:tid 22570] [client 45.129.234.104:15016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "natickvillagerentals.com"] [uri "/sftp-config.json"] [unique_id "avbcXtm4YHwnWZzEm_lRwwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:16:42
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:16:37.355851 2026] [security2:error] [pid 26814:tid 26890] [client 45.129.234.104:48048] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:16:37.355851 2026] [security2:error] [pid 26814:tid 26890] [client 45.129.234.104:48048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.davidholls.com"] [uri "/sftp-config.json"] [unique_id "avTpRbKCFsbUwVjWYDHPYAAAAMA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 05:45:39
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:45:32.717076 2026] [security2:error] [pid 3345:tid 3345] [client 45.129.234.104:5718] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:45:32.717076 2026] [security2:error] [pid 3345:tid 3345] [client 45.129.234.104:5718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "afjm.org"] [uri "/sftp-config.json"] [unique_id "avKvfDmjxy66t51RqN_T8QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 05:20:11
UTC ·
(1 week ago)
(mod_security) mod_security (id:210580) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:20:06.681379 2026] [security2:error] [pid 18887:tid 18887] [client 45.129.234.104:18650] ...
show more
(mod_security) mod_security (id:210580) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:20:06.681379 2026] [security2:error] [pid 18887:tid 18887] [client 45.129.234.104:18650] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||cles-fonctionnel.com|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: https:/coast85.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "cles-fonctionnel.com"] [uri "/.vscode/sftp.json"] [unique_id "avAGhmbZDLgOj6lL66pUhAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 02:19:52
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:19:49.193004 2026] [security2:error] [pid 1767:tid 1767] [client 45.129.234.104:23028] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 21:19:49.193004 2026] [security2:error] [pid 1767:tid 1767] [client 45.129.234.104:23028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dabovalbb.com"] [uri "/sftp-config.json"] [unique_id "au_cRZ7yLvUYNcVo_x7yFQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:31:18
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:31:13.752203 2026] [security2:error] [pid 16422:tid 16422] [client 45.129.234.104:47334] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:31:13.752203 2026] [security2:error] [pid 16422:tid 16422] [client 45.129.234.104:47334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mvpbees.com"] [uri "/sftp-config.json"] [unique_id "au1KAXRuWnezwMP7GYpNeQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-11-06 02:45:23
UTC ·
(1 week ago)
[FriNov0603:45:20.7298102026][security2:error][pid1796495:tid1796629][client45.129.234.104:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"] ...
show more
[FriNov0603:45:20.7298102026][security2:error][pid1796495:tid1796629][client45.129.234.104:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"marcionetti.es\"][uri\"/.vscode/sftp.json\"][unique_id\"au0_QJGqtv_rrHVw8o32uAAAANY\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 16:47:13
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 11:47:06.883511 2026] [security2:error] [pid 7209:tid 7209] [client 45.129.234.104:62672] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 11:47:06.883511 2026] [security2:error] [pid 7209:tid 7209] [client 45.129.234.104:62672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bestcountryclubs.com"] [uri "/sftp-config.json"] [unique_id "auoQCvm4FjCSACWtWYqtLwAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 03:02:48
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 23:02:43.559796 2026] [security2:error] [pid 20413:tid 20413] [client 45.129.234.104:42820] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 23:02:43.559796 2026] [security2:error] [pid 20413:tid 20413] [client 45.129.234.104:42820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "appalachianfolkmagician.com"] [uri "/sftp-config.json"] [unique_id "auVaU_SXXoMcY4tHHGiiSwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-10-27 22:09:57
UTC ·
(2 weeks ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 11:46:11
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 07:46:03.406908 2026] [security2:error] [pid 28315:tid 28315] [client 45.129.234.104:38400] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 07:46:03.406908 2026] [security2:error] [pid 28315:tid 28315] [client 45.129.234.104:38400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.robcohn.com"] [uri "/sftp-config.json"] [unique_id "attI-6vAFhQegYhukv-4TQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 10:03:56
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 06:03:50.964475 2026] [security2:error] [pid 28431:tid 28431] [client 45.129.234.104:22182] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 06:03:50.964475 2026] [security2:error] [pid 28431:tid 28431] [client 45.129.234.104:22182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sawmat.com"] [uri "/sftp-config.json"] [unique_id "atiOBjzEXCfMA3DqJ_q_nQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 02:02:47
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 22:02:44.377876 2026] [security2:error] [pid 1227:tid 1227] [client 45.129.234.104:37388] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.129.234.104 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 22:02:44.377876 2026] [security2:error] [pid 1227:tid 1227] [client 45.129.234.104:37388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "steveleeds.com"] [uri "/sftp-config.json"] [unique_id "atV6RHT05dWtPxyqWBtXDgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
