🇺🇸
TPI-Abuse
2026-11-15 22:07:13
UTC ·
(38 seconds ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 17:07:06.530729 2026] [security2:error] [pid 8078:tid 8078] [client 45.134.139.167:64134] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 17:07:06.530729 2026] [security2:error] [pid 8078:tid 8078] [client 45.134.139.167:64134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "missyshinoski.info"] [uri "/sftp-config.json"] [unique_id "avotCkZF-riQBZMExnShngAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-15 12:25:09
UTC ·
(9 hours ago)
Web scanner, blocked automatically by fail2ban.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 20:04:56
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 15:04:46.459000 2026] [security2:error] [pid 31734:tid 31734] [client 45.134.139.167:31506] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 15:04:46.459000 2026] [security2:error] [pid 31734:tid 31734] [client 45.134.139.167:31506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "talentstar.com"] [uri "/sftp-config.json"] [unique_id "avi-3qPkBzeh1eyNWM619AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 07:04:41
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 02:04:33.465809 2026] [security2:error] [pid 21149:tid 21149] [client 45.134.139.167:42784] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 02:04:33.465809 2026] [security2:error] [pid 21149:tid 21149] [client 45.134.139.167:42784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kenirving.com"] [uri "/sftp-config.json"] [unique_id "avgIAciJv5fQuXL5yMXuoAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-11-13 12:33:26
UTC ·
(2 days ago)
(web_sensitive_file) srv104 Sensitive file probe (.env/.git/backup) 45.134.139.167 (NL/The Netherlands/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 11:04:25
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:04:20.668130 2026] [security2:error] [pid 27832:tid 27832] [client 45.134.139.167:21414] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:04:20.668130 2026] [security2:error] [pid 27832:tid 27832] [client 45.134.139.167:21414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pcga.golf"] [uri "/sftp-config.json"] [unique_id "avRLtKEM7QeXD_CW2Jk7qgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:44:12
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:44:06.014960 2026] [security2:error] [pid 7030:tid 7071] [client 45.134.139.167:9406] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:44:06.014960 2026] [security2:error] [pid 7030:tid 7071] [client 45.134.139.167:9406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.biblewriter.com"] [uri "/sftp-config.json"] [unique_id "avRG9h-e2v5bBETDimOZTwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:20:55
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:20:48.160465 2026] [security2:error] [pid 1795:tid 1795] [client 45.134.139.167:33678] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:20:48.160465 2026] [security2:error] [pid 1795:tid 1795] [client 45.134.139.167:33678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.proprocessor.com"] [uri "/deerprocessingequipment.htm/sftp-config.json"] [unique_id "au1HkJMJNXUuEtVpajO3eAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-24 12:06:50
UTC ·
(3 weeks ago)
[SatOct2414:06:45.3427442026][security2:error][pid3939931:tid3940012][client45.134.139.167:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949- ...
show more
[SatOct2414:06:45.3427442026][security2:error][pid3939931:tid3940012][client45.134.139.167:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"vg13.ch\"][uri\"/sftp-config.json\"][unique_id\"atyfVZrP0qn6kjvbDzyPLgAAANM\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:06:38
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:06:34.502597 2026] [security2:error] [pid 26765:tid 26765] [client 45.134.139.167:62652] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:06:34.502597 2026] [security2:error] [pid 26765:tid 26765] [client 45.134.139.167:62652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/products/dolls/index.html/sftp-config.json"] [unique_id "atv2ijT2F5Z68XO1_JIa_AAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 01:21:05
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 21:20:56.953414 2026] [security2:error] [pid 19490:tid 19490] [client 45.134.139.167:41504] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 21:20:56.953414 2026] [security2:error] [pid 19490:tid 19490] [client 45.134.139.167:41504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "airei.com"] [uri "/sftp-config.json"] [unique_id "atq2eK4sZiOoX86gqlCf4wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 02:02:33
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 22:02:27.823305 2026] [security2:error] [pid 8337:tid 8337] [client 45.134.139.167:29458] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 22:02:27.823305 2026] [security2:error] [pid 8337:tid 8337] [client 45.134.139.167:29458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "julianunplugged.com"] [uri "/sftp-config.json"] [unique_id "atgdM6-_UWbDEIMLDcwWzwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-19 20:32:08
UTC ·
(3 weeks ago)
Secret file probe | method: GET | path: /sftp-config.json | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Hacking
Web App Attack
🇩🇪
FeG Deutschland
2026-10-19 12:11:08
UTC ·
(3 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 19:54:08
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 15:54:05.779362 2026] [security2:error] [pid 3368:tid 3368] [client 45.134.139.167:62750] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.167 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 15:54:05.779362 2026] [security2:error] [pid 3368:tid 3368] [client 45.134.139.167:62750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swampoodlegrounds.com"] [uri "/sftp-config.json"] [unique_id "atUj3atpHY-zw8OLD6ERHwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
