🇺🇸
TPI-Abuse
2026-07-27 20:56:49
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 45.252.80.115 (115.80.252.45.rdns.colocationame ...
show more
(mod_security) mod_security (id:210492) triggered by 45.252.80.115 (115.80.252.45.rdns.colocationamerica.com.80.252.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 16:56:41.086898 2026] [security2:error] [pid 4029888:tid 4029888] [client 45.252.80.115:2998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bilund.com"] [uri "/sftp-config.json"] [unique_id "amfGCeVqhap_r2mYPdvp_AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 19:28:51
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.252.80.115 (115.80.252.45.rdns.colocationame ...
show more
(mod_security) mod_security (id:210492) triggered by 45.252.80.115 (115.80.252.45.rdns.colocationamerica.com.80.252.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 15:28:44.159089 2026] [security2:error] [pid 3250818:tid 3251208] [client 45.252.80.115:28222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "billgiegold.com"] [uri "/sftp-config.json"] [unique_id "amexbA2qCxxAs2ZvRsws7AAAAUY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
_tom
2026-07-27 18:15:44
(1 day ago)
Automated report (2026-07-27T20:15:44+02:00). Caught probing for exposed VSCode data.
Hacking
Web App Attack
Open Proxy
🇺🇸
TPI-Abuse
2026-07-27 17:05:34
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.252.80.115 (115.80.252.45.rdns.colocationame ...
show more
(mod_security) mod_security (id:210492) triggered by 45.252.80.115 (115.80.252.45.rdns.colocationamerica.com.80.252.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 13:05:28.798937 2026] [security2:error] [pid 29636:tid 29636] [client 45.252.80.115:21062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mrzradio.org"] [uri "/sftp-config.json"] [unique_id "ameP2O6R-0UtjuQhEF_6wwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 14:54:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.252.80.115 (115.80.252.45.rdns.colocationame ...
show more
(mod_security) mod_security (id:210492) triggered by 45.252.80.115 (115.80.252.45.rdns.colocationamerica.com.80.252.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 10:54:16.620210 2026] [security2:error] [pid 3946388:tid 3946388] [client 45.252.80.115:31124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigredgraphicdesign.com"] [uri "/sftp-config.json"] [unique_id "amdxGFbCnOiBW73PRCGFAgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 13:59:35
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.252.80.115 (115.80.252.45.rdns.colocationame ...
show more
(mod_security) mod_security (id:210492) triggered by 45.252.80.115 (115.80.252.45.rdns.colocationamerica.com.80.252.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 09:59:28.169710 2026] [security2:error] [pid 518033:tid 518033] [client 45.252.80.115:35526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigislandhawaiirealestate.com"] [uri "/sftp-config.json"] [unique_id "amdkQCorxKrM47GJCkqX3QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 13:37:30
(1 day ago)
(mod_security) mod_security (id:210580) triggered by 45.252.80.115 (115.80.252.45.rdns.colocationame ...
show more
(mod_security) mod_security (id:210580) triggered by 45.252.80.115 (115.80.252.45.rdns.colocationamerica.com.80.252.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 09:37:25.980895 2026] [security2:error] [pid 1665632:tid 1665632] [client 45.252.80.115:37674] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_url. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||urlpick.com|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_url: https:/livebh.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "urlpick.com"] [uri "/biggie.html"] [unique_id "amdfFdGC1FBhNVkGXRu-ogAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 08:34:19
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.252.80.115 (115.80.252.45.rdns.colocationame ...
show more
(mod_security) mod_security (id:210492) triggered by 45.252.80.115 (115.80.252.45.rdns.colocationamerica.com.80.252.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 04:34:14.581231 2026] [security2:error] [pid 102447:tid 102482] [client 45.252.80.115:61288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "biblewriter.com"] [uri "/sftp-config.json"] [unique_id "amcYBikyUcHb3CyVF0PjaAAAAIM"]
show less
Brute-Force
Bad Web Bot
Web App Attack