🇩🇪
FeG Deutschland
2026-07-01 17:43:04
(2 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 13:26:58
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 09:26:55.402172 2026] [security2:error] [pid 20565:tid 20565] [client 45.39.186.17:3256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fourminutedecision.com"] [uri "/index.php"] [unique_id "akUVn-B_9Eax3y3UefZ8NQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 13:09:22
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 09:09:19.080747 2026] [security2:error] [pid 1758:tid 1758] [client 45.39.186.17:35076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aarce.me"] [uri "/sftp-config.json"] [unique_id "akURf-gWL1bdNlipvsgCqAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-01 04:26:50
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 01 00:26:42.408913 2026] [security2:error] [pid 31948:tid 31948] [client 45.39.186.17:54732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cerrovictoria.com"] [uri "/patagonia4.com.ar/index.html/sftp-config.json"] [unique_id "akSXAmFfkqtCxQLRm7M7UAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 09:07:52
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 05:07:46.706780 2026] [security2:error] [pid 29344:tid 29420] [client 45.39.186.17:27974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danfriel.com"] [uri "/sftp-config.json"] [unique_id "akI14ilQJOilTixUgMAfowAAAM4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 06:05:08
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 02:04:59.008254 2026] [security2:error] [pid 9168:tid 9168] [client 45.39.186.17:62068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danasedge.net"] [uri "/sftp-config.json"] [unique_id "akILC4zOFovy8tYZaY2UygAAAFk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 20:46:51
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 16:46:43.635270 2026] [security2:error] [pid 21922:tid 21928] [client 45.39.186.17:5704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dailysavershbg.com"] [uri "/sftp-config.json"] [unique_id "akGIM7ObChCUCPDmujk6pAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 04:12:35
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 00:12:30.380292 2026] [security2:error] [pid 15203:tid 15203] [client 45.39.186.17:47314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "czarcrestwesties.com"] [uri "/sftp-config.json"] [unique_id "akCfLmc8ZvijGAnHhfHdFgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 23:39:27
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 19:39:20.392882 2026] [security2:error] [pid 1243:tid 1243] [client 45.39.186.17:37194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cyclingboardgames.net"] [uri "/sftp-config.json"] [unique_id "akBfKFCfdCxmL9FOD6IcUQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 10:12:00
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 06:11:52.441948 2026] [security2:error] [pid 17231:tid 17231] [client 45.39.186.17:28628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "curtchristian.us"] [uri "/sftp-config.json"] [unique_id "aj-h6FMz3mOjhlqt5sJdAgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
technojoe99
2026-06-27 06:53:28
(4 days ago)
Exploit scan from 45.39.186.17. GET /sftp-config.json HTTP/1.1.
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 05:42:00
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 01:41:55.883639 2026] [security2:error] [pid 403:tid 403] [client 45.39.186.17:24834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cultureal.com"] [uri "/sftp-config.json"] [unique_id "aj9iowGuEad8bUNxuBWfsAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 05:11:02
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 01:10:55.315939 2026] [security2:error] [pid 12307:tid 12307] [client 45.39.186.17:42936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.laboquimia.es"] [uri "/sftp-config.json"] [unique_id "aj9bX-iZEHyiXRaTRKCbfQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-06-27 04:43:43
(4 days ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 45.39.186.17 (JP/Japan/-): 1 in the ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 45.39.186.17 (JP/Japan/-): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 01:46:57
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.186.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 21:46:54.237868 2026] [security2:error] [pid 29581:tid 29581] [client 45.39.186.17:19276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ctrussell.us"] [uri "/sftp-config.json"] [unique_id "aj8rjjYBgY942UBMecbmOQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack