🇺🇸
TPI-Abuse
2026-11-15 22:12:30
UTC ·
(5 minutes ago)
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 17:12:22.689423 2026] [security2:error] [pid 4342:tid 4451] [client 45.39.216.2:39970] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 17:12:22.689423 2026] [security2:error] [pid 4342:tid 4451] [client 45.39.216.2:39970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.conceptsinammunition.com"] [uri "/sftp-config.json"] [unique_id "avouRm6q3CjuPXz7fWs9yAAAAYo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 11:58:33
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:58:25.092155 2026] [security2:error] [pid 1054826:tid 1054826] [client 45.39.216.2:8860] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:58:25.092155 2026] [security2:error] [pid 1054826:tid 1054826] [client 45.39.216.2:8860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.janicestewart.net"] [uri "/sftp-config.json"] [unique_id "avhM4ZnNoKLqyVjhUEJRzwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:26:20
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:26:12.910271 2026] [security2:error] [pid 13646:tid 13646] [client 45.39.216.2:55720] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:26:12.910271 2026] [security2:error] [pid 13646:tid 13646] [client 45.39.216.2:55720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mitchellamazing.com"] [uri "/sftp-config.json"] [unique_id "avRCxBxtsnTRdd7Mf0Lf7wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-10 01:18:59
UTC ·
(5 days ago)
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 45.39.216.2 - - [10/Nov/2026:02:18:47 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 533 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (K ...
show more
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 45.39.216.2 - - [10/Nov/2026:02:18:47 +0100] "GET /.vscode/sftp.json HTTP/1.1" 301 533 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-05 13:34:03
UTC ·
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 07:45:38
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 02:45:32.027580 2026] [security2:error] [pid 7776:tid 7776] [client 45.39.216.2:61648] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 02:45:32.027580 2026] [security2:error] [pid 7776:tid 7776] [client 45.39.216.2:61648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cypro.com"] [uri "/sftp-config.json"] [unique_id "aug_nCNCb7wxaWzzw_5mmQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 07:25:24
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 02:25:18.184571 2026] [security2:error] [pid 6002:tid 6002] [client 45.39.216.2:21940] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 02:25:18.184571 2026] [security2:error] [pid 6002:tid 6002] [client 45.39.216.2:21940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dockrockukiah.com"] [uri "/sftp-config.json"] [unique_id "aug63ikFvL8pcDKdDciOuwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-10-31 12:46:23
UTC ·
(2 weeks ago)
[SatOct3113:46:05.4303602026][security2:error][pid1359732:tid1359836][client45.39.216.2:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLO ...
show more
[SatOct3113:46:05.4303602026][security2:error][pid1359732:tid1359836][client45.39.216.2:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"allegrafamiglia.ch\"][uri\"/sftp-config.json\"][unique_id\"auXjDfUIXFjbLLh1ZQcJIAAAARc\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 14:28:45
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210580) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 10:27:25.603583 2026] [security2:error] [pid 8934:tid 8934] [client 45.39.216.2:54410] ModSecu ...
show more
(mod_security) mod_security (id:210580) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 10:27:25.603583 2026] [security2:error] [pid 8934:tid 8934] [client 45.39.216.2:54410] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.langkawi-boat-registration.com|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: http:/nestmicroapartments.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.langkawi-boat-registration.com"] [uri "/403.shtml"] [unique_id "auSpTTLDEe3Iv3ZPUP5gEAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 23:13:41
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 19:12:53.910930 2026] [security2:error] [pid 7664:tid 7664] [client 45.39.216.2:36888] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 19:12:53.910930 2026] [security2:error] [pid 7664:tid 7664] [client 45.39.216.2:36888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shhcenter.com"] [uri "/sftp-config.json"] [unique_id "auEv9TAQ4qVjI09VplyetQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 11:07:29
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 07:07:22.077999 2026] [security2:error] [pid 30327:tid 30327] [client 45.39.216.2:6536] ModSec ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 07:07:22.077999 2026] [security2:error] [pid 30327:tid 30327] [client 45.39.216.2:6536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "velvetculture.com"] [uri "/sftp-config.json"] [unique_id "atdLau-pA01N5hKJdDGo-QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 17:46:53
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 13:46:47.719339 2026] [security2:error] [pid 2235:tid 2235] [client 45.39.216.2:48982] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 13:46:47.719339 2026] [security2:error] [pid 2235:tid 2235] [client 45.39.216.2:48982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carterslawncare.net"] [uri "/sftp-config.json"] [unique_id "atUGB3p9Gvv2PwldBlWRfQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 01:50:31
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 21:50:25.136549 2026] [security2:error] [pid 23928:tid 23928] [client 45.39.216.2:26678] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 45.39.216.2 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 21:50:25.136549 2026] [security2:error] [pid 23928:tid 23928] [client 45.39.216.2:26678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rachel-heiko.com"] [uri "/sftp-config.json"] [unique_id "atLUYVpZlyvdxWFKjFTd4AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
