|
🇩🇪
BlueWire Hosting
|
|
High-confidence malicious configuration/VCS probe
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.73.162.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:43:52.689142 2026] [security2:error] [pid 21439:tid 21439] [client 45.73.162.219:34944] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.73.162.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:43:52.689142 2026] [security2:error] [pid 21439:tid 21439] [client 45.73.162.219:34944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.willandtrustlaw.com"] [uri "/sftp-config.json"] [unique_id "auxd6HbTWqlrPUb4iseoyQAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.73.162.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:56:17.501259 2026] [security2:error] [pid 16113:tid 16113] [client 45.73.162.219:48934] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.73.162.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:56:17.501259 2026] [security2:error] [pid 16113:tid 16113] [client 45.73.162.219:48934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adventiststoday.com"] [uri "/sftp-config.json"] [unique_id "auk_QYVgfd66iOcnZIl9IgAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇷
thilo
|
|
Probe for vulnerabilities. Path attempted: /.vscode/sftp
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.73.162.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 23:49:29.130255 2026] [security2:error] [pid 7437:tid 7437] [client 45.73.162.219:59756] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 45.73.162.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 23:49:29.130255 2026] [security2:error] [pid 7437:tid 7437] [client 45.73.162.219:59756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thehudsonpress.com"] [uri "/sftp-config.json"] [unique_id "auAfSdAaL3xiep6M5nhVXAAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.73.162.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 15:31:22.859402 2026] [security2:error] [pid 2992:tid 2992] [client 45.73.162.219:7136] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 45.73.162.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 15:31:22.859402 2026] [security2:error] [pid 2992:tid 2992] [client 45.73.162.219:7136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rixcoca.com"] [uri "/sftp-config.json"] [unique_id "atu2CtYWdOe8iCACUExUXAAAAB0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.73.162.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 05:55:52.940465 2026] [security2:error] [pid 21433:tid 21587] [client 45.73.162.219:51498] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.73.162.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 05:55:52.940465 2026] [security2:error] [pid 21433:tid 21587] [client 45.73.162.219:51498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jaedanhiggins.info"] [uri "/sftp-config.json"] [unique_id "atiMKJBDtI0bhuQ4LVYrwwAAAUY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇮🇹
CoreTech srl
|
|
cloudlinux2 fail2ban: 2026-10-20 09:33:50,607 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 36.90.67.63 - 2026-10-20 09:33:50cloudlinux2 fail2ban: 2026-10-20 09:33:51,319 fail2ban.filter [1957]: INFO [recidive] Found 36 ...
show more
cloudlinux2 fail2ban: 2026-10-20 09:33:50,607 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 36.90.67.63 - 2026-10-20 09:33:50cloudlinux2 fail2ban: 2026-10-20 09:33:51,319 fail2ban.filter [1957]: INFO [recidive] Found 36.90.67.63 - 2026-10-20 09:33:51cloudlinux2 fail2ban: 2026-10-20 09:33:51,222 fail2ban.actions [1957]: NOTICE [plesk-modsecurity] Ban 36.90.67.63cloudlinux2 fail2ban: 2026-10-20 09:33:56,469 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 41.56.139.86 - 2026-10-20 09:33:55cloudlinux2 fail2ban: 2026-10-20 09:34:10,542 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 93.123.109.230 - 2026-10-20 09:34:10cloudlinux2 fail2ban: 2026-10-20 09:34:48,232 fail2ban.filter [1957]: INFO [plesk-wordpress] Found 197.184.65.144 - 2026-10-20 09:34:46cloudlinux2 fail2ban: 2026-10-20 09:34:46,748 fail2ban.filter [1957]: INFO [plesk-modsecurity] Found 45.73.162.219 - 2026-10-20 09:34:46cloudlinux2 fail2ban: 2026-10-20 09:3
show less
|
FTP Brute-Force
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 45.73.162.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 05:25:01.747450 2026] [security2:error] [pid 29260:tid 29260] [client 45.73.162.219:52510] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.73.162.219 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 05:25:01.747450 2026] [security2:error] [pid 29260:tid 29260] [client 45.73.162.219:52510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "7livesahead.com"] [uri "/sftp-config.json"] [unique_id "atSQbchAqKx75SCP8XCs4wAAACM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
kosada.com
|
|
Web bot: DDoS
|
DDoS Attack
Bad Web Bot
|