🇦🇺
2000cn.com.au
2026-06-27 22:30:55
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-06-27 11:56:17
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59.183.73.45.rdns.colocationameri ...
show more
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59.183.73.45.rdns.colocationamerica.com.183.73.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 07:56:14.373803 2026] [security2:error] [pid 15016:tid 15016] [client 45.73.183.59:64696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "destructionstudios.com"] [uri "/sftp-config.json"] [unique_id "aj-6XgQNVu6-4-Y4dsdVdgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 05:04:22
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59.183.73.45.rdns.colocationameri ...
show more
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59.183.73.45.rdns.colocationamerica.com.183.73.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 01:04:16.159568 2026] [security2:error] [pid 25839:tid 25839] [client 45.73.183.59:42190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desertautoworks.com"] [uri "/sftp-config.json"] [unique_id "aj9Z0NTju1kJYrMJm1r9HgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 01:54:06
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59-183-73-45.rdns.colocationameri ...
show more
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59-183-73-45.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 21:54:00.576369 2026] [security2:error] [pid 7535:tid 7535] [client 45.73.183.59:53398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "derek-stites.com"] [uri "/sftp-config.json"] [unique_id "aj8tOE9_M9iNdBuYBUIWJQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 00:13:38
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59-183-73-45.rdns.colocationameri ...
show more
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59-183-73-45.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 20:13:31.058647 2026] [security2:error] [pid 20907:tid 20907] [client 45.73.183.59:45484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deploy6tharmy.com"] [uri "/sftp-config.json"] [unique_id "aj8Vq4DX2JN6S6ntzcLLFQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 14:32:39
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59-183-73-45.rdns.colocationameri ...
show more
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59-183-73-45.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 10:32:31.298571 2026] [security2:error] [pid 22283:tid 22283] [client 45.73.183.59:32206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "delicatessefoods.com"] [uri "/sftp-config.json"] [unique_id "aj6Nf64WN5flMX_-SbLtsQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 11:21:26
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59-183-73-45.rdns.colocationameri ...
show more
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59-183-73-45.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 07:21:20.671306 2026] [security2:error] [pid 3045:tid 3054] [client 45.73.183.59:45788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "degreesoflove.com"] [uri "/sftp-config.json"] [unique_id "aj5gsOI0zbNwtte8bKn0lQAAAYY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-06-26 03:58:20
(4 days ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 02:44:10
(4 days ago)
(mod_security) mod_security (id:210580) triggered by 45.73.183.59 (59.183.73.45.rdns.colocationameri ...
show more
(mod_security) mod_security (id:210580) triggered by 45.73.183.59 (59.183.73.45.rdns.colocationamerica.com.183.73.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 22:44:03.172560 2026] [security2:error] [pid 4245:tid 4245] [client 45.73.183.59:36970] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||deanandolsek.com|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: http:/ddpadvancedaesthetics.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "deanandolsek.com"] [uri "/.vscode/sftp.json"] [unique_id "aj3ncxlG4gVjrjXd8o1SuAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 01:52:58
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59.183.73.45.rdns.colocationameri ...
show more
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59.183.73.45.rdns.colocationamerica.com.183.73.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:52:51.115261 2026] [security2:error] [pid 30247:tid 30247] [client 45.73.183.59:28114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rondeal.com"] [uri "/sftp-config.json"] [unique_id "aj3bc_m4X0aF_VWNwUCHKwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 01:14:06
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59.183.73.45.rdns.colocationameri ...
show more
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59.183.73.45.rdns.colocationamerica.com.183.73.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:14:00.933436 2026] [security2:error] [pid 25306:tid 25306] [client 45.73.183.59:2596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lisalehmann.com"] [uri "/sftp-config.json"] [unique_id "aj3SWGsRm8XShivMSz0dXQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-06-26 00:53:27
(4 days ago)
Try to access /de-ideale-stookmix//.vscode/sftp.json
Web App Attack
2026-06-25 22:06:42
(4 days ago)
Trying to access config files
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 17:23:44
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59-183-73-45.rdns.colocationameri ...
show more
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59-183-73-45.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 13:23:37.326633 2026] [security2:error] [pid 13479:tid 13479] [client 45.73.183.59:54876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davisound.com"] [uri "/DavisSound.html/sftp-config.json"] [unique_id "aj1kGTmZnx84KdWK3KcfGgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 16:48:49
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59.183.73.45.rdns.colocationameri ...
show more
(mod_security) mod_security (id:210492) triggered by 45.73.183.59 (59.183.73.45.rdns.colocationamerica.com.183.73.45.in-addr.arpa): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 12:48:41.886964 2026] [security2:error] [pid 15107:tid 15107] [client 45.73.183.59:41922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidtempleofdeliverance.org"] [uri "/sftp-config.json"] [unique_id "aj1b6V9leMIGl__JaIQFeAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack