🇺🇸
TPI-Abuse
2026-11-06 14:55:18
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 64.44.107.26 (26-107-44-64-.reverse-dns): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:55:10.788855 2026] [security2:error] [pid 16997:tid 16997] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 64.44.107.26 (26-107-44-64-.reverse-dns): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:55:10.788855 2026] [security2:error] [pid 16997:tid 16997] [client 64.44.107.26:35462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jeranny.com"] [uri "/sftp-config.json"] [unique_id "au3qTjAnWHEUGgIABBFMYgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:35:26
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 64.44.107.26 (26-107-44-64-.reverse-dns): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:35:18.429580 2026] [security2:error] [pid 28248:tid 28248] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 64.44.107.26 (26-107-44-64-.reverse-dns): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:35:18.429580 2026] [security2:error] [pid 28248:tid 28248] [client 64.44.107.26:36022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.abakada.net"] [uri "/scmicron/sftp-config.json"] [unique_id "au1K9qVggZYt2S3SNnERDAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-30 08:44:51
UTC ·
(1 week ago)
Secret file probe | method: GET | path: /.vscode/sftp.json | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:20:01
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 64.44.107.26 (26-107-44-64-.reverse-dns): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:19:54.507354 2026] [security2:error] [pid 7669:tid 7669] [client 6 ...
show more
(mod_security) mod_security (id:210492) triggered by 64.44.107.26 (26-107-44-64-.reverse-dns): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:19:54.507354 2026] [security2:error] [pid 7669:tid 7669] [client 64.44.107.26:40914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sergioaurell.com"] [uri "/sftp-config.json"] [unique_id "atv5qtwSYJ7ycHTXhdwAkAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 14:50:04
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 64.44.107.26 (26-107-44-64-.reverse-dns): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 10:49:55.067101 2026] [security2:error] [pid 8370:tid 8370] [client 6 ...
show more
(mod_security) mod_security (id:210492) triggered by 64.44.107.26 (26-107-44-64-.reverse-dns): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 10:49:55.067101 2026] [security2:error] [pid 8370:tid 8370] [client 64.44.107.26:24172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "namefinder.com"] [uri "/sftp-config.json"] [unique_id "atd_k75wqJZqQEN_mMXP6gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-19 12:11:13
UTC ·
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 03:02:51
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 64.44.107.26 (26-107-44-64-.reverse-dns): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:02:45.122680 2026] [security2:error] [pid 1746:tid 1756] [client 6 ...
show more
(mod_security) mod_security (id:210492) triggered by 64.44.107.26 (26-107-44-64-.reverse-dns): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:02:45.122680 2026] [security2:error] [pid 1746:tid 1756] [client 64.44.107.26:44272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.biblewriter.com"] [uri "/durablejoybook.htm/sftp-config.json"] [unique_id "atQ21YeBDb6akmnsCJeYugAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 18:16:57
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 64.44.107.26 (26-107-44-64-.reverse-dns): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 14:16:52.166452 2026] [security2:error] [pid 24406:tid 24406] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 64.44.107.26 (26-107-44-64-.reverse-dns): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 14:16:52.166452 2026] [security2:error] [pid 24406:tid 24406] [client 64.44.107.26:18444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.centrosteckerl.com"] [uri "/sftp-config.json"] [unique_id "atO7lC9bb5As92PFCr0X9wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
interbiznw.com
2026-10-17 17:30:37
UTC ·
(2 weeks ago)
fail2ban-ban
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 22:08:54
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 64.44.107.26 (26-107-44-64-.reverse-dns): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:07:11.853142 2026] [security2:error] [pid 16305:tid 16305] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 64.44.107.26 (26-107-44-64-.reverse-dns): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:07:11.853142 2026] [security2:error] [pid 16305:tid 16305] [client 64.44.107.26:30664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "archaiusmusic.com"] [uri "/sftp-config.json"] [unique_id "atKgD1yY_YBw46z5fcBLrgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
