🇺🇸
TPI-Abuse
2026-06-13 06:00:35
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 02:00:27.376459 2026] [security2:error] [pid 7573:tid 7573] [client 66.63.169.56:45200] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ecuablue.farm"] [uri "/sftp-config.json"] [unique_id "aizx-xgYHe9972OK6wkxigAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-06-12 19:33:40
(14 hours ago)
Deploy Config Probe
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 18:51:08
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 14:51:00.639138 2026] [security2:error] [pid 976:tid 976] [client 66.63.169.56:48082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ebric.com"] [uri "/sftp-config.json"] [unique_id "aixVFFXEG4SwwaYKaQhP1AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 08:54:26
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 04:54:22.501800 2026] [security2:error] [pid 15235:tid 15235] [client 66.63.169.56:51122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quakeprediction.com"] [uri "/sftp-config.json"] [unique_id "aivJPohFhPYsLiGa7sGSiQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 03:41:57
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 23:41:50.033457 2026] [security2:error] [pid 12513:tid 12516] [client 66.63.169.56:42140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ceresfund.com"] [uri "/sftp-config.json"] [unique_id "ait__sOx5bilQ9iJiHGYEgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-06-12 00:48:00
(1 day ago)
[redacted] 66.63.169.56 - - [12/Jun/2026:01:47:55 +0100] "GET /[redacted] HTTP/1.1" 302 5338 0/80913 ...
show more
[redacted] 66.63.169.56 - - [12/Jun/2026:01:47:55 +0100] "GET /[redacted] HTTP/1.1" 302 5338 0/80913 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" [redacted] 66.63.169.56 - - [12/Jun/2026:01:47:56 +0100] "GET /[redacted] HTTP/1.1" 302 5253 0/76979 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 21:00:04
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 16:59:56.695656 2026] [security2:error] [pid 16349:tid 16371] [client 66.63.169.56:57626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwcwelding.com"] [uri "/sftp-config.json"] [unique_id "aishzO4APrImdFNLgDES_gAAAJI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 15:29:34
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:949110) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 11:29:30.097948 2026] [security2:error] [pid 25502:tid 25502] [client 66.63.169.56:59192] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dulcebebe.net"] [uri "/sftp-config.json"] [unique_id "airUWqwnc1msLEzk2ewc_wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 14:17:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 10:17:23.142631 2026] [security2:error] [pid 14231:tid 14231] [client 66.63.169.56:53994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dudleyanddudley.com"] [uri "/sftp-config.json"] [unique_id "airDc0DFvJeljGFxdjMjagAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 13:48:55
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 09:48:49.766826 2026] [security2:error] [pid 3917:tid 3917] [client 66.63.169.56:55104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "duckchristmascards.com"] [uri "/sftp-config.json"] [unique_id "aiq8wRDJt4dvzullWAqW2gAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 08:44:26
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 04:44:20.719715 2026] [security2:error] [pid 12522:tid 12522] [client 66.63.169.56:10034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drwolberg.com"] [uri "/sftp-config.json"] [unique_id "aip1ZE1UP02VN80mmyYXkAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 07:20:02
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 03:19:53.770952 2026] [security2:error] [pid 7593:tid 7593] [client 66.63.169.56:53898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drstiso.com"] [uri "/sftp-config.json"] [unique_id "aiphmWGZAa6svyxIwiYR9gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 06:20:49
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 02:20:40.528448 2026] [security2:error] [pid 25816:tid 25816] [client 66.63.169.56:18828] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drowninglovers.com"] [uri "/sftp-config.json"] [unique_id "aipTuGy-VaHhGRxfl8jNIgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 00:50:23
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 20:50:17.494229 2026] [security2:error] [pid 18991:tid 18991] [client 66.63.169.56:14284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drgtek.com"] [uri "/sftp-config.json"] [unique_id "aioGScIwLIY3oM-5niHNzwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 19:03:52
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 66.63.169.56 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 15:03:44.294427 2026] [security2:error] [pid 30764:tid 30764] [client 66.63.169.56:22504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dragonfly.garden"] [uri "/sftp-config.json"] [unique_id "aim1EJSX7mU7ob2RHP5XQwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack