๐บ๐ธ
TPI-Abuse
2026-07-28 05:00:49
(49 minutes ago)
(mod_security) mod_security (id:210492) triggered by 66.78.57.50 (50-57-78-66.rdns.colocationamerica ...
show more
(mod_security) mod_security (id:210492) triggered by 66.78.57.50 (50-57-78-66.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 01:00:41.459549 2026] [security2:error] [pid 354128:tid 354128] [client 66.78.57.50:8930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bacpool.com"] [uri "/sftp-config.json"] [unique_id "amg3eWlDMqy0qtDDSQdk1wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-28 02:08:22
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 66.78.57.50 (50-57-78-66.rdns.colocationamerica ...
show more
(mod_security) mod_security (id:210492) triggered by 66.78.57.50 (50-57-78-66.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 22:08:17.217380 2026] [security2:error] [pid 2863476:tid 2863476] [client 66.78.57.50:36506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "babylontravelone.com"] [uri "/sftp-config.json"] [unique_id "amgPEcWA2-2ENG4ZsUx6wgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-27 22:16:36
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 66.78.57.50 (50-57-78-66.rdns.colocationamerica ...
show more
(mod_security) mod_security (id:210492) triggered by 66.78.57.50 (50-57-78-66.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 18:16:29.832332 2026] [security2:error] [pid 1293971:tid 1293971] [client 66.78.57.50:6912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "b2c-llc.com"] [uri "/sftp-config.json"] [unique_id "amfYvRaUcXY1NOKzj7wSxAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-27 21:55:17
(7 hours ago)
Fail2Ban triggered
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-27 18:21:16
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 66.78.57.50 (50-57-78-66.rdns.colocationamerica ...
show more
(mod_security) mod_security (id:210492) triggered by 66.78.57.50 (50-57-78-66.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 14:21:10.080102 2026] [security2:error] [pid 1226902:tid 1226902] [client 66.78.57.50:45954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "azfilmguild.com"] [uri "/sftp-config.json"] [unique_id "amehltTC_Xl3tT4lkBrm2wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
netclix.gr
2026-07-27 11:02:52
(18 hours ago)
(c5_sensitive_scan) Custom5 Sensitive File Exploit Blocked 66.78.57.50 (US/United States/50-57-78-66 ...
show more
(c5_sensitive_scan) Custom5 Sensitive File Exploit Blocked 66.78.57.50 (US/United States/50-57-78-66.rdns.colocationamerica.com): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: default:80 66.78.57.50 - - [27/Jul/2026:14:02:50 +0300] "GET /.vscode/sftp.json HTTP/1.1" 404 405 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
show less
Port Scan
๐บ๐ธ
TPI-Abuse
2026-07-27 10:57:21
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 66.78.57.50 (50-57-78-66.rdns.colocationamerica ...
show more
(mod_security) mod_security (id:210492) triggered by 66.78.57.50 (50-57-78-66.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 06:57:12.980269 2026] [security2:error] [pid 56426:tid 56426] [client 66.78.57.50:22928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "awl-v.com"] [uri "/sftp-config.json"] [unique_id "amc5iPaGF0wRQrSVU-oavgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-27 09:40:05
(20 hours ago)
(mod_security) mod_security (id:210580) triggered by 66.78.57.50 (50-57-78-66.rdns.colocationamerica ...
show more
(mod_security) mod_security (id:210580) triggered by 66.78.57.50 (50-57-78-66.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 05:39:56.961987 2026] [security2:error] [pid 3455812:tid 3455812] [client 66.78.57.50:54182] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||awani-partners.com|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: https:/automateyourpractice.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "awani-partners.com"] [uri "/.vscode/sftp.json"] [unique_id "amcnbHRHc1xiXyTvQlf33AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
4server
2026-07-27 08:54:11
(20 hours ago)
[MonJul2710:54:07.6093612026][security2:error][pid3979130:tid3979429][client66.78.57.50:0]ModSecurit ...
show more
[MonJul2710:54:07.6093612026][security2:error][pid3979130:tid3979429][client66.78.57.50:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"avvnicolaurbani.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"amccr5fCQ-16GVE9ldV49wAAAIA\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-26 21:30:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 66.78.57.50 (50-57-78-66.rdns.colocationamerica ...
show more
(mod_security) mod_security (id:210492) triggered by 66.78.57.50 (50-57-78-66.rdns.colocationamerica.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 17:30:05.342781 2026] [security2:error] [pid 3550935:tid 3550935] [client 66.78.57.50:39446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "automationmp.com"] [uri "/sftp-config.json"] [unique_id "amZ8XbT0iH-km-HM7xQwJgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack