🇺🇸
TPI-Abuse
2026-11-11 14:32:18
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 67.219.17.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 09:32:11.048916 2026] [security2:error] [pid 1828:tid 1828] [client 67.219.17.83:41996] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 67.219.17.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 09:32:11.048916 2026] [security2:error] [pid 1828:tid 1828] [client 67.219.17.83:41996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "westonimports.com"] [uri "/sftp-config.json"] [unique_id "avR8a_MuBb6BAvdY0Nv4ggAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 11:05:59
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 67.219.17.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:05:51.886077 2026] [security2:error] [pid 16785:tid 16785] [client 67.219.17.83:50192] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 67.219.17.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 06:05:51.886077 2026] [security2:error] [pid 16785:tid 16785] [client 67.219.17.83:50192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wallawallafirearmstraining.com"] [uri "/sftp-config.json"] [unique_id "avRMD3fK3tH6cwsaUnHgRAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 05:32:46
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 67.219.17.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 00:31:18.457252 2026] [security2:error] [pid 605:tid 605] [client 67.219.17.83:65480] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 67.219.17.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 00:31:18.457252 2026] [security2:error] [pid 605:tid 605] [client 67.219.17.83:65480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gsvip.com.ec"] [uri "/sftp-config.json"] [unique_id "auggJgNgB2zrDbvf-NFD-AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 08:43:26
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 67.219.17.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:43:17.344934 2026] [security2:error] [pid 3280:tid 3280] [client 67.219.17.83:43390] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 67.219.17.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:43:17.344934 2026] [security2:error] [pid 3280:tid 3280] [client 67.219.17.83:43390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boxfactorylofts.com"] [uri "/sftp-config.json"] [unique_id "auWqJfzhS4UkM1Plw6pLJAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 09:43:52
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 67.219.17.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 05:43:43.057015 2026] [security2:error] [pid 30213:tid 30213] [client 67.219.17.83:59112] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 67.219.17.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 05:43:43.057015 2026] [security2:error] [pid 30213:tid 30213] [client 67.219.17.83:59112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joggersnipple.com"] [uri "/sftp-config.json"] [unique_id "auRmz-Z77Ihu3EHI1-jB5QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-10-27 23:12:29
UTC ·
(2 weeks ago)
Try to access /.vscode/sftp.json
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 07:18:37
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 67.219.17.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 03:18:30.315604 2026] [security2:error] [pid 5719:tid 5719] [client 67.219.17.83:49696] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 67.219.17.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 03:18:30.315604 2026] [security2:error] [pid 5719:tid 5719] [client 67.219.17.83:49696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goldandsilverni.com"] [uri "/sftp-config.json"] [unique_id "atxbxhtF2d9DCEPH1l5GkwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:13:33
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 67.219.17.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:13:17.626417 2026] [security2:error] [pid 8545:tid 8545] [client 67.219.17.83:20060] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 67.219.17.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:13:17.626417 2026] [security2:error] [pid 8545:tid 8545] [client 67.219.17.83:20060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/sftp-config.json"] [unique_id "atv4HVmVHevc881GGAhs9wAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-10-20 13:42:21
UTC ·
(3 weeks ago)
Try to access /.vscode/sftp.json
Web App Attack
🇩🇪
LRob
2026-10-18 01:39:04
UTC ·
(3 weeks ago)
Secret file probe | method: GET | path: /sftp-config.json | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 22:08:00
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 67.219.17.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:07:16.617127 2026] [security2:error] [pid 19938:tid 19938] [client 67.219.17.83:52574] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 67.219.17.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:07:16.617127 2026] [security2:error] [pid 19938:tid 19938] [client 67.219.17.83:52574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elderlyassociation.org"] [uri "/sftp-config.json"] [unique_id "atKgFO_vnFpbAs4SzsTJRgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-04 05:58:50
UTC ·
(4 months ago)
Distributed web crawl botnet attack (like Mellowtel), likely illicit scraping of AI training data to bypass firewall/robots.txt restrictions in printer-friendly.asp
Exploited Host
Bad Web Bot
2020-11-23 04:00:00
UTC ·
(5 years ago)
"Participating in a credential stuffing attack against application"
Brute-Force
2020-11-23 04:00:00
UTC ·
(5 years ago)
"Participating in a credential stuffing attack against application"
Brute-Force
2020-11-23 04:00:00
UTC ·
(5 years ago)
"Participating in a credential stuffing attack against application"
Brute-Force
