🇺🇸
TPI-Abuse
2026-11-13 06:24:41
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:24:33.671009 2026] [security2:error] [pid 27969:tid 27969] [client 82.23.32.140:29244] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:24:33.671009 2026] [security2:error] [pid 27969:tid 27969] [client 82.23.32.140:29244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vittariacapital.com"] [uri "/sftp-config.json"] [unique_id "avatIRm-mwNE2a9hV4tYBgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 11:27:26
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:27:19.218793 2026] [security2:error] [pid 5544:tid 5544] [client 82.23.32.140:62448] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:27:19.218793 2026] [security2:error] [pid 5544:tid 5544] [client 82.23.32.140:62448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wplusw.com"] [uri "/sftp-config.json"] [unique_id "avWil---Rws0a1ZG_11XiwAAAC4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 16:44:03
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:43:56.254590 2026] [security2:error] [pid 27552:tid 27552] [client 82.23.32.140:33914] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:43:56.254590 2026] [security2:error] [pid 27552:tid 27552] [client 82.23.32.140:33914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zendogenpets.com"] [uri "/sftp-config.json"] [unique_id "au4DzBfMWiYatWjyTPZ7cgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-11-03 21:17:25
UTC ·
(1 week ago)
[redacted] 82.23.32.140 - - [03/Nov/2026:22:17:20 +0100] "GET /[redacted] HTTP/1.1" 302 6841 0/153194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 443 [redacted] 82.23.32.140 - - [03/Nov/ ...
show more
[redacted] 82.23.32.140 - - [03/Nov/2026:22:17:20 +0100] "GET /[redacted] HTTP/1.1" 302 6841 0/153194 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 443 [redacted] 82.23.32.140 - - [03/Nov/2026:22:17:21 +0100] "GET /[redacted] HTTP/1.1" 302 1539 0/113566 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 443
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 15:12:17
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:12:13.316139 2026] [security2:error] [pid 11357:tid 11357] [client 82.23.32.140:57018] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:12:13.316139 2026] [security2:error] [pid 11357:tid 11357] [client 82.23.32.140:57018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "liquid-libido.com"] [uri "/sftp-config.json"] [unique_id "auioTRzab7x9Kp3sXTzdywAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:28:59
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:28:55.574877 2026] [security2:error] [pid 12806:tid 12833] [client 82.23.32.140:52876] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:28:55.574877 2026] [security2:error] [pid 12806:tid 12833] [client 82.23.32.140:52876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lakebridge.com"] [uri "/sftp-config.json"] [unique_id "auhz9xJ8iRJ7INDykIkAoAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-11-02 04:08:15
UTC ·
(1 week ago)
Secret file probe | method: GET | path: /sftp-config.json | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 05:07:23
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 01:06:10.191751 2026] [security2:error] [pid 16239:tid 16239] [client 82.23.32.140:19868] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 01:06:10.191751 2026] [security2:error] [pid 16239:tid 16239] [client 82.23.32.140:19868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swampoodlegrounds.com"] [uri "/sftp-config.json"] [unique_id "auAxQusLeq21VTOt8576iwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 05:58:08
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 01:58:00.417158 2026] [security2:error] [pid 1654:tid 1654] [client 82.23.32.140:57844] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 01:58:00.417158 2026] [security2:error] [pid 1654:tid 1654] [client 82.23.32.140:57844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seychelles-boat-registration.com"] [uri "/sftp-config.json"] [unique_id "atWxaEGeNWlDfDd11RaSeQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 03:53:56
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 23:53:50.291552 2026] [security2:error] [pid 19703:tid 19703] [client 82.23.32.140:9722] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 23:53:50.291552 2026] [security2:error] [pid 19703:tid 19703] [client 82.23.32.140:9722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tekrav.com"] [uri "/sftp-config.json"] [unique_id "atWUTki9Fjxtb-rRrJwumgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 08:52:52
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:949110) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 04:52:44.275065 2026] [security2:error] [pid 2219:tid 2219] [client 82.23.32.140:42654] ModSe ...
show more
(mod_security) mod_security (id:949110) triggered by 82.23.32.140 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 04:52:44.275065 2026] [security2:error] [pid 2219:tid 2219] [client 82.23.32.140:42654] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "789-bid.com"] [uri "/sftp-config.json"] [unique_id "atSI3Mjzae7aTlSaKvYnAwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
