🇺🇸
TPI-Abuse
2026-11-13 09:25:52
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 82.23.32.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:25:46.939150 2026] [security2:error] [pid 18327:tid 18327] [client 82.23.32.87:10256] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.32.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:25:46.939150 2026] [security2:error] [pid 18327:tid 18327] [client 82.23.32.87:10256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.calvarycavaliers.org"] [uri "/sftp-config.json"] [unique_id "avbXmmEiJU-2-YguKSQ2vgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:23:05
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 82.23.32.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:23:01.817918 2026] [security2:error] [pid 31426:tid 31563] [client 82.23.32.87:23170] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.32.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:23:01.817918 2026] [security2:error] [pid 31426:tid 31563] [client 82.23.32.87:23170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coloradosellers.com"] [uri "/sftp-config.json"] [unique_id "avTqxdRPPKCswz1bNLiH-gAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:27:45
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.23.32.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:27:41.043431 2026] [security2:error] [pid 29835:tid 29835] [client 82.23.32.87:8220] ModSec ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.32.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:27:41.043431 2026] [security2:error] [pid 29835:tid 29835] [client 82.23.32.87:8220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/sftp-config.json"] [unique_id "au1JLS6HdhK9g20H7XoZXAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 16:02:39
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.23.32.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 11:02:34.965278 2026] [security2:error] [pid 31720:tid 31720] [client 82.23.32.87:39306] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.32.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 11:02:34.965278 2026] [security2:error] [pid 31720:tid 31720] [client 82.23.32.87:39306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "solve4this.com"] [uri "/sftp-config.json"] [unique_id "auyomgRRY7qJPJ7_qJkilQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-10-31 16:56:47
UTC ·
(1 week ago)
(web_sensitive_file) srv104 Sensitive file probe (.env/.git/backup) 82.23.32.87 (BR/Brazil/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 08:35:40
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.23.32.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:35:34.711252 2026] [security2:error] [pid 27202:tid 27202] [client 82.23.32.87:8232] ModSec ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.32.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:35:34.711252 2026] [security2:error] [pid 27202:tid 27202] [client 82.23.32.87:8232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bowtierealtygroupmn.com"] [uri "/sftp-config.json"] [unique_id "auWoVuTDU5b07QC9i3m9HwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 03:24:01
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.32.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 23:23:55.497067 2026] [security2:error] [pid 8912:tid 8912] [client 82.23.32.87:50334] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.32.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 23:23:55.497067 2026] [security2:error] [pid 8912:tid 8912] [client 82.23.32.87:50334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boatmoldremover.com"] [uri "/sftp-config.json"] [unique_id "atgwS-jfWjcXmjaDD3XMRgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-20 11:17:17
UTC ·
(3 weeks ago)
Secret file probe | method: GET | path: /sftp-config.json | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 16:36:45
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.32.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 12:36:39.126360 2026] [security2:error] [pid 2573:tid 2590] [client 82.23.32.87:40922] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.32.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 12:36:39.126360 2026] [security2:error] [pid 2573:tid 2590] [client 82.23.32.87:40922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aafminstitute.com"] [uri "/sftp-config.json"] [unique_id "atT1l12JcHPpD5sFXShEZAAAAM4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 18:41:46
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.32.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 14:41:40.562164 2026] [security2:error] [pid 9031:tid 9031] [client 82.23.32.87:65086] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.32.87 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 14:41:40.562164 2026] [security2:error] [pid 9031:tid 9031] [client 82.23.32.87:65086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "israelartifact.com"] [uri "/sftp-config.json"] [unique_id "atPBZCVEc23pSDIs-zKUrAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
