🇺🇸
TPI-Abuse
2026-11-11 22:13:41
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:13:35.411715 2026] [security2:error] [pid 7522:tid 7522] [client 82.23.35.144:44520] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:13:35.411715 2026] [security2:error] [pid 7522:tid 7522] [client 82.23.35.144:44520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.domainexecs.com"] [uri "/sftp-config.json"] [unique_id "avToj2KxbEXJ_cvp89iTIQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-11-07 11:14:03
UTC ·
(4 days ago)
Secret file probe | method: GET | path: /.vscode/sftp.json | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 | src_port: 46698
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 22:39:40
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 17:39:33.125206 2026] [security2:error] [pid 18366:tid 18366] [client 82.23.35.144:21484] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 17:39:33.125206 2026] [security2:error] [pid 18366:tid 18366] [client 82.23.35.144:21484] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "castagnino.com"] [uri "/sftp-config.json"] [unique_id "aupipeSIBHArZ29Cvd_pRgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:31:56
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:31:48.936207 2026] [security2:error] [pid 26502:tid 26502] [client 82.23.35.144:34530] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:31:48.936207 2026] [security2:error] [pid 26502:tid 26502] [client 82.23.35.144:34530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goomapush.com"] [uri "/sftp-config.json"] [unique_id "auh0pAurtoA4qTVtSJSKHQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 03:36:21
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 23:36:17.852358 2026] [security2:error] [pid 7512:tid 7512] [client 82.23.35.144:8334] ModSec ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 23:36:17.852358 2026] [security2:error] [pid 7512:tid 7512] [client 82.23.35.144:8334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frenchtowntogether.org"] [uri "/sftp-config.json"] [unique_id "at15MVV9r83wmYe2xazjIgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 19:39:29
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 15:39:22.609219 2026] [security2:error] [pid 19878:tid 19878] [client 82.23.35.144:34212] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 15:39:22.609219 2026] [security2:error] [pid 19878:tid 19878] [client 82.23.35.144:34212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kelleysbridge.com"] [uri "/sftp-config.json"] [unique_id "atfDajw9wGUib_zI3wrU9gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 06:37:25
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 02:37:18.162887 2026] [security2:error] [pid 16718:tid 16718] [client 82.23.35.144:55380] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 02:37:18.162887 2026] [security2:error] [pid 16718:tid 16718] [client 82.23.35.144:55380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sdwsk8.com"] [uri "/sftp-config.json"] [unique_id "atW6niGkPL48AQJ08UzokwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 03:17:06
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 23:17:02.620001 2026] [security2:error] [pid 21947:tid 21947] [client 82.23.35.144:59378] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 23:17:02.620001 2026] [security2:error] [pid 21947:tid 21947] [client 82.23.35.144:59378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teenybikinigirls.com"] [uri "/sftp-config.json"] [unique_id "atWLrsEKZRCcTTRQhsUSkQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 18:23:20
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 14:23:16.850325 2026] [security2:error] [pid 21211:tid 21211] [client 82.23.35.144:36514] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 14:23:16.850325 2026] [security2:error] [pid 21211:tid 21211] [client 82.23.35.144:36514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brownweddinginvitations.net"] [uri "/sftp-config.json"] [unique_id "atUOlMsC6ktkaBroQQ7_bAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 22:09:16
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:07:23.679058 2026] [security2:error] [pid 18728:tid 18728] [client 82.23.35.144:15478] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.35.144 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:07:23.679058 2026] [security2:error] [pid 18728:tid 18728] [client 82.23.35.144:15478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wisk.org"] [uri "/sftp-config.json"] [unique_id "atKgG98qqjV6sLFUHEUSRQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
sel
2026-10-04 00:36:23
UTC ·
(1 month ago)
Web scanner/attack: 5 requests.
2026/10/03 23:57:43 [crit] 29224#29224: *16346 open() "/var/www/sq3o.com//index.html" failed (24: Too many open files), client: 82.23.35.144, server: sq3o.com, request: "GET / HTTP/2.0", host: "www.sq
2026/10/03 23:57: ...
show more
Web scanner/attack: 5 requests.
2026/10/03 23:57:43 [crit] 29224#29224: *16346 open() "/var/www/sq3o.com//index.html" failed (24: Too many open files), client: 82.23.35.144, server: sq3o.com, request: "GET / HTTP/2.0", host: "www.sq
2026/10/03 23:57:43 [crit] 29224#29224: *16346 open() "/var/www/sq3o.com//index.html" failed (24: Too many open files), client: 82.23.35.144, server: sq3o.com, request: "GET / HTTP/2.0", host: "www.sq
2026/10/03 23:57:43 [crit] 29224#29224: *16346 open() "/var/www/sq3o.com//index.html" failed (24: Too many open files), client: 82.23.35.144, server: sq3o.com, request: "GET / HTTP/2.0", host: "www.sq
2026/10/03 23:57:43 [crit] 29224#29224: *16346 open() "/var/www/sq3o.com//index.html" failed (24: Too many open files), client: 82.23.35.144, server: sq3o.com, request: "GET / HTTP/2.0", host: "www.sq
2026/10/03 23:57:43 [crit] 29224#29224: *16346 open() "/var/www/sq3o.com//index.html" failed (24: Too many open files), client: 82.23.35.144, server: sq3o.com, request: "GET / HTTP/2.0", h
show less
Web App Attack
Bad Web Bot
