🇺🇸
TPI-Abuse
2026-11-11 23:37:29
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 18:37:24.613268 2026] [security2:error] [pid 26193:tid 26193] [client 82.23.40.180:4930] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 18:37:24.613268 2026] [security2:error] [pid 26193:tid 26193] [client 82.23.40.180:4930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wickedworks.net"] [uri "/sftp-config.json"] [unique_id "avT8NG_8NAJpuL2ZJH4t9AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 03:39:24
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 22:39:18.570498 2026] [security2:error] [pid 28145:tid 28145] [client 82.23.40.180:48374] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 22:39:18.570498 2026] [security2:error] [pid 28145:tid 28145] [client 82.23.40.180:48374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vrevgaming.net"] [uri "/sftp-config.json"] [unique_id "avPjZoAtl_znZp7f7Lk-xgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 15:34:05
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:33:58.874631 2026] [security2:error] [pid 13826:tid 13826] [client 82.23.40.180:9658] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 10:33:58.874631 2026] [security2:error] [pid 13826:tid 13826] [client 82.23.40.180:9658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "banis-associates.com"] [uri "/sftp-config.json"] [unique_id "aun-5iG-YaTqfXFvnw8eHAAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:15:46
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:15:38.925431 2026] [security2:error] [pid 26593:tid 26593] [client 82.23.40.180:27666] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:15:38.925431 2026] [security2:error] [pid 26593:tid 26593] [client 82.23.40.180:27666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pakistanvision.com"] [uri "/sftp-config.json"] [unique_id "atv4qvETDd_jXNRZG5bBMQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 23:59:36
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 19:59:27.860553 2026] [security2:error] [pid 1729:tid 1736] [client 82.23.40.180:9954] ModSec ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 19:59:27.860553 2026] [security2:error] [pid 1729:tid 1736] [client 82.23.40.180:9954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coloradosellers.com"] [uri "/sftp-config.json"] [unique_id "atv039QGVEBQshPLQEjSTgAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 14:28:12
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 10:28:06.141635 2026] [security2:error] [pid 572:tid 572] [client 82.23.40.180:13594] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 10:28:06.141635 2026] [security2:error] [pid 572:tid 572] [client 82.23.40.180:13594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marat.info"] [uri "/sftp-config.json"] [unique_id "atjL9rOjuCLnNb9zKQiq8AAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 22:43:51
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 18:43:43.826071 2026] [security2:error] [pid 32415:tid 32415] [client 82.23.40.180:18800] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 18:43:43.826071 2026] [security2:error] [pid 32415:tid 32415] [client 82.23.40.180:18800] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "syconline.com"] [uri "/sftp-config.json"] [unique_id "atVLnzvC-0XSMVSydy20VwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 19:30:32
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 15:30:29.112264 2026] [security2:error] [pid 16712:tid 16712] [client 82.23.40.180:46080] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 15:30:29.112264 2026] [security2:error] [pid 16712:tid 16712] [client 82.23.40.180:46080] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casalaaldehuela.com"] [uri "/sftp-config.json"] [unique_id "atUeVTN-0gryOqYEM2Ed5gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 16:22:45
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 12:22:41.037409 2026] [security2:error] [pid 30428:tid 30428] [client 82.23.40.180:18176] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 12:22:41.037409 2026] [security2:error] [pid 30428:tid 30428] [client 82.23.40.180:18176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cidv.com"] [uri "/sftp-config.json"] [unique_id "atTyUbO3_7KRnRGFm9PTQAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 13:35:29
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:35:22.107337 2026] [security2:error] [pid 1589:tid 1589] [client 82.23.40.180:33716] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:35:22.107337 2026] [security2:error] [pid 1589:tid 1589] [client 82.23.40.180:33716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "allisonokon.com"] [uri "/sftp-config.json"] [unique_id "atTLGvxxQXo5andz3fPm2QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 18:17:40
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 14:17:35.873019 2026] [security2:error] [pid 4230:tid 4230] [client 82.23.40.180:59852] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 14:17:35.873019 2026] [security2:error] [pid 4230:tid 4230] [client 82.23.40.180:59852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ratbird.com"] [uri "/sftp-config.json"] [unique_id "atO7v7gKB5Z8pLwVwB4NRgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 09:13:21
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210580) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 05:12:41.371652 2026] [security2:error] [pid 12897:tid 12897] [client 82.23.40.180:64972] Mod ...
show more
(mod_security) mod_security (id:210580) triggered by 82.23.40.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 05:12:41.371652 2026] [security2:error] [pid 12897:tid 12897] [client 82.23.40.180:64972] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||vittariadesign.com|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: https:/andreadurso.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "vittariadesign.com"] [uri "/.vscode/sftp.json"] [unique_id "atM8CXXyHKpt7QtAs8mBfgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
