🇮🇹
CoreTech srl
2026-11-14 20:08:57
UTC ·
(5 minutes ago)
cloudlinux2 fail2ban: 2026-11-14 21:04:00,336 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 45.175.162.40 - 2026-11-14 21:03:59cloudlinux2 fail2ban: 2026-11-14 21:04:25,233 fail2ban.filter [1443]: INFO [plesk-wordpress] F ...
show more
cloudlinux2 fail2ban: 2026-11-14 21:04:00,336 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 45.175.162.40 - 2026-11-14 21:03:59cloudlinux2 fail2ban: 2026-11-14 21:04:25,233 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 213.109.233.230 - 2026-11-14 21:04:24cloudlinux2 fail2ban: 2026-11-14 21:04:59,700 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 82.26.235.44 - 2026-11-14 21:04:59cloudlinux2 fail2ban: 2026-11-14 21:05:19,830 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 42.190.140.226 - 2026-11-14 21:05:19cloudlinux2 fail2ban: 2026-11-14 21:05:52,096 fail2ban.actions [1443]: NOTICE [plesk-modsecurity] Unban 3.71.74.83cloudlinux2 fail2ban: 2026-11-14 21:06:01,741 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 104.222.165.20 - 2026-11-14 21:06:01cloudlinux2 fail2ban: 2026-11-14 21:07:08,329 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 187.190.242.184 - 2026-11-14 21:07:06cloudlinux2 fail2ban: 2
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 09:48:46
UTC ·
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 82.26.235.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:48:40.103746 2026] [security2:error] [pid 25800:tid 25800] [client 82.26.235.44:53296] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.235.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:48:40.103746 2026] [security2:error] [pid 25800:tid 25800] [client 82.26.235.44:53296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ileronde.com"] [uri "/sftp-config.json"] [unique_id "avgueLUmepn05xWovL6CmQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:56:40
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 82.26.235.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:56:35.399620 2026] [security2:error] [pid 10632:tid 10632] [client 82.26.235.44:62234] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.235.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:56:35.399620 2026] [security2:error] [pid 10632:tid 10632] [client 82.26.235.44:62234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.teguer.com"] [uri "/sftp-config.json"] [unique_id "avbe083N2JPkEsha3I5XHAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-11-13 09:11:26
UTC ·
(1 day ago)
Try to access /.vscode/sftp.json
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:35:38
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 82.26.235.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:35:33.114761 2026] [security2:error] [pid 23475:tid 23475] [client 82.26.235.44:37096] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.235.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:35:33.114761 2026] [security2:error] [pid 23475:tid 23475] [client 82.26.235.44:37096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eastsidenotary.com"] [uri "/sftp-config.json"] [unique_id "avRE9fl0xlm3fuAp5XI1JwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 00:37:09
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.26.235.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:35:44.756932 2026] [security2:error] [pid 9679:tid 9697] [client 82.26.235.44:29832] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.235.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:35:44.756932 2026] [security2:error] [pid 9679:tid 9697] [client 82.26.235.44:29832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ethicmark.org"] [uri "/sftp-config.json"] [unique_id "auFDYPX3VIhqry-LAZPaWAAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 05:07:10
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.26.235.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 01:05:58.197463 2026] [security2:error] [pid 3203:tid 3203] [client 82.26.235.44:3908] ModSec ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.235.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 01:05:58.197463 2026] [security2:error] [pid 3203:tid 3203] [client 82.26.235.44:3908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "centuryabsinthe.com"] [uri "/sftp-config.json"] [unique_id "auAxNnSZiH1qPDJcY5u8xQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:09:23
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.26.235.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:09:19.313820 2026] [security2:error] [pid 31907:tid 31907] [client 82.26.235.44:26984] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.235.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:09:19.313820 2026] [security2:error] [pid 31907:tid 31907] [client 82.26.235.44:26984] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mitchellart.com"] [uri "/sftp-config.json"] [unique_id "atv3Lw-kPZtCRtQU7jD9dQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 18:28:04
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.26.235.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 14:27:57.340081 2026] [security2:error] [pid 9597:tid 9597] [client 82.26.235.44:32854] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.235.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 14:27:57.340081 2026] [security2:error] [pid 9597:tid 9597] [client 82.26.235.44:32854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "victorvictor.biz"] [uri "/sftp-config.json"] [unique_id "atunLU6qTk4Dd9RB0LsabwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-10-19 20:23:16
UTC ·
(3 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇩🇪
Carsten
2026-10-19 13:27:29
UTC ·
(3 weeks ago)
GET [sftp-config.json]
Port Scan