🇺🇸
TPI-Abuse
2026-11-14 09:42:00
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:41:55.231530 2026] [security2:error] [pid 29620:tid 29620] [client 82.26.240.117:52230] M ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:41:55.231530 2026] [security2:error] [pid 29620:tid 29620] [client 82.26.240.117:52230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.johncyphers.com"] [uri "/sftp-config.json"] [unique_id "avgs46TLNNdvjCkiRIcOvgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-11-13 06:01:59
UTC ·
(1 day ago)
(web_sensitive_file) srv101 Sensitive file probe (.env/.git/backup) 82.26.240.117 (GB/United Kingdom/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 06:03:10
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:03:01.287760 2026] [security2:error] [pid 4639:tid 4767] [client 82.26.240.117:43700] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 01:03:01.287760 2026] [security2:error] [pid 4639:tid 4767] [client 82.26.240.117:43700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wegelin.org"] [uri "/sftp-config.json"] [unique_id "avVWlRMfBpl6NsyoMZT-wgAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:28:44
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:28:39.797123 2026] [security2:error] [pid 19129:tid 19129] [client 82.26.240.117:15492] M ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:28:39.797123 2026] [security2:error] [pid 19129:tid 19129] [client 82.26.240.117:15492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atticlodgeoutdoorlearningcenter.com"] [uri "/sftp-config.json"] [unique_id "avTsF3LdyIjbdLRIhGVTrwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:59:46
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:59:42.082145 2026] [security2:error] [pid 22022:tid 22022] [client 82.26.240.117:19116] M ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:59:42.082145 2026] [security2:error] [pid 22022:tid 22022] [client 82.26.240.117:19116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendykim.com"] [uri "/sftp-config.json"] [unique_id "avRKnuCQuisMgVdtJ3nwXwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 06:57:38
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 01:57:34.299635 2026] [security2:error] [pid 11508:tid 11508] [client 82.26.240.117:40668] M ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 01:57:34.299635 2026] [security2:error] [pid 11508:tid 11508] [client 82.26.240.117:40668] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bobfaw.com"] [uri "/sftp-config.json"] [unique_id "auwo3u176kPeBtbULZAQEgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:34:03
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:33:57.553169 2026] [security2:error] [pid 9336:tid 9336] [client 82.26.240.117:38336] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:33:57.553169 2026] [security2:error] [pid 9336:tid 9336] [client 82.26.240.117:38336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.idmadventures.com"] [uri "/sftp-config.json"] [unique_id "auh1JV-5Bl8xKFYPG0qHTgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 04:46:33
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 00:45:15.565089 2026] [security2:error] [pid 838:tid 838] [client 82.26.240.117:51178] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 00:45:15.565089 2026] [security2:error] [pid 838:tid 838] [client 82.26.240.117:51178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bouldercorporate.com"] [uri "/sftp-config.json"] [unique_id "aubD283oTxf_5cBfPOYNlQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 14:44:21
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 10:43:58.304156 2026] [security2:error] [pid 14978:tid 14978] [client 82.26.240.117:43178] M ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 10:43:58.304156 2026] [security2:error] [pid 14978:tid 14978] [client 82.26.240.117:43178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eurobrake.com"] [uri "/sftp-config.json"] [unique_id "auX-rvfS4HsFQGSJAcSXdgAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 18:59:18
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:59:13.902902 2026] [security2:error] [pid 18793:tid 18793] [client 82.26.240.117:63890] M ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:59:13.902902 2026] [security2:error] [pid 18793:tid 18793] [client 82.26.240.117:63890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carboncreekwood.com"] [uri "/sftp-config.json"] [unique_id "auOXgfvBHljFHVhPLfyppgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 05:07:35
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 01:05:58.273813 2026] [security2:error] [pid 3203:tid 3203] [client 82.26.240.117:27638] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 01:05:58.273813 2026] [security2:error] [pid 3203:tid 3203] [client 82.26.240.117:27638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deserttrails.net"] [uri "/sftp-config.json"] [unique_id "auAxNnSZiH1qPDJcY5u8xgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:27:34
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:27:27.291864 2026] [security2:error] [pid 24771:tid 24771] [client 82.26.240.117:58894] M ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:27:27.291864 2026] [security2:error] [pid 24771:tid 24771] [client 82.26.240.117:58894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scc1.us"] [uri "/parked/sftp-config.json"] [unique_id "atv7b65KyQDFDchPCsvJHwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 23:29:50
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210580) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 19:29:45.405408 2026] [security2:error] [pid 24743:tid 24746] [client 82.26.240.117:21596] M ...
show more
(mod_security) mod_security (id:210580) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 19:29:45.405408 2026] [security2:error] [pid 24743:tid 24746] [client 82.26.240.117:21596] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||saltflowlogistics.com|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: https:/schellhammerbusinessschool.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "saltflowlogistics.com"] [uri "/.vscode/sftp.json"] [unique_id "atf5aUVdH4eqRjpCA6jJZwAAAQE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 10:31:12
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 06:31:05.794232 2026] [security2:error] [pid 28010:tid 28010] [client 82.26.240.117:52278] M ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 06:31:05.794232 2026] [security2:error] [pid 28010:tid 28010] [client 82.26.240.117:52278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alhill.com"] [uri "/sftp-config.json"] [unique_id "atSf6R_YBgf9HcOLshiseAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 09:13:07
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 05:12:34.356519 2026] [security2:error] [pid 9813:tid 9813] [client 82.26.240.117:24126] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 82.26.240.117 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 05:12:34.356519 2026] [security2:error] [pid 9813:tid 9813] [client 82.26.240.117:24126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "applemaccomputerconsulting.com"] [uri "/sftp-config.json"] [unique_id "atM8AnqysZJIjEhktXAO3gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
