🇺🇸
TPI-Abuse
2026-11-08 05:02:03
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:01:55.935342 2026] [security2:error] [pid 331:tid 340] [client 87.82.214.198:17602] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:01:55.935342 2026] [security2:error] [pid 331:tid 340] [client 87.82.214.198:17602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "credit-protector.com"] [uri "/sftp-config.json"] [unique_id "avACQ7Pp3DIYI5HMQlwaaAAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 06:31:05
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:31:00.018612 2026] [security2:error] [pid 2747:tid 2747] [client 87.82.214.198:58556] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:31:00.018612 2026] [security2:error] [pid 2747:tid 2747] [client 87.82.214.198:58556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sjtent.com"] [uri "/sftp-config.json"] [unique_id "au10JDBkLAQmGyNkPqAh8wAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 10:53:05
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:52:59.351247 2026] [security2:error] [pid 694:tid 694] [client 87.82.214.198:29424] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:52:59.351247 2026] [security2:error] [pid 694:tid 694] [client 87.82.214.198:29424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "encoreporchfest.info"] [uri "/sftp-config.json"] [unique_id "auxgC_ox1yW9jmZseo07qQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 02:28:19
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:28:14.533773 2026] [security2:error] [pid 7676:tid 7676] [client 87.82.214.198:9980] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 21:28:14.533773 2026] [security2:error] [pid 7676:tid 7676] [client 87.82.214.198:9980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "albertarmenlive.com"] [uri "/sftp-config.json"] [unique_id "aulGvs2Vd-SzkzfIZD1KpgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:48:19
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:48:13.127097 2026] [security2:error] [pid 5172:tid 5172] [client 87.82.214.198:23074] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:48:13.127097 2026] [security2:error] [pid 5172:tid 5172] [client 87.82.214.198:23074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.spectorworld.com"] [uri "/sftp-config.json"] [unique_id "auh4fTX2gbA3d_h4ZIn40wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:27:05
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:27:02.583626 2026] [security2:error] [pid 6361:tid 6361] [client 87.82.214.198:7168] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:27:02.583626 2026] [security2:error] [pid 6361:tid 6361] [client 87.82.214.198:7168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.animz.com"] [uri "/sftp-config.json"] [unique_id "auhzhrk2IloRbRXStf0rXwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-10-23 13:20:51
UTC ·
(2 weeks ago)
[FriOct2315:20:47.9767322026][security2:error][pid2645616:tid2645723][client87.82.214.198:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-B ...
show more
[FriOct2315:20:47.9767322026][security2:error][pid2645616:tid2645723][client87.82.214.198:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"safeoncloud.ch\"][uri\"/sftp-config.json\"][unique_id\"attfL-ATUR7A7SoMfAKEfQAAANM\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 22:17:37
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 18:17:30.795319 2026] [security2:error] [pid 32074:tid 32074] [client 87.82.214.198:37576] M ...
show more
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 18:17:30.795319 2026] [security2:error] [pid 32074:tid 32074] [client 87.82.214.198:37576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salernospizza.com"] [uri "/sftp-config.json"] [unique_id "atfoem8-GTDK3ccryYBtywAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 09:39:33
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 05:39:26.047392 2026] [security2:error] [pid 530:tid 530] [client 87.82.214.198:44552] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 05:39:26.047392 2026] [security2:error] [pid 530:tid 530] [client 87.82.214.198:44552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "transcapitalsolutions.com"] [uri "/sftp-config.json"] [unique_id "atc2znhaiUMCe0sJ9edmBwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-10-20 03:43:11
UTC ·
(2 weeks ago)
Try to access /.vscode/sftp.json
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 08:47:35
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 04:47:29.150269 2026] [security2:error] [pid 17011:tid 17011] [client 87.82.214.198:43702] M ...
show more
(mod_security) mod_security (id:210492) triggered by 87.82.214.198 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 04:47:29.150269 2026] [security2:error] [pid 17011:tid 17011] [client 87.82.214.198:43702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sigridsnaturalfoods.com"] [uri "/sftp-config.json"] [unique_id "atXZIRgXa84bSkR9DqkuUwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Didier Lagaert
2026-10-18 01:45:05
UTC ·
(3 weeks ago)
lie-17 : Block hidden directories=>/.vscode/sftp.json(/)
Hacking
