🇺🇸
TPI-Abuse
2026-11-15 22:12:30
UTC ·
(5 minutes ago)
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 17:12:21.821015 2026] [security2:error] [pid 28546:tid 28546] [client 89.208.54.73:32178] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 17:12:21.821015 2026] [security2:error] [pid 28546:tid 28546] [client 89.208.54.73:32178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rdsparts.com"] [uri "/sftp-config.json"] [unique_id "avouRUlkmoyKSviAh-zJGQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 19:49:38
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 14:49:32.655939 2026] [security2:error] [pid 9282:tid 9282] [client 89.208.54.73:17490] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 14:49:32.655939 2026] [security2:error] [pid 9282:tid 9282] [client 89.208.54.73:17490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thermalsoftware.com"] [uri "/sftp-config.json"] [unique_id "avi7TC9UTSTdGlGPFfZ0jAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:51:57
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:51:47.370852 2026] [security2:error] [pid 7319:tid 7319] [client 89.208.54.73:39168] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:51:47.370852 2026] [security2:error] [pid 7319:tid 7319] [client 89.208.54.73:39168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rodandreelpiercam.com"] [uri "/sftp-config.json"] [unique_id "avbdszISlGNC5OUiYBTxYAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 11:26:48
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:26:41.631984 2026] [security2:error] [pid 24436:tid 24436] [client 89.208.54.73:7996] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 06:26:41.631984 2026] [security2:error] [pid 24436:tid 24436] [client 89.208.54.73:7996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wildemar.info"] [uri "/sftp-config.json"] [unique_id "avWicSeV_F9uj_LdYFN-lgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-11-06 16:46:44
UTC ·
(1 week ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 06:29:54
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:29:48.656866 2026] [security2:error] [pid 20105:tid 20240] [client 89.208.54.73:39730] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 01:29:48.656866 2026] [security2:error] [pid 20105:tid 20240] [client 89.208.54.73:39730] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sjstauffer.com"] [uri "/sftp-config.json"] [unique_id "au1z3J0XeRU4h_DvHrm6XgAAAY8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 17:25:45
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:25:39.205003 2026] [security2:error] [pid 3179:tid 3179] [client 89.208.54.73:21964] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:25:39.205003 2026] [security2:error] [pid 3179:tid 3179] [client 89.208.54.73:21964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mayflowersgifts.com"] [uri "/sftp-config.json"] [unique_id "aujHkzxqufGADs3a4tTMrgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 05:32:32
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 00:31:19.685166 2026] [security2:error] [pid 648:tid 648] [client 89.208.54.73:25432] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 00:31:19.685166 2026] [security2:error] [pid 648:tid 648] [client 89.208.54.73:25432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hakanbasboga.com"] [uri "/sftp-config.json"] [unique_id "auggJ97ZXnKuqk9aRW4WwwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 23:14:03
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 19:12:56.322336 2026] [security2:error] [pid 15540:tid 15540] [client 89.208.54.73:48930] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 19:12:56.322336 2026] [security2:error] [pid 15540:tid 15540] [client 89.208.54.73:48930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "moontouchmassage.com"] [uri "/sftp-config.json"] [unique_id "auEv-CzouUhkbL2BMoXFngAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-20 01:58:43
UTC ·
(3 weeks ago)
Secret file probe | method: GET | path: /.vscode/sftp.json | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 13:44:40
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:44:31.784792 2026] [security2:error] [pid 13843:tid 13843] [client 89.208.54.73:48254] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 89.208.54.73 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:44:31.784792 2026] [security2:error] [pid 13843:tid 13843] [client 89.208.54.73:48254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "allmyartprojects.com"] [uri "/sftp-config.json"] [unique_id "atTNP0PqH_sUzbIhN2dppgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
