🇺🇸
TPI-Abuse
2026-11-11 17:03:28
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:03:20.335769 2026] [security2:error] [pid 10072:tid 10072] ...
show more
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 12:03:20.335769 2026] [security2:error] [pid 10072:tid 10072] [client 89.39.201.95:2210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whaletailpuckerbutt.com"] [uri "/sftp-config.json"] [unique_id "avSf2G4SkoMPpuCvuicSOQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:49:12
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:49:04.671661 2026] [security2:error] [pid 8086:tid 8086] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:49:04.671661 2026] [security2:error] [pid 8086:tid 8086] [client 89.39.201.95:49946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nashes.net"] [uri "/sftp-config.json"] [unique_id "avRIIIvmvK0kowAwQCBYSQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 04:01:49
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:01:43.214715 2026] [security2:error] [pid 7612:tid 7612] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:01:43.214715 2026] [security2:error] [pid 7612:tid 7612] [client 89.39.201.95:25122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scc1.us"] [uri "/sftp-config.json"] [unique_id "au1RJ7zC4boWvnBQlQ9RkgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:11:28
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:11:22.318592 2026] [security2:error] [pid 25296:tid 25296] ...
show more
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:11:22.318592 2026] [security2:error] [pid 25296:tid 25296] [client 89.39.201.95:23880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.caralis.com"] [uri "/sftp-config.json"] [unique_id "au1FWvcjEBS2YWT3xSrdiAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-01 04:46:56
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 00:45:21.309547 2026] [security2:error] [pid 2395:tid 2395] [c ...
show more
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 01 00:45:21.309547 2026] [security2:error] [pid 2395:tid 2395] [client 89.39.201.95:6648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boatpeople.org"] [uri "/sftp-config.json"] [unique_id "aubD4T9g8dAk4vZV9zIEtAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 00:37:42
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:35:46.989830 2026] [security2:error] [pid 27999:tid 28010] ...
show more
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:35:46.989830 2026] [security2:error] [pid 27999:tid 28010] [client 89.39.201.95:55940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proracersecrets.com"] [uri "/sftp-config.json"] [unique_id "auFDYiZm2dWi4JhLFbl8jQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 18:12:36
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 14:10:30.970659 2026] [security2:error] [pid 13612:tid 13612] ...
show more
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 14:10:30.970659 2026] [security2:error] [pid 13612:tid 13612] [client 89.39.201.95:18442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anbruswebdesign.com"] [uri "/sftp-config.json"] [unique_id "at-Xli0AT8LjVnyd7AdO-AAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
LRob
2026-10-20 11:45:47
UTC ·
(3 weeks ago)
Secret file probe | method: GET | path: /sftp-config.json | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 08:29:20
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 04:29:16.729648 2026] [security2:error] [pid 22566:tid 22566] ...
show more
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 04:29:16.729648 2026] [security2:error] [pid 22566:tid 22566] [client 89.39.201.95:41968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wardellbrown.com"] [uri "/sftp-config.json"] [unique_id "atcmXHD9nMyFf7fukKxkPgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 07:06:26
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 03:06:18.653039 2026] [security2:error] [pid 10610:tid 10610] ...
show more
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 03:06:18.653039 2026] [security2:error] [pid 10610:tid 10610] [client 89.39.201.95:39180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "underraided.com"] [uri "/sftp-config.json"] [unique_id "atcS6gT82Ytd4VOS_x8vzAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 10:52:11
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 06:52:08.617235 2026] [security2:error] [pid 31297:tid 31322] ...
show more
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 06:52:08.617235 2026] [security2:error] [pid 31297:tid 31322] [client 89.39.201.95:34366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dermatologybriargate.com"] [uri "/sftp-config.json"] [unique_id "atSk2KaqkBJEwBcD69AugAAAAIw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 22:08:08
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:07:16.757177 2026] [security2:error] [pid 19937:tid 19937] ...
show more
(mod_security) mod_security (id:210492) triggered by 89.39.201.95 (89-39-201-95.ip337.fastwebnet.it): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:07:16.757177 2026] [security2:error] [pid 19937:tid 19937] [client 89.39.201.95:50308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drgas.com"] [uri "/sftp-config.json"] [unique_id "atKgFHJkSEa5YhG35MKE_AAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-09-05 20:02:54
UTC ·
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
