🇺🇸
TPI-Abuse
2026-11-11 22:43:42
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:43:35.158913 2026] [security2:error] [pid 27985:tid 27985] [client 91.210.65.237:13116] M ...
show more
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:43:35.158913 2026] [security2:error] [pid 27985:tid 27985] [client 91.210.65.237:13116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.travelsupersonic.com"] [uri "/sftp-config.json"] [unique_id "avTvlym-2qRgdoNq4Zb4GQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 20:00:44
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:00:37.666964 2026] [security2:error] [pid 18271:tid 18271] [client 91.210.65.237:7028] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 15:00:37.666964 2026] [security2:error] [pid 18271:tid 18271] [client 91.210.65.237:7028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "waypoint-solutions.us"] [uri "/sftp-config.json"] [unique_id "avTJZaTHbmwZ4_03Cw0o3QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 11:02:07
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:02:01.929419 2026] [security2:error] [pid 10003:tid 10003] [client 91.210.65.237:59304] M ...
show more
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 06:02:01.929419 2026] [security2:error] [pid 10003:tid 10003] [client 91.210.65.237:59304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "albioncapitalfund.com"] [uri "/sftp-config.json"] [unique_id "avGoKXke7cigp7pmsWXhiAAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 00:10:40
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:10:35.808831 2026] [security2:error] [pid 22596:tid 22596] [client 91.210.65.237:16408] M ...
show more
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:10:35.808831 2026] [security2:error] [pid 22596:tid 22596] [client 91.210.65.237:16408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "azcrittergetter.com"] [uri "/sftp-config.json"] [unique_id "aup3-1GHm7zfOOMIAZLXKwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 12:40:40
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 07:40:32.773947 2026] [security2:error] [pid 18454:tid 18454] [client 91.210.65.237:33144] M ...
show more
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 07:40:32.773947 2026] [security2:error] [pid 18454:tid 18454] [client 91.210.65.237:33144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lambert-heating-and-air.com"] [uri "/sftp-config.json"] [unique_id "auiEwN6ji5MajQVjqXH7WAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 08:46:32
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 03:46:26.294897 2026] [security2:error] [pid 11996:tid 11996] [client 91.210.65.237:11008] M ...
show more
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 03:46:26.294897 2026] [security2:error] [pid 11996:tid 11996] [client 91.210.65.237:11008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.onlinesuretybonds.com"] [uri "/sftp-config.json"] [unique_id "auhN4iAr6VYkwZ6vLkaJagAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 05:13:27
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 00:13:22.495571 2026] [security2:error] [pid 2157:tid 2157] [client 91.210.65.237:42216] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 00:13:22.495571 2026] [security2:error] [pid 2157:tid 2157] [client 91.210.65.237:42216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.proprocessor.com"] [uri "/deerprocessingequipment.htm/sftp-config.json"] [unique_id "augb8tD6QgufQShNdCUr8gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 19:02:15
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:59:25.746816 2026] [security2:error] [pid 25218:tid 25218] [client 91.210.65.237:26604] M ...
show more
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 14:59:25.746816 2026] [security2:error] [pid 25218:tid 25218] [client 91.210.65.237:26604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pixelspective.com"] [uri "/sftp-config.json"] [unique_id "auOXjbTuTwXg0T_h9SwMXgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 15:48:40
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 11:48:35.269887 2026] [security2:error] [pid 6539:tid 6539] [client 91.210.65.237:15760] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 11:48:35.269887 2026] [security2:error] [pid 6539:tid 6539] [client 91.210.65.237:15760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tavo.info"] [uri "/sftp-config.json"] [unique_id "auDH0_oeA29l2bo0wF2w3AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 12:17:36
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 08:17:31.857046 2026] [security2:error] [pid 4853:tid 4853] [client 91.210.65.237:36462] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 08:17:31.857046 2026] [security2:error] [pid 4853:tid 4853] [client 91.210.65.237:36462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tiln.org"] [uri "/sftp-config.json"] [unique_id "atyh2-BpFXUGmxfHUqZV_QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-19 15:32:05
UTC ·
(3 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 13:41:37
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 09:41:29.635995 2026] [security2:error] [pid 821:tid 821] [client 91.210.65.237:63302] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 09:41:29.635995 2026] [security2:error] [pid 821:tid 821] [client 91.210.65.237:63302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "socialstudiesforkids.com"] [uri "/sftp-config.json"] [unique_id "atYeCTgVXGBX_Ra-ZAvP9QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 18:33:46
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 14:33:42.471584 2026] [security2:error] [pid 29844:tid 29844] [client 91.210.65.237:33446] M ...
show more
(mod_security) mod_security (id:210492) triggered by 91.210.65.237 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 14:33:42.471584 2026] [security2:error] [pid 29844:tid 29844] [client 91.210.65.237:33446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coconut-homes.com"] [uri "/sftp-config.json"] [unique_id "atURBqXutUiFPAFUgf4_NQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
