🇺🇸
TPI-Abuse
2026-11-15 22:20:30
UTC ·
(10 minutes ago)
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 17:20:21.193497 2026] [security2:error] [pid 18672:tid 18672] [client 92.114.87.162:43522] M ...
show more
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 17:20:21.193497 2026] [security2:error] [pid 18672:tid 18672] [client 92.114.87.162:43522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.1888vwtranny.com"] [uri "/sftp-config.json"] [unique_id "avowJfww6k9Inu0r5GxQZgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 09:50:16
UTC ·
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:50:09.919942 2026] [security2:error] [pid 31738:tid 31738] [client 92.114.87.162:58964] M ...
show more
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 04:50:09.919942 2026] [security2:error] [pid 31738:tid 31738] [client 92.114.87.162:58964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.robcohn.com"] [uri "/sftp-config.json"] [unique_id "avmAUcZk8_ZreNqnw0nqHAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 11:54:45
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:54:36.066806 2026] [security2:error] [pid 14448:tid 14448] [client 92.114.87.162:12184] M ...
show more
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:54:36.066806 2026] [security2:error] [pid 14448:tid 14448] [client 92.114.87.162:12184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cmgpartners.com"] [uri "/sftp-config.json"] [unique_id "avhL_F9imqdT4htYe48nUgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 12:35:04
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 07:34:56.387405 2026] [security2:error] [pid 15588:tid 15588] [client 92.114.87.162:45338] M ...
show more
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 07:34:56.387405 2026] [security2:error] [pid 15588:tid 15588] [client 92.114.87.162:45338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nextlevelcharge.com"] [uri "/sftp-config.json"] [unique_id "avWycDlC-BWnmttXy7nwaQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:27:13
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:27:05.851670 2026] [security2:error] [pid 21474:tid 21474] [client 92.114.87.162:25982] M ...
show more
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:27:05.851670 2026] [security2:error] [pid 21474:tid 21474] [client 92.114.87.162:25982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.californiabrokers.net"] [uri "/sftp-config.json"] [unique_id "avTruX5I_dZ04pNbTvm3mwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 00:09:50
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:09:43.842033 2026] [security2:error] [pid 26377:tid 26377] [client 92.114.87.162:54446] M ...
show more
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 19:09:43.842033 2026] [security2:error] [pid 26377:tid 26377] [client 92.114.87.162:54446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "couturebikini.com"] [uri "/sftp-config.json"] [unique_id "au-9x-l3_P1Tj8kufmp67wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-11-06 11:36:41
UTC ·
(1 week ago)
Secret file probe | method: GET | path: /.vscode/sftp.json | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 10:47:35
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:47:30.368698 2026] [security2:error] [pid 2763:tid 2763] [client 92.114.87.162:45850] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:47:30.368698 2026] [security2:error] [pid 2763:tid 2763] [client 92.114.87.162:45850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "capriexpress.com"] [uri "/sftp-config.json"] [unique_id "auxewv5MigAkB4Y1TxHb3gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 09:36:44
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 04:35:48.192481 2026] [security2:error] [pid 23888:tid 23888] [client 92.114.87.162:54794] M ...
show more
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 04:35:48.192481 2026] [security2:error] [pid 23888:tid 23888] [client 92.114.87.162:54794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kwijlen.com"] [uri "/sftp-config.json"] [unique_id "auxN9DkYS2BveZ8LROaMaAAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-11-01 04:57:02
UTC ·
(2 weeks ago)
Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [wa02]
Hacking
SQL Injection
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 09:49:50
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:49:46.290747 2026] [security2:error] [pid 18707:tid 18707] [client 92.114.87.162:0] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:49:46.290747 2026] [security2:error] [pid 18707:tid 18707] [client 92.114.87.162:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spotlightjeanie.com"] [uri "/sftp-config.json"] [unique_id "auW5uvMu7jBf1_ZklopzvAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 14:28:32
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 10:27:21.784962 2026] [security2:error] [pid 760:tid 760] [client 92.114.87.162:60320] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 10:27:21.784962 2026] [security2:error] [pid 760:tid 760] [client 92.114.87.162:60320] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "belize-boat-registration.com"] [uri "/sftp-config.json"] [unique_id "auSpSXRcTULvJWCKT-xWPQAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-10-25 13:34:22
UTC ·
(3 weeks ago)
[redacted] 92.114.87.162 - - [25/Oct/2026:14:34:21 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 1618 0/62422 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 80 [redacted] 92.114.87.162 - - ...
show more
[redacted] 92.114.87.162 - - [25/Oct/2026:14:34:21 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 1618 0/62422 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 80 [redacted] 92.114.87.162 - - [25/Oct/2026:14:34:21 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 1527 0/108516 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 80
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 10:40:08
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 06:40:02.692818 2026] [security2:error] [pid 24273:tid 24273] [client 92.114.87.162:5396] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 92.114.87.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 06:40:02.692818 2026] [security2:error] [pid 24273:tid 24273] [client 92.114.87.162:5396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shelbysmoak.com"] [uri "/sftp-config.json"] [unique_id "atXzgpQ6n8iZ6y7FneQS3gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-09-05 20:04:44
UTC ·
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
