🇺🇸
TPI-Abuse
2026-09-11 13:25:45
(7 minutes ago)
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 09:25:41.262867 2026] [security2:error] [pid 9376:tid 9376] [client 103.253.27.214:56515] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jerusalem-korczak-home.com"] [uri "/sftp-config.json"] [unique_id "aqQBVe1jEhxGAmOl7u-HdQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 12:38:15
(55 minutes ago)
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 08:38:11.664291 2026] [security2:error] [pid 25574:tid 25574] [client 103.253.27.214:53564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrbaystreet.com"] [uri "/sftp-config.json"] [unique_id "aqP2M3paXqyaQa3vY_mnuQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 12:13:24
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 08:13:18.437941 2026] [security2:error] [pid 18232:tid 18232] [client 103.253.27.214:50626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schonmusic.com"] [uri "/sftp-config.json"] [unique_id "aqPwXkk3LmflTaSASktq6QAAAD8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 09:27:11
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 05:27:06.889484 2026] [security2:error] [pid 1125:tid 1125] [client 103.253.27.214:62599] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ficklepassionproductions.com"] [uri "/coming-soon//sftp-config.json"] [unique_id "aqPJaj7o33qrWReZYrIS4gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 08:59:49
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 04:59:42.690763 2026] [security2:error] [pid 6915:tid 6915] [client 103.253.27.214:65481] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alexgitlin.com"] [uri "/sftp-config.json"] [unique_id "aqPC_rQp1f0fJxmIBSFgEQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Tripwire
2026-09-11 08:28:43
(5 hours ago)
Scanning for exploits - /.vscode/sftp.json
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 07:22:04
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 03:21:56.710621 2026] [security2:error] [pid 7921:tid 7921] [client 103.253.27.214:62840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "slimlaw.com"] [uri "/sftp-config.json"] [unique_id "aqOsFImsHHdgNUsbcDDz1QAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 06:49:22
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 02:49:15.411229 2026] [security2:error] [pid 1960968:tid 1960968] [client 103.253.27.214:65476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "williamfitzsimmons.com"] [uri "/sftp-config.json"] [unique_id "aqOka0AkeG88cfkJQwsWjAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-11 06:34:53
(6 hours ago)
"GET /sftp-config.json HTTP/1.1"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 05:28:59
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 01:28:52.269887 2026] [security2:error] [pid 15278:tid 15278] [client 103.253.27.214:59661] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "businessvaluationapp.com"] [uri "/sftp-config.json"] [unique_id "aqORlBcp6GLyMcuTVyWDLwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 05:02:38
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 01:02:30.221596 2026] [security2:error] [pid 17671:tid 17678] [client 103.253.27.214:61429] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "potterpuppetpals.com"] [uri "/sftp-config.json"] [unique_id "aqOLZk2_ikwr5c1e5KQeQwAAAQU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 04:37:20
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 00:37:17.447276 2026] [security2:error] [pid 13370:tid 13370] [client 103.253.27.214:49432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cruisingforsex.com"] [uri "/sftp-config.json"] [unique_id "aqOFfQrNXI7MnX_TJDsuUwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
bokumin.org
2026-09-11 03:41:14
(9 hours ago)
[id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/sftp-config.json"] [id ...
show more
[id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/sftp-config.json"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"]
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 03:40:53
(9 hours ago)
(mod_security) mod_security (id:949110) triggered by 103.253.27.214 (forms.multerad.net): 1 in the l ...
show more
(mod_security) mod_security (id:949110) triggered by 103.253.27.214 (forms.multerad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 23:40:48.937529 2026] [security2:error] [pid 16682:tid 16682] [client 103.253.27.214:52112] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "experimentalscene.com"] [uri "/sftp-config.json"] [unique_id "aqN4QJbH9bYE2os5OQrUNgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-10 23:01:11
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 103.253.27.214 (forms.multerad.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 19:01:04.943193 2026] [security2:error] [pid 12379:tid 12379] [client 103.253.27.214:56383] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marveldirectory.com"] [uri "/sftp-config.json"] [unique_id "aqM2sHfkFNePvv9DMWeJjwAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack