🇺🇸
TPI-Abuse
2026-11-12 01:40:05
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:39:55.933907 2026] [security2:error] [pid 10595:tid 10595] [client 13.143.126.176:46444] ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:39:55.933907 2026] [security2:error] [pid 10595:tid 10595] [client 13.143.126.176:46444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vseebx.net"] [uri "/sftp-config.json"] [unique_id "avUY611wwIHllNBxoD8QgwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:52:22
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:52:14.833384 2026] [security2:error] [pid 2710309:tid 2710417] [client 13.143.126.176:57 ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:52:14.833384 2026] [security2:error] [pid 2710309:tid 2710417] [client 13.143.126.176:57552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oswgr.com"] [uri "/sftp-config.json"] [unique_id "avRI3urn5IeLig5QES654wAAANU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 00:01:08
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:00:58.691833 2026] [security2:error] [pid 21265:tid 21265] [client 13.143.126.176:14400] ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 19:00:58.691833 2026] [security2:error] [pid 21265:tid 21265] [client 13.143.126.176:14400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/sftp-config.json"] [unique_id "avOwOpunPDMjIZlpBYstHAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-11-06 04:33:28
UTC ·
(1 week ago)
[FriNov0605:33:26.7193022026][security2:error][pid826895:tid826986][client13.143.126.176:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][l ...
show more
[FriNov0605:33:26.7193022026][security2:error][pid826895:tid826986][client13.143.126.176:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"sito-online.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"au1YlolvM4IMcbpk-wOizQAAAMU\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:43:09
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:43:06.183609 2026] [security2:error] [pid 6457:tid 6457] [client 13.143.126.176:3498] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:43:06.183609 2026] [security2:error] [pid 6457:tid 6457] [client 13.143.126.176:3498] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wisdomwfm.com"] [uri "/sftp-config.json"] [unique_id "au1MymdG8Or4JhoVQGq2cgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 19:04:49
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 14:04:44.665449 2026] [security2:error] [pid 5474:tid 5488] [client 13.143.126.176:40228] M ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 14:04:44.665449 2026] [security2:error] [pid 5474:tid 5488] [client 13.143.126.176:40228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "super-8mm.net"] [uri "/sftp-config.json"] [unique_id "auzTTAvp5b-yYWIcxqmjTAAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 10:53:30
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:53:27.326479 2026] [security2:error] [pid 1038669:tid 1038683] [client 13.143.126.176:11 ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:53:27.326479 2026] [security2:error] [pid 1038669:tid 1038683] [client 13.143.126.176:11542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "executiveaccounting.net"] [uri "/sftp-config.json"] [unique_id "auxgJ8JfMLqC9kI6I8lQ4wAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 05:32:16
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 00:31:26.496264 2026] [security2:error] [pid 680:tid 680] [client 13.143.126.176:6420] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 00:31:26.496264 2026] [security2:error] [pid 680:tid 680] [client 13.143.126.176:6420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whitetaildetailing.com"] [uri "/sftp-config.json"] [unique_id "auggLhC5evFcKFGyXCEh_wAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-10-26 13:16:15
UTC ·
(2 weeks ago)
Try to access /.vscode/sftp.json
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 19:18:28
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 15:18:23.816030 2026] [security2:error] [pid 7078:tid 7078] [client 13.143.126.176:29048] M ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 15:18:23.816030 2026] [security2:error] [pid 7078:tid 7078] [client 13.143.126.176:29048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "citygateinc.com"] [uri "/sftp-config.json"] [unique_id "at5V_zuwj2iOr9eecJ5ODQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 20:49:34
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 16:49:29.195389 2026] [security2:error] [pid 7625:tid 7625] [client 13.143.126.176:41618] M ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 16:49:29.195389 2026] [security2:error] [pid 7625:tid 7625] [client 13.143.126.176:41618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "h2ofall.co"] [uri "/sftp-config.json"] [unique_id "at0Z2dhwDxqA7lLQrM5powAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:18:27
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:18:19.654916 2026] [security2:error] [pid 4942:tid 4942] [client 13.143.126.176:11024] M ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:18:19.654916 2026] [security2:error] [pid 4942:tid 4942] [client 13.143.126.176:11024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pointillistic.com"] [uri "/ren//sftp-config.json"] [unique_id "atv5S5B0hspZqOFRMKnsyQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 10:34:33
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 06:34:27.323335 2026] [security2:error] [pid 15937:tid 15937] [client 13.143.126.176:30666] ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 06:34:27.323335 2026] [security2:error] [pid 15937:tid 15937] [client 13.143.126.176:30666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "richardlyne.com"] [uri "/sftp-config.json"] [unique_id "ats4M0kqir0o6c_2KUcdmgAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 10:44:15
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 06:44:09.699712 2026] [security2:error] [pid 11336:tid 11336] [client 13.143.126.176:61254] ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.126.176 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 06:44:09.699712 2026] [security2:error] [pid 11336:tid 11336] [client 13.143.126.176:61254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wavecomputers.com"] [uri "/sftp-config.json"] [unique_id "atdF-a5oRtdPkjUYuSHbhQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-10-19 19:50:59
UTC ·
(3 weeks ago)
(web_sensitive_file) srv102 Sensitive file probe (.env/.git/backup) 13.143.126.176 (FR/France/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
