🇺🇸
TPI-Abuse
2026-11-15 19:16:26
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 14:16:21.606982 2026] [security2:error] [pid 2149:tid 2149] [client 13.143.16.199:2940] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 14:16:21.606982 2026] [security2:error] [pid 2149:tid 2149] [client 13.143.16.199:2940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salvoni.org"] [uri "/sftp-config.json"] [unique_id "avoFBfIFjp1tRYiCU029FgAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 01:34:36
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:34:28.909664 2026] [security2:error] [pid 9372:tid 9378] [client 13.143.16.199:23310] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 20:34:28.909664 2026] [security2:error] [pid 9372:tid 9378] [client 13.143.16.199:23310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bougie-bengals.com"] [uri "/sftp-config.json"] [unique_id "avkMJJPj6QAyR5U8Z3mKNQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 21:57:52
UTC ·
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:57:47.399511 2026] [security2:error] [pid 17571:tid 17571] [client 13.143.16.199:19632] M ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:57:47.399511 2026] [security2:error] [pid 17571:tid 17571] [client 13.143.16.199:19632] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "roachranch.com"] [uri "/sftp-config.json"] [unique_id "avjZW-KPJIOzbOJA8AGMpwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 21:21:19
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:21:15.911007 2026] [security2:error] [pid 12416:tid 12484] [client 13.143.16.199:40598] M ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:21:15.911007 2026] [security2:error] [pid 12416:tid 12484] [client 13.143.16.199:40598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rubenluis.com"] [uri "/sftp-config.json"] [unique_id "avjQyymMOsDG69bYsfw7swAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 11:53:40
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:53:31.703110 2026] [security2:error] [pid 15996:tid 15996] [client 13.143.16.199:17088] M ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 06:53:31.703110 2026] [security2:error] [pid 15996:tid 15996] [client 13.143.16.199:17088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bearssd.org"] [uri "/sftp-config.json"] [unique_id "avhLu65UtIjtQaTcxVbjUgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:48:45
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:48:40.256939 2026] [security2:error] [pid 23460:tid 23469] [client 13.143.16.199:50526] M ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:48:40.256939 2026] [security2:error] [pid 23460:tid 23469] [client 13.143.16.199:50526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peoplecomeup.com"] [uri "/sftp-config.json"] [unique_id "avbc-EeoPIvPgyPBVwlhfgAAAMQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 09:18:37
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 04:18:33.889694 2026] [security2:error] [pid 9431:tid 9431] [client 13.143.16.199:31154] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 12 04:18:33.889694 2026] [security2:error] [pid 9431:tid 9431] [client 13.143.16.199:31154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wickedworks.net"] [uri "/sftp-config.json"] [unique_id "avWEaTkG-suVQWS_NY0fowAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:27:41
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:27:36.291212 2026] [security2:error] [pid 6677:tid 6677] [client 13.143.16.199:32194] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:27:36.291212 2026] [security2:error] [pid 6677:tid 6677] [client 13.143.16.199:32194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.spectorworld.com"] [uri "/sftp-config.json"] [unique_id "avRDGHHeXCA-VKwAN25zrAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
altenglaner
2026-11-10 04:49:04
UTC ·
(5 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇳🇱
Mangelot Hosting
2026-11-07 19:42:38
UTC ·
(1 week ago)
(web_sensitive_file) srv104 Sensitive file probe (.env/.git/backup) 13.143.16.199 (US/United States/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 10:48:14
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:48:10.705592 2026] [security2:error] [pid 1128396:tid 1128434] [client 13.143.16.199:2510 ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:48:10.705592 2026] [security2:error] [pid 1128396:tid 1128434] [client 13.143.16.199:25100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "charteredeconomist.com"] [uri "/sftp-config.json"] [unique_id "auxe6pKGBkBzblqYJonjNgAAAUA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 19:19:54
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 14:19:49.214916 2026] [security2:error] [pid 17041:tid 17041] [client 13.143.16.199:53814] M ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 14:19:49.214916 2026] [security2:error] [pid 17041:tid 17041] [client 13.143.16.199:53814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brbcash.com"] [uri "/sftp-config.json"] [unique_id "auoz1bgJuMzmggrHyN-eMwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 03:06:02
UTC ·
(1 week ago)
(mod_security) mod_security (id:210580) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:05:57.210195 2026] [security2:error] [pid 5937:tid 5937] [client 13.143.16.199:49654] Mod ...
show more
(mod_security) mod_security (id:210580) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:05:57.210195 2026] [security2:error] [pid 5937:tid 5937] [client 13.143.16.199:49654] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||aeongames.com|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: https:/advancedworkvans.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "aeongames.com"] [uri "/.vscode/sftp.json"] [unique_id "aulPlRORj72ciHF366cQAwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:24:20
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:24:13.520958 2026] [security2:error] [pid 30203:tid 30203] [client 13.143.16.199:4342] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:24:13.520958 2026] [security2:error] [pid 30203:tid 30203] [client 13.143.16.199:4342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "backstore.com"] [uri "/backstore/Index_Products.htm/sftp-config.json"] [unique_id "auhy3Z9VJoV7D3espoBkPAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 07:47:53
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 03:47:45.790321 2026] [security2:error] [pid 27524:tid 27524] [client 13.143.16.199:37706] M ...
show more
(mod_security) mod_security (id:210492) triggered by 13.143.16.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 03:47:45.790321 2026] [security2:error] [pid 27524:tid 27524] [client 13.143.16.199:37706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brasscadillac.com"] [uri "/sftp-config.json"] [unique_id "at20IVpIx1oJiRqPlRV4PwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
