🇺🇸
TPI-Abuse
2026-06-15 01:52:15
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:52:12.066287 2026] [security2:error] [pid 6785:tid 6785] [client 136.143.250.0:32888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "electric-meat-grinder.com"] [uri "/sftp-config.json"] [unique_id "ai9azJ_d9zfaOSij4gLm4QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 08:23:29
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 04:23:23.861019 2026] [security2:error] [pid 31065:tid 31065] [client 136.143.250.0:22198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eileensinc.com"] [uri "/sftp-config.json"] [unique_id "ai5k-w7ukSHgoZFnNlKdXAAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 05:08:43
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 01:08:38.670537 2026] [security2:error] [pid 24862:tid 24862] [client 136.143.250.0:16514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ehrlichfamily.net"] [uri "/sftp-config.json"] [unique_id "ai43Vt5pAgtRKXoukPFBFQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 02:41:43
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 22:41:35.690764 2026] [security2:error] [pid 31737:tid 31737] [client 136.143.250.0:23706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "egret.us"] [uri "/sftp-config.json"] [unique_id "ai4U35DcgEPDotjQVh3gZQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 17:27:45
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 13:27:39.272712 2026] [security2:error] [pid 1566:tid 1566] [client 136.143.250.0:42042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edwardchrisman.com"] [uri "/sftp-config.json"] [unique_id "ai2TCxqi2xe1BjaEbFjijAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 09:54:36
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 05:54:32.076743 2026] [security2:error] [pid 28840:tid 28840] [client 136.143.250.0:12602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edgeimprov.com"] [uri "/sftp-config.json"] [unique_id "ai0o2HwQakGNkBuMrAOARAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
conseilgouz
2026-06-13 06:07:32
(1 day ago)
ece-17 : Block hidden directories=>/.vscode/sftp.json(/)
Hacking
🇩🇪
4server
2026-06-13 04:31:59
(1 day ago)
[SatJun1306:31:56.5888672026][security2:error][pid559519:tid559642][client136.143.250.0:0]ModSecurit ...
show more
[SatJun1306:31:56.5888672026][security2:error][pid559519:tid559642][client136.143.250.0:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"ecosuber.com\"][uri\"/.vscode/sftp.json\"][unique_id\"aizdPOMaLSjodRSDTFWf1wAAARI\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 20:50:35
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 16:50:32.303933 2026] [security2:error] [pid 5934:tid 5934] [client 136.143.250.0:4160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "echelonts.com"] [uri "/sftp-config.json"] [unique_id "aixxGFY1p6xsj7nLbKrylAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 14:59:54
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 10:59:48.970902 2026] [security2:error] [pid 27812:tid 27812] [client 136.143.250.0:50144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eatcakecup.com"] [uri "/sftp-config.json"] [unique_id "aiwe5BrIKmrCWIV8dumLgAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 06:56:15
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 02:56:07.406284 2026] [security2:error] [pid 14072:tid 14072] [client 136.143.250.0:50150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eagrant.com"] [uri "/sftp-config.json"] [unique_id "aiuth7gScSPYaji-0ThrywAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 00:26:32
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 20:26:24.427898 2026] [security2:error] [pid 4911:tid 4911] [client 136.143.250.0:15326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dyslexiaspecialistsonline.com"] [uri "/sftp-config.json"] [unique_id "aitSMBLzlzIEsGe8hjio5wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-06-11 17:07:07
(3 days ago)
[ThuJun1119:07:03.1405152026][security2:error][pid60251:tid60949][client136.143.250.0:0]ModSecurity: ...
show more
[ThuJun1119:07:03.1405152026][security2:error][pid60251:tid60949][client136.143.250.0:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"duoacaja.com\"][uri\"/.vscode/sftp.json\"][unique_id\"airrN8Fw9w6G1Q1bTiyN9AAAANU\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 16:37:58
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 12:37:50.789758 2026] [security2:error] [pid 3872:tid 3872] [client 136.143.250.0:64764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dungeonsremastered.com"] [uri "/sftp-config.json"] [unique_id "airkXjb0pOTDSQQCs0psHwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 12:39:27
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.0 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 08:39:21.607256 2026] [security2:error] [pid 13106:tid 13106] [client 136.143.250.0:2100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dualspiralsystems.com"] [uri "/sftp-config.json"] [unique_id "aiqseXUOjG6I_bnVGOL6iwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack