🇫🇷
masterguru
2026-07-12 21:52:49
(4 hours ago)
Restricted File Access Attempt. Matched phrase "config.json" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
2026-07-12 07:30:11
(18 hours ago)
| [Dangerous/Australia] Aggressive IP 136.143.250.32 (~30 hits). Type: DoS Defender- Web server 400 ...
show more
| [Dangerous/Australia] Aggressive IP 136.143.250.32 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-07-11 13:36:39
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 09:36:32.323438 2026] [security2:error] [pid 18688:tid 18707] [client 136.143.250.32:53370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "certifiedpoliticalscientist.com"] [uri "/sftp-config.json"] [unique_id "alJG4OdXb0_Do8oeynwOdwAAAVA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 13:16:52
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 09:16:44.699941 2026] [security2:error] [pid 27151:tid 27151] [client 136.143.250.32:60784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.natchezbicycle.com"] [uri "/sftp-config.json"] [unique_id "alJCPNYpM0zq9sbCITrJiQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 12:59:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 08:59:41.326956 2026] [security2:error] [pid 17838:tid 17838] [client 136.143.250.32:54716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "backstore.com"] [uri "/sftp-config.json"] [unique_id "alI-PRbwNEm44F0EQ3zDuQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 12:41:19
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 08:41:13.255563 2026] [security2:error] [pid 31253:tid 31253] [client 136.143.250.32:17124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aares2025.net"] [uri "/sftp-config.json"] [unique_id "alI56dkrN-5XHUD8NFZeZwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-07-09 00:15:26
(4 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 10:15:21
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 06:15:15.619327 2026] [security2:error] [pid 15891:tid 15891] [client 136.143.250.32:7844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anus.net"] [uri "/sftp-config.json"] [unique_id "akuAM1h0SNn0XpsOQrE5nwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 02:04:24
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 22:03:51.319746 2026] [security2:error] [pid 11543:tid 11543] [client 136.143.250.32:34372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "afjm.org"] [uri "/sftp-config.json"] [unique_id "aksNB8xrgs1pCBb_3JHgfAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 14:08:06
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 10:08:00.685732 2026] [security2:error] [pid 13555:tid 13555] [client 136.143.250.32:57992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abecasis.com"] [uri "/sftp-config.json"] [unique_id "akplQCSrRIDT-T_s3Yav6QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-05 12:38:10
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 05 08:37:51.273553 2026] [security2:error] [pid 25180:tid 25180] [client 136.143.250.32:8470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kooroshvaziri.com"] [uri "/sftp-config.json"] [unique_id "akpQH5RHo798qBrNjaumxwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-04 20:46:00
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 16:45:56.072268 2026] [security2:error] [pid 18611:tid 18611] [client 136.143.250.32:21168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aicoursefactory.com"] [uri "/sftp-config.json"] [unique_id "aklxBNpKDR1HN43Z7OiWrQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ELYAZ
2026-07-04 11:44:13
(1 week ago)
(y4) Failed scan -byebye- from 136.143.250.32 (BE/Belgium/-): (CF_ENABLE)
Hacking
🇺🇸
TPI-Abuse
2026-07-03 23:07:31
(1 week ago)
(mod_security) mod_security (id:210580) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210580) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 19:07:22.497856 2026] [security2:error] [pid 1233:tid 1233] [client 136.143.250.32:32162] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||www.donutlocations.com|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: http:/theozlottery.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "www.donutlocations.com"] [uri "/.vscode/sftp.json"] [unique_id "akhAqt1MEtEqEWZYv5yKlQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-03 21:27:08
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 136.143.250.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 03 17:26:41.484871 2026] [security2:error] [pid 21839:tid 21872] [client 136.143.250.32:32212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "1shot.us"] [uri "/sftp-config.json"] [unique_id "akgpETesT70n7iu9DpATMwAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack