🇺🇸
TPI-Abuse
2026-06-28 03:07:23
(51 minutes ago)
(mod_security) mod_security (id:949110) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:949110) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 23:07:20.229173 2026] [security2:error] [pid 4078:tid 4078] [client 194.76.121.54:62902] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "agoodsign.biz"] [uri "/sftp-config.json"] [unique_id "akCP6P7AtxL360BtvVnN0wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 15:49:55
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 11:49:50.552630 2026] [security2:error] [pid 1259:tid 1259] [client 194.76.121.54:43048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ficklepassionproductions.com"] [uri "/coming-soon//sftp-config.json"] [unique_id "aj_xHpQtyYhFvQxf8dk0KAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-27 00:19:03
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 20:18:57.188219 2026] [security2:error] [pid 29229:tid 29229] [client 194.76.121.54:29686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adults-biz.com"] [uri "/sftp-config.json"] [unique_id "aj8W8ffr1UjhmzfLwF6DRQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 21:53:59
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 17:53:55.891332 2026] [security2:error] [pid 28859:tid 28859] [client 194.76.121.54:49858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adorningmetal.com"] [uri "/sftp-config.json"] [unique_id "aj708zwILvuk_ZysA6fqHgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 20:18:48
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 16:18:43.789087 2026] [security2:error] [pid 6827:tid 6827] [client 194.76.121.54:39692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adminconllc.com"] [uri "/sftp-config.json"] [unique_id "aj7eo_qV_gzEHlypFVpYQwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
wordpresshosting.solutions
2026-06-26 19:38:39
(1 day ago)
Web app vulnerability scanning detected. Evidence: 194.76.121.54 - - [26/Jun/2026:19:06:09 +0000] "G ...
show more
Web app vulnerability scanning detected. Evidence: 194.76.121.54 - - [26/Jun/2026:19:06:09 +0000] "GET /sftp-config.json HTTP/1.1" 404 40755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
194.76.121.54 - - [26/Jun/2026:19:38:38 +0000] "GET /sftp-config.json HTTP/1.1" 404 40755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 13:43:14
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 09:43:08.656822 2026] [security2:error] [pid 12653:tid 12653] [client 194.76.121.54:36992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adamscott.us"] [uri "/sftp-config.json"] [unique_id "aj6B7J1pB9zeUMLm7dMn_wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 01:47:57
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:47:53.976850 2026] [security2:error] [pid 24242:tid 24263] [client 194.76.121.54:12268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ace-es.com"] [uri "/sftp-config.json"] [unique_id "aj3aScMF3Fggd-L1BC2ulAAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 21:47:53
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 17:47:46.124711 2026] [security2:error] [pid 3966:tid 3966] [client 194.76.121.54:41808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "acadianahero.com"] [uri "/sftp-config.json"] [unique_id "aj2iAnn_iZTrgj8-tcGf9AAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 13:36:19
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 09:36:15.055253 2026] [security2:error] [pid 28628:tid 28628] [client 194.76.121.54:35500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "moandme.xyz"] [uri "/sftp-config.json"] [unique_id "aj0uz5rXTykXOa5eHY5DEQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 12:31:50
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 08:31:44.299560 2026] [security2:error] [pid 1261:tid 1261] [client 194.76.121.54:26556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mnice.help"] [uri "/sftp-config.json"] [unique_id "aj0fsH2Akhwr7dqAPxDZhAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 08:48:23
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 04:48:18.398867 2026] [security2:error] [pid 10677:tid 10677] [client 194.76.121.54:57222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oualierealty.com"] [uri "/sftp-config.json"] [unique_id "ajzrUnQ6ow7nWPTl8aVg4QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 07:24:54
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 03:24:49.076140 2026] [security2:error] [pid 8696:tid 8696] [client 194.76.121.54:44854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mlappa.net"] [uri "/sftp-config.json"] [unique_id "ajzXwVWCFLGMtBCPCmdXjQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-06-25 03:04:47
(3 days ago)
[ThuJun2505:04:42.4292622026][security2:error][pid1381654:tid1381680][client194.76.121.54:0]ModSecur ...
show more
[ThuJun2505:04:42.4292622026][security2:error][pid1381654:tid1381680][client194.76.121.54:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mjgold.ch\"][uri\"/sftp-config.json\"][unique_id\"ajyaynpn_HVLSPIKYZmBrwAAAFc\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 20:43:30
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 194.76.121.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 16:43:21.915720 2026] [security2:error] [pid 17696:tid 17696] [client 194.76.121.54:61310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "missingfilm.com"] [uri "/sftp-config.json"] [unique_id "ajxBaQfFgbQThXdJzfPR0QAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack