🇺🇸
TPI-Abuse
2026-11-14 21:26:04
UTC ·
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:25:55.036513 2026] [security2:error] [pid 24026:tid 24026] [client 201.14.248.160:57900] ...
show more
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 16:25:55.036513 2026] [security2:error] [pid 24026:tid 24026] [client 201.14.248.160:57900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "taltonfamily.com"] [uri "/sftp-config.json"] [unique_id "avjR43H9WUaMJD-CbG3hVwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 06:49:18
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:49:13.844526 2026] [security2:error] [pid 24102:tid 24126] [client 201.14.248.160:30422] ...
show more
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 01:49:13.844526 2026] [security2:error] [pid 24102:tid 24126] [client 201.14.248.160:30422] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "afghanistantraveller.com"] [uri "/sftp-config.json"] [unique_id "avgEaW0_KJ3rgUuNWq_PEQAAANY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:31:43
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:31:37.222691 2026] [security2:error] [pid 20655:tid 20655] [client 201.14.248.160:39762] ...
show more
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:31:37.222691 2026] [security2:error] [pid 20655:tid 20655] [client 201.14.248.160:39762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/sftp-config.json"] [unique_id "avTsyQeZIrR32HLSqpXypgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 12:49:03
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 07:48:57.298706 2026] [security2:error] [pid 3095:tid 3095] [client 201.14.248.160:47486] M ...
show more
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 07:48:57.298706 2026] [security2:error] [pid 3095:tid 3095] [client 201.14.248.160:47486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vittariafashion.com"] [uri "/sftp-config.json"] [unique_id "avRkOYCxYgx14V50rY4KRAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:39:19
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:39:15.434676 2026] [security2:error] [pid 12552:tid 12552] [client 201.14.248.160:23902] ...
show more
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:39:15.434676 2026] [security2:error] [pid 12552:tid 12552] [client 201.14.248.160:23902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "glassicannex.org"] [uri "/sftp-config.json"] [unique_id "avRF08W4gB7S8TrDY2dLnwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 05:45:39
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:45:32.726890 2026] [security2:error] [pid 427:tid 427] [client 201.14.248.160:33570] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:45:32.726890 2026] [security2:error] [pid 427:tid 427] [client 201.14.248.160:33570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "afjm.net"] [uri "/sftp-config.json"] [unique_id "avKvfCi9BKF0sXQGZQ-BzwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:40:29
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:40:23.866370 2026] [security2:error] [pid 32130:tid 32130] [client 201.14.248.160:43010] ...
show more
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:40:23.866370 2026] [security2:error] [pid 32130:tid 32130] [client 201.14.248.160:43010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.totenclaus.es"] [uri "/sftp-config.json"] [unique_id "au1MJ-TrqpRVzTt7lh8OAAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:19:58
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:19:51.519668 2026] [security2:error] [pid 29672:tid 29672] [client 201.14.248.160:20180] ...
show more
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:19:51.519668 2026] [security2:error] [pid 29672:tid 29672] [client 201.14.248.160:20180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.1st-advantage-arkansas-real-estate-school.com"] [uri "/sftp-config.json"] [unique_id "au1HV8mfrcT8eXwe7GQxnQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 01:51:36
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 20:51:31.496631 2026] [security2:error] [pid 25834:tid 25902] [client 201.14.248.160:35326] ...
show more
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 20:51:31.496631 2026] [security2:error] [pid 25834:tid 25902] [client 201.14.248.160:35326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beckmon.com"] [uri "/sftp-config.json"] [unique_id "auqPowkM9c13tM_IsOB-AAAAAII"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
EmK530
2026-10-26 12:51:22
UTC ·
(2 weeks ago)
Credential/config file leak probe: /.vscode/sftp.json
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:27:05
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:26:58.232293 2026] [security2:error] [pid 10206:tid 10206] [client 201.14.248.160:10658] ...
show more
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:26:58.232293 2026] [security2:error] [pid 10206:tid 10206] [client 201.14.248.160:10658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wendywonjungkim.com"] [uri "/sftp-config.json"] [unique_id "atv7UgEU4DYxp56YCvgiaQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:05:56
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:05:51.234718 2026] [security2:error] [pid 5326:tid 5326] [client 201.14.248.160:49004] M ...
show more
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:05:51.234718 2026] [security2:error] [pid 5326:tid 5326] [client 201.14.248.160:49004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scc1.us"] [uri "/parked/sftp-config.json"] [unique_id "atv2X0lLs7KEsnfCI5C25gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 15:03:12
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 11:03:06.692201 2026] [security2:error] [pid 20182:tid 20182] [client 201.14.248.160:38558] ...
show more
(mod_security) mod_security (id:210492) triggered by 201.14.248.160 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 11:03:06.692201 2026] [security2:error] [pid 20182:tid 20182] [client 201.14.248.160:38558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pyxelstudios.com"] [uri "/sftp-config.json"] [unique_id "atOOKtRYOwhiViamAXzJywAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
