🇺🇸
TPI-Abuse
2026-11-08 13:45:35
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 08:45:28.584256 2026] [security2:error] [pid 28468:tid 28468] [client 45.134.139.21:26026] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 08:45:28.584256 2026] [security2:error] [pid 28468:tid 28468] [client 45.134.139.21:26026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hertzan.com"] [uri "/sftp-config.json"] [unique_id "avB8-JQsG3FMTJP2jsmLnAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 14:51:06
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:51:01.849570 2026] [security2:error] [pid 26573:tid 26573] [client 45.134.139.21:42352] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:51:01.849570 2026] [security2:error] [pid 26573:tid 26573] [client 45.134.139.21:42352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accordionfactory.com"] [uri "/sftp-config.json"] [unique_id "au3pVYMZH3SQX37kAWYdpgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:31:18
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:31:14.111855 2026] [security2:error] [pid 22748:tid 22748] [client 45.134.139.21:29058] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:31:14.111855 2026] [security2:error] [pid 22748:tid 22748] [client 45.134.139.21:29058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lasvegaslaughs.com"] [uri "/sftp-config.json"] [unique_id "au1KAm-RGu-L1-dgHzlMIAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 00:23:14
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:23:09.955621 2026] [security2:error] [pid 29704:tid 29704] [client 45.134.139.21:5834] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:23:09.955621 2026] [security2:error] [pid 29704:tid 29704] [client 45.134.139.21:5834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bearssd.org"] [uri "/bearquake/sftp-config.json"] [unique_id "aup67Z4r5nSr-0gIJNXCYgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 18:16:40
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 13:16:33.862101 2026] [security2:error] [pid 8731:tid 8731] [client 45.134.139.21:25292] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 13:16:33.862101 2026] [security2:error] [pid 8731:tid 8731] [client 45.134.139.21:25292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "barriebrown.com"] [uri "/sftp-config.json"] [unique_id "auolAfgy4ug7XI82TlDrCAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 14:28:55
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 10:27:22.291191 2026] [security2:error] [pid 5875:tid 5875] [client 45.134.139.21:2094] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 10:27:22.291191 2026] [security2:error] [pid 5875:tid 5875] [client 45.134.139.21:2094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kronrod.com"] [uri "/sftp-config.json"] [unique_id "auSpShvl3ehmVHYreCCZLwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:11:11
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:11:05.645470 2026] [security2:error] [pid 13810:tid 13830] [client 45.134.139.21:41008] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:11:05.645470 2026] [security2:error] [pid 13810:tid 13830] [client 45.134.139.21:41008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "liquido.cocoonprojects.com"] [uri "/sftp-config.json"] [unique_id "atv3mVtFVrRPa7byzJ-USgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-18 13:13:44
UTC ·
(3 weeks ago)
Secret file probe | method: GET | path: /sftp-config.json | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 08:08:03
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 04:07:55.782167 2026] [security2:error] [pid 15029:tid 15029] [client 45.134.139.21:61514] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.21 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 04:07:55.782167 2026] [security2:error] [pid 15029:tid 15029] [client 45.134.139.21:61514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abramson-offner.com"] [uri "/sftp-config.json"] [unique_id "atR-W3FkVKEpVSPM5Glf9QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
jcbriar
2026-10-16 17:44:29
UTC ·
(3 weeks ago)
Searching for vulnerable scripts
Hacking
Web App Attack
Anonymous
2025-05-27 17:23:51
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH
Anonymous
2025-05-26 13:12:59
UTC ·
(1 year ago)
Ports: 80,443; Direction: 0; Trigger: LF_CUSTOMTRIGGER
Brute-Force
SSH