🇫🇮
oh.mg
2026-04-30 19:21:25
(1 month ago)
[Thu Apr 30 21:21:24.940713 2026] [security2:error] [pid 3592029:tid 3592073] [client 103.65.237.233 ...
show more
[Thu Apr 30 21:21:24.940713 2026] [security2:error] [pid 3592029:tid 3592073] [client 103.65.237.233:0] [client 103.65.237.233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mmn.ca"] [uri "/sftp-config.json"] [unique_id "afOrtLN22YYjumr8NbkHVQAAAE8"]
...
show less
Web App Attack
Bad Web Bot
🇫🇮
oh.mg
2026-04-30 17:12:57
(1 month ago)
[Thu Apr 30 19:12:21.479462 2026] [security2:error] [pid 3592029:tid 3592079] [client 103.65.237.233 ...
show more
[Thu Apr 30 19:12:21.479462 2026] [security2:error] [pid 3592029:tid 3592079] [client 103.65.237.233:58171] [client 103.65.237.233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mmn.on.ca"] [uri "/sftp-config.json"] [unique_id "afONdbN22YYjumr8Nbn9OQAAAFU"]
[Thu Apr 30 19:12:56.782900 2026] [security2:error] [pid 3592029:tid 3592070] [client 103.65.237.233:58360] [client 103.65.237.233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-
...
show less
Web App Attack
Bad Web Bot
🇺🇸
raymarron.com
2026-04-30 13:33:24
(1 month ago)
/.vscode/sftp.json (x2)
/sftp-config.json (x2)
Web App Attack
🇺🇸
entangled_mongoose
2026-04-30 00:25:50
(1 month ago)
Probed /.vscode/sftp.json.
Web App Attack
🇫🇮
Shaik Sai Meera
2026-04-29 00:04:09
(1 month ago)
IM360 WAF: Hidden file access
Brute-Force
🇦🇹
René Hickersberger
2026-04-28 22:10:23
(1 month ago)
[2026-04-28T22:10:23Z] Malicious request to /.vscode/sftp.json
Hacking
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-04-28 21:25:31
(1 month ago)
Web vulnerability probing: /.vscode/sftp.json
Web App Attack
🇯🇵
VXG-NET
2026-04-28 19:17:53
(1 month ago)
port=80, indicator_type=info-leak
Hacking
🇧🇪
madeit
2026-04-28 09:33:29
(1 month ago)
Web App Attack
🇺🇸
octageeks.com
2026-04-28 04:07:49
(1 month ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇫🇮
Shaik Sai Meera
2026-04-28 00:04:02
(1 month ago)
IM360 WAF: Hidden file access
Brute-Force
🇩🇪
FeG Deutschland
2026-04-27 02:25:25
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇫🇮
Shaik Sai Meera
2026-04-27 00:03:47
(1 month ago)
IM360 WAF: Hidden file access
Brute-Force
🇫🇮
oh.mg
2026-04-25 07:05:47
(1 month ago)
[Sat Apr 25 09:05:31.469201 2026] [security2:error] [pid 530068:tid 530079] [client 103.65.237.233:5 ...
show more
[Sat Apr 25 09:05:31.469201 2026] [security2:error] [pid 530068:tid 530079] [client 103.65.237.233:54479] [client 103.65.237.233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mmn.cat"] [uri "/sftp-config.json"] [unique_id "aexnu6r3PXuC7jFh9qYQWQAAAQk"]
[Sat Apr 25 09:05:46.285890 2026] [security2:error] [pid 530068:tid 530090] [client 103.65.237.233:54658] [client 103.65.237.233] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"]
...
show less
Web App Attack
Bad Web Bot
🇩🇪
ut-addicted.com
2026-04-25 03:14:36
(1 month ago)
\[Sat Apr 25 05:14:35.233387 2026\] \[:error\] \[pid 4142:tid 140546024613632\] \[client 103.65.237. ...
show more
\[Sat Apr 25 05:14:35.233387 2026\] \[:error\] \[pid 4142:tid 140546024613632\] \[client 103.65.237.233:64259\] \[client 103.65.237.233\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "crx.it"\] \[uri "/sftp-config.json"\] \[unique_id "aewxm16NSVnJ3y0hQeHjCAAAAM0"\]
show less
Brute-Force
Web App Attack