๐น๐ท
ycoskun41
2026-09-17 02:33:29
(2 hours ago)
fail2ban: plesk-modsecurity jail on genckocaeli.com
Web App Attack
๐ฌ๐ง
consul.to
2026-09-17 02:17:53
(2 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-09-16 23:09:11
(5 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
๐ฉ๐ช
LRob
2026-09-16 21:54:32
(7 hours ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /sftp-config.json | 2026-09-16 21:54 UTC
show less
Hacking
Web App Attack
๐ฉ๐ช
Vegascosmetics
2026-09-16 21:50:08
(7 hours ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after locale-probe / error-handler fuzzing against ASP.NET shop. Evidence: LOCALE-PROBE: MissingSlash (/de46517ftp-config.json)
show less
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-09-16 20:01:26
(9 hours ago)
Web probing (6 hits in 24h) on default-vhost,vestingstadvalkenburg.nl: sensitive-path scans and/or 4 ...
show more
Web probing (6 hits in 24h) on default-vhost,vestingstadvalkenburg.nl: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 18:23:04
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 139.162.29.10 (139-162-29-10.ip.linodeuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 139.162.29.10 (139-162-29-10.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 14:22:58.373879 2026] [security2:error] [pid 9197:tid 9197] [client 139.162.29.10:51647] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virginialakes395.com"] [uri "/sftp-config.json"] [unique_id "aqregg_AI-yzu5aJ3iKvBQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
HamSammich
2026-09-16 17:39:58
(11 hours ago)
Automated sensor: 2 HTTP connection/probe attempts over the last 24h (latest 2026-09-16T17:39Z).
Brute-Force
Web App Attack
Anonymous
2026-09-16 17:06:14
(11 hours ago)
Trying to access config files
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 16:58:56
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 139.162.29.10 (139-162-29-10.ip.linodeuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 139.162.29.10 (139-162-29-10.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 12:58:50.362003 2026] [security2:error] [pid 988:tid 988] [client 139.162.29.10:56341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virginiajohnstone.com"] [uri "/sftp-config.json"] [unique_id "aqrKyvmtXO-WhoWSCWVpewAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 15:21:18
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 139.162.29.10 (139-162-29-10.ip.linodeuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 139.162.29.10 (139-162-29-10.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 11:21:14.515921 2026] [security2:error] [pid 11261:tid 11261] [client 139.162.29.10:64588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vesalappi.com"] [uri "/sftp-config.json"] [unique_id "aqqz6vLSS9UPGNczDh0k2AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 13:13:27
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 139.162.29.10 (139-162-29-10.ip.linodeuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 139.162.29.10 (139-162-29-10.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:13:22.064176 2026] [security2:error] [pid 6395:tid 6395] [client 139.162.29.10:61521] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "von-s.com"] [uri "/sftp-config.json"] [unique_id "aqqV8lYYbcR-4N6fkBCqfgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 12:24:36
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 139.162.29.10 (139-162-29-10.ip.linodeuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 139.162.29.10 (139-162-29-10.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:24:31.990556 2026] [security2:error] [pid 27444:tid 27444] [client 139.162.29.10:52341] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "red-jacket.com"] [uri "/volunteer-song//sftp-config.json"] [unique_id "aqqKf2SqJNCtXJHgqGMTrgAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 10:03:46
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 139.162.29.10 (139-162-29-10.ip.linodeuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 139.162.29.10 (139-162-29-10.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 06:03:40.714341 2026] [security2:error] [pid 11685:tid 11685] [client 139.162.29.10:59890] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.laboquimia.es"] [uri "/catalogo/producto.php"] [unique_id "aqppfIB_wBCZeiwBfAsQ8gAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 09:23:02
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 139.162.29.10 (139-162-29-10.ip.linodeuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 139.162.29.10 (139-162-29-10.ip.linodeusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 05:22:56.424292 2026] [security2:error] [pid 20312:tid 20312] [client 139.162.29.10:60772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "victorvictor.biz"] [uri "/sftp-config.json"] [unique_id "aqpf8DDTc9FpfyjD3Jw6NAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack