🇬🇧
consul.to
2026-09-10 04:35:03
UTC ·
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
consul.to
2026-02-06 18:30:00
UTC ·
(9 months ago)
Web attack/malicious scanning detected
Web App Attack
🇦🇺
aranguren.org
2026-02-06 17:36:35
UTC ·
(9 months ago)
167.99.77.64 - - [07/Feb/2026:04:36:33 +1100] "GET /sftp-config.json HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
167.99.77.64 - - [07/Feb/2026:04:36:33 +1100] "GET /.vscode/sftp.json HTTP ...
show more
167.99.77.64 - - [07/Feb/2026:04:36:33 +1100] "GET /sftp-config.json HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
167.99.77.64 - - [07/Feb/2026:04:36:33 +1100] "GET /.vscode/sftp.json HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
167.99.77.64 - - [07/Feb/2026:04:36:33 +1100] "GET /.vscode/ftp-config.json HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
167.99.77.64 - - [07/Feb/2026:04:36:34 +1100] "GET /.vscode/ftp-sync.json HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
167.99.77.64 - - [07/Feb/2026:04:36:34 +1100] "GET /.sftp-config.json HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
167.99.77.64 - - [07/Feb/2026:04:36:34 +1100] "GET /ftp-sync.json HTTP/1.1" 404 989 "-" "Mozilla/5.0 (Maci
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-06 02:40:21
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 21:40:08.831925 2026] [security2:error] [pid 16731:tid 16731] [client 2002 ...
show more
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 21:40:08.831925 2026] [security2:error] [pid 16731:tid 16731] [client 2002:a763:4d40::a763:4d40:59490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "maerynray.com"] [uri "/sftp-config.json"] [unique_id "aYVUiBu1Z38gWjDGeDYa9wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-06 01:56:22
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 20:56:14.294235 2026] [security2:error] [pid 30766:tid 30766] [client 2002 ...
show more
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 20:56:14.294235 2026] [security2:error] [pid 30766:tid 30766] [client 2002:a763:4d40::a763:4d40:54716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "loveoflearning.com"] [uri "/sftp-config.json"] [unique_id "aYVKPu9LZniZJEJY-mXQNwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-06 00:00:11
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 19:00:05.820944 2026] [security2:error] [pid 8276:tid 8276] [client 2002:a ...
show more
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 19:00:05.820944 2026] [security2:error] [pid 8276:tid 8276] [client 2002:a763:4d40::a763:4d40:61480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "love-n-promises.com"] [uri "/sftp-config.json"] [unique_id "aYUvBR74vk03Y1JsA7ru_QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-05 18:14:32
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 13:14:26.176596 2026] [security2:error] [pid 1182036:tid 1182036] [client ...
show more
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 13:14:26.176596 2026] [security2:error] [pid 1182036:tid 1182036] [client 2002:a763:4d40::a763:4d40:57480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "llaira.com"] [uri "/sftp-config.json"] [unique_id "aYTeAgPszWQO7KRiPle_zwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-02-05 18:02:04
UTC ·
(9 months ago)
Bot / scanning and/or hacking attempts: GET /.vscode/ftp-config.json HTTP/1.1, GET / HTTP/1.1, GET /.vscode/ftp-sync.json HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-02-05 16:13:00
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 11:12:53.188131 2026] [security2:error] [pid 15119:tid 15119] [client 2002 ...
show more
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 11:12:53.188131 2026] [security2:error] [pid 15119:tid 15119] [client 2002:a763:4d40::a763:4d40:56974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "machineryenchantress.com"] [uri "/sftp-config.json"] [unique_id "aYTBhf-cyWT56LNnACsXdgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-05 11:18:43
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 06:18:36.975516 2026] [security2:error] [pid 10035:tid 10035] [client 2002 ...
show more
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 05 06:18:36.975516 2026] [security2:error] [pid 10035:tid 10035] [client 2002:a763:4d40::a763:4d40:64535] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "madandproud.com"] [uri "/sftp-config.json"] [unique_id "aYR8jC73_vY_7gsGG3pRlwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-05 03:07:08
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 22:07:01.876023 2026] [security2:error] [pid 27622:tid 27622] [client 2002 ...
show more
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 22:07:01.876023 2026] [security2:error] [pid 27622:tid 27622] [client 2002:a763:4d40::a763:4d40:56286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "losbarbarosdelnorte.com"] [uri "/sftp-config.json"] [unique_id "aYQJVZ62xY_VSQI1dti9ygAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
paissangroup
2026-02-05 01:41:31
UTC ·
(9 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-02-05 00:39:50
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 19:39:45.007035 2026] [security2:error] [pid 14368:tid 14368] [client 2002 ...
show more
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 19:39:45.007035 2026] [security2:error] [pid 14368:tid 14368] [client 2002:a763:4d40::a763:4d40:56334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luxurymicrobikini.com"] [uri "/sftp-config.json"] [unique_id "aYPm0R3jZhCO0DmAOq6OJAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-04 22:01:35
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 17:01:27.429353 2026] [security2:error] [pid 20659:tid 20659] [client 2002 ...
show more
(mod_security) mod_security (id:210492) triggered by 2002:a763:4d40::a763:4d40 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 04 17:01:27.429353 2026] [security2:error] [pid 20659:tid 20659] [client 2002:a763:4d40::a763:4d40:49300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luxandunion.com"] [uri "/sftp-config.json"] [unique_id "aYPBt9JCrloRLFzPjxRIuwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Penny Packer
2026-02-04 16:37:29
UTC ·
(9 months ago)
Fail2Ban apache-tripwires
Web App Attack