🇩🇪
DocNetzwerk
2026-09-02 06:39:43
(56 minutes ago)
(mod_security) mod_security triggered on hostname [redacted] 170.101.96.76 (US/United States/-)
SQL Injection
🇫🇮
YF
2026-09-02 05:00:36
(2 hours ago)
Config JSON probe
Web App Attack
🇫🇷
Baking333
2026-09-02 04:51:04
(2 hours ago)
[redacted] 170.101.96.76 - - [02/Sep/2026:05:51:02 +0100] "GET /[redacted] HTTP/1.1" 302 6868 0/5388 ...
show more
[redacted] 170.101.96.76 - - [02/Sep/2026:05:51:02 +0100] "GET /[redacted] HTTP/1.1" 302 6868 0/53885 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 170.101.96.76 - - [02/Sep/2026:05:51:02 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 6873 0/44403 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇩🇪
conseilgouz
2026-09-02 00:41:30
(6 hours ago)
mae-17 : Block hidden directories=>/.vscode/sftp.json(/)
Hacking
🇺🇸
Starburst SysOp Team
2026-09-01 22:44:04
(8 hours ago)
Restricted File Access Attempt. Matched phrase ".vscode" at REQUEST_FILENAME. (930130-mnz6-1)
Hacking
Web App Attack
2026-09-01 18:40:02
(12 hours ago)
WEB attack
Brute-Force
2026-09-01 18:37:12
(12 hours ago)
Bot / seems abusive / Apache connections: 176
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
2026-09-01 17:23:13
(14 hours ago)
170.101.96.76 - - [01/Sep/2026:17:23:13 +0000] "GET /sftp-config.json HTTP/2.0" 301 162 "-" "Mozill ...
show more
170.101.96.76 - - [01/Sep/2026:17:23:13 +0000] "GET /sftp-config.json HTTP/2.0" 301 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "170.101.96.76" "-"
...
show less
Web App Attack
🇦🇺
nzhost.co.nz
2026-09-01 16:22:25
(15 hours ago)
$f2bV_matches
Hacking
Brute-Force
🇳🇱
ConsulHosting
2026-09-01 15:56:13
(15 hours ago)
Automatically blocked due to distributed attack
Hacking
🇫🇮
paissangroup
2026-09-01 15:34:50
(16 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 14:57:31
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 170.101.96.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 170.101.96.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 10:57:24.983134 2026] [security2:error] [pid 32305:tid 32305] [client 170.101.96.76:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "365soft.top"] [uri "/sftp-config.json"] [unique_id "apbn1Esi8tHzXSJcBDAcvQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
Bay13
2026-08-31 17:24:57
(1 day ago)
CrowdSec:custom/http-sensitive-files
Web App Attack
🇪🇸
el-brujo
2026-08-31 16:31:53
(1 day ago)
31/Aug/2026:18:31:52.531374 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
31/Aug/2026:18:31:52.531374 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 170.101.96.76] ModSecurity: Warning. Matched phrase "/sftp-config.json" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /sftp-config.json found within REQUEST_FILENAME: /sftp-config.json"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "hostench.eu"] [uri "/sftp-config.json"] [unique_id "apWseGZi07XhMgP-SPpBLwAExFU"]
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 13:27:10
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 170.101.96.76 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 170.101.96.76 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 09:27:02.481153 2026] [security2:error] [pid 1494:tid 1494] [client 170.101.96.76:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kryptonome.com"] [uri "/sftp-config.json"] [unique_id "apWBJjDXdJXVZEbNgScTNQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack