🇺🇸
TPI-Abuse
2026-06-24 20:31:10
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 16:31:03.330415 2026] [security2:error] [pid 20416:tid 20416] [client 188.214.199.14:59066] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "misscrankypants.com"] [uri "/sftp-config.json"] [unique_id "ajw-h-JuXWqc0e9_t6oLHAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 20:11:33
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 16:11:26.926692 2026] [security2:error] [pid 6931:tid 6931] [client 188.214.199.14:57186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "misomayo.com"] [uri "/sftp-config.json"] [unique_id "ajw57jClxxVMc1zxllRpdQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 17:49:01
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 13:48:56.919361 2026] [security2:error] [pid 22064:tid 22064] [client 188.214.199.14:40876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miranda-race-walks.com"] [uri "/sftp-config.json"] [unique_id "ajwYiGdQvEZTX-5Z0sGuwgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 17:08:02
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 13:07:54.730455 2026] [security2:error] [pid 13769:tid 13787] [client 188.214.199.14:44242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miraclebrow.com"] [uri "/sftp-config.json"] [unique_id "ajwO6ge3mTTuuIKJvVDG4wAAAZA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 14:19:18
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 10:19:11.754852 2026] [security2:error] [pid 22397:tid 22397] [client 188.214.199.14:54528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mininomotorfix.com"] [uri "/sftp-config.json"] [unique_id "ajvnX5lvpC0Zx2yUUXwt6gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-06-24 13:18:12
(9 hours ago)
Try to access /.vscode/sftp.json
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 08:32:16
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 04:32:10.033089 2026] [security2:error] [pid 16804:tid 16939] [client 188.214.199.14:21276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miltonthepuppy.com"] [uri "/sftp-config.json"] [unique_id "ajuWChRxEYWlmhgdQPDclwAAAQo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-24 06:21:07
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 02:21:01.122340 2026] [security2:error] [pid 6354:tid 6354] [client 188.214.199.14:32652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "militaryordnance.com"] [uri "/sftp-config.json"] [unique_id "ajt3TWCwAu5yECLo4Hke0QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 21:12:46
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 17:12:42.145508 2026] [security2:error] [pid 11134:tid 11134] [client 188.214.199.14:2230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "microbooty.com"] [uri "/sftp-config.json"] [unique_id "ajr2ygPi1snp6lqCpRCXCwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 20:42:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 16:42:43.428768 2026] [security2:error] [pid 5303:tid 5303] [client 188.214.199.14:19194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mickeyinvitations.com"] [uri "/sftp-config.json"] [unique_id "ajrvwxZo-PrcPADMMZ0xKgAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-23 17:58:42
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 23 13:58:34.391085 2026] [security2:error] [pid 29263:tid 29263] [client 188.214.199.14:17870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.willandtrustlaw.com"] [uri "/sftp-config.json"] [unique_id "ajrJSjoVUXqca2wdNLWOcAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-06-23 13:32:44
(1 day ago)
[TueJun2315:32:40.1855502026][security2:error][pid3016849:tid3016957][client188.214.199.14:0]ModSecu ...
show more
[TueJun2315:32:40.1855502026][security2:error][pid3016849:tid3016957][client188.214.199.14:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"mgevents.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"ajqK-FvmnE5iRsioh7AVfwAAAMk\"]
show less
Port Scan
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2026-06-14 12:31:14
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇩🇪
Viveronese
2026-06-13 15:17:50
(1 week ago)
HTTP vulnerability scanning
Web App Attack
🇦🇺
paulshipley.com.au
2026-06-12 10:29:23
(1 week ago)
[Fri Jun 12 20:29:22.896428 2026] [security2:error] [pid 602731] [client 188.214.199.14:33158] [clie ...
show more
[Fri Jun 12 20:29:22.896428 2026] [security2:error] [pid 602731] [client 188.214.199.14:33158] [client 188.214.199.14] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "furst.com.au"] [uri "/sftp-config.json"] [unique_id "aivfgiPVfTVnqkYxKrrklgAAABI"]
...
show less
Web App Attack