🇩🇪
4server
2026-07-27 22:56:21
(1 hour ago)
[TueJul2800:56:15.9364672026][security2:error][pid3532690:tid3532814][client188.214.199.60:0]ModSecu ...
show more
[TueJul2800:56:15.9364672026][security2:error][pid3532690:tid3532814][client188.214.199.60:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"b4consulting.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"amfiD50gtygt0NDZIPWokQAAAQc\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 13:09:58
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 09:09:53.240123 2026] [security2:error] [pid 2025306:tid 2025354] [client 188.214.199.60:4830] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ceresfund.com"] [uri "/sftp-config.json"] [unique_id "amdYoUQ81MuyuQcI1rBQFAAAAZE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 01:57:00
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 21:56:53.847025 2026] [security2:error] [pid 4008296:tid 4008296] [client 188.214.199.60:10930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "avalderlaw.com"] [uri "/sftp-config.json"] [unique_id "ama65V8XbNAsWA7DhXlmuwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 21:14:32
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 17:14:24.865649 2026] [security2:error] [pid 3440709:tid 3440709] [client 188.214.199.60:63026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thebeeplace.com"] [uri "/sftp-config.json"] [unique_id "amZ4sG9vphiMHxGEQtK6cAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-26 16:42:05
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 26 12:41:53.694324 2026] [security2:error] [pid 3058508:tid 3058508] [client 188.214.199.60:23838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/sftp-config.json"] [unique_id "amY40ZD_s7lb0Dc8PjW7pAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-07-18 21:33:29
(1 week ago)
[SatJul1823:33:24.9771952026][security2:error][pid2341475:tid2341782][client188.214.199.60:0]ModSecu ...
show more
[SatJul1823:33:24.9771952026][security2:error][pid2341475:tid2341782][client188.214.199.60:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"flyingberber.com\"][uri\"/sftp-config.json\"][unique_id\"alvxJAfVulgXSTwAgn7_3wAAAQ8\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 19:24:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 15:24:21.544821 2026] [security2:error] [pid 8029:tid 8029] [client 188.214.199.60:44140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flutepraise.com"] [uri "/sftp-config.json"] [unique_id "alvS5X6a4i2NEfI1VqcElwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 09:46:40
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 05:46:36.783022 2026] [security2:error] [pid 25212:tid 25212] [client 188.214.199.60:19046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.floorsanding.org"] [uri "/sftp-config.json"] [unique_id "altLfHd7IqHedamdppEg3gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
MM-bot
2026-07-18 07:42:21
(1 week ago)
URL-probe: HTTP/1.1 GET request on /sftp-config.json (2026-07-18 09:42:21 UTC+2)
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-07-18 06:34:10
(1 week ago)
(mod_security) mod_security (id:210580) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210580) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 02:34:03.438747 2026] [security2:error] [pid 15246:tid 15246] [client 188.214.199.60:62182] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||flightclaimservices.com|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: https:/fastfillsystems.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "flightclaimservices.com"] [uri "/.vscode/sftp.json"] [unique_id "alseW_GeoHmzCKMiIWU7sAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 03:24:22
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 23:24:17.646031 2026] [security2:error] [pid 22206:tid 22206] [client 188.214.199.60:63584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fletcherdouglas.com"] [uri "/sftp-config.json"] [unique_id "alrx4W75YsM_7Vof5Z0mdQAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 23:43:49
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 19:43:42.118191 2026] [security2:error] [pid 5860:tid 5860] [client 188.214.199.60:22132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flashbackmusicmemories.com"] [uri "/activity_programs.html/sftp-config.json"] [unique_id "alq-LgVcpldaPLNJ4aVR5QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 11:54:05
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 07:53:59.256633 2026] [security2:error] [pid 32554:tid 32554] [client 188.214.199.60:50418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fishleadership.org"] [uri "/sftp-config.json"] [unique_id "aloX19w7a4rwGWcGm-Lt3AAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 20:57:13
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.60 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 16:57:08.446951 2026] [security2:error] [pid 20389:tid 20389] [client 188.214.199.60:38134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "financesf.com"] [uri "/sftp-config.json"] [unique_id "allFpJJFG69BJA6e2romWwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
MusicLibrary
2026-07-16 18:58:57
(1 week ago)
Probing foreign-stack admin panels / known exploit paths (Joomla, phpMyAdmin, phpunit, OWA, etc.)
Bad Web Bot
Web App Attack