🇳🇱
homeshowdomain.nl
2026-07-11 21:59:58
(1 day ago)
Auto-ban: 217 malicious requests on 2026-07-10 (e.g., env/backup probes, brute-force, or error burst ...
show more
Auto-ban: 217 malicious requests on 2026-07-10 (e.g., env/backup probes, brute-force, or error bursts).
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-07-11 13:13:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 09:12:58.497153 2026] [security2:error] [pid 6720:tid 6746] [client 188.214.199.67:65086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abundancebible.com"] [uri "/sftp-config.json"] [unique_id "alJBWiWAXr-AYCSWgZrlPAAAARU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-11 09:24:24
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 11 05:24:20.265471 2026] [security2:error] [pid 4059:tid 4059] [client 188.214.199.67:32424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "achillespress.com"] [uri "/sftp-config.json"] [unique_id "alILxH4DQf4LjhO_2pilJgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-07-11 06:08:56
(1 day ago)
[redacted] 188.214.199.67 - - [11/Jul/2026:07:08:54 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 68 ...
show more
[redacted] 188.214.199.67 - - [11/Jul/2026:07:08:54 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 6868 0/81200 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" [redacted] 188.214.199.67 - - [11/Jul/2026:07:08:54 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 6778 0/49489 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-07-10 23:32:48
(2 days ago)
[redacted] 188.214.199.67 - - [11/Jul/2026:00:32:47 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 68 ...
show more
[redacted] 188.214.199.67 - - [11/Jul/2026:00:32:47 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 6838 0/43813 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 188.214.199.67 - - [11/Jul/2026:00:32:47 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 1529 0/54251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-07-10 23:31:21
(2 days ago)
182 requests with url.path *sftp.json
Brute-Force
Bad Web Bot
🇩🇪
big-cloud.nl
2026-07-10 22:25:46
(2 days ago)
Try to access /.vscode/sftp.json
Web App Attack
🇺🇸
TPI-Abuse
2026-07-09 16:23:11
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 09 12:23:04.864710 2026] [security2:error] [pid 26118:tid 26118] [client 188.214.199.67:3672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "esneuro.net"] [uri "/sftp-config.json"] [unique_id "ak_K6AxXDs6JkV5NIo43oAAAADk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
juguemosalacarioca.com
2026-07-08 18:12:05
(4 days ago)
Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080
Web App Attack
🇺🇸
TPI-Abuse
2026-07-08 13:35:06
(4 days ago)
(mod_security) mod_security (id:210580) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210580) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 09:34:59.789582 2026] [security2:error] [pid 28635:tid 28635] [client 188.214.199.67:52986] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||epowersupplyusa.com|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: http:/encinoenviron.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "epowersupplyusa.com"] [uri "/.vscode/sftp.json"] [unique_id "ak5SA6z4KvgsLlhcrtOI5AAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-08 07:35:33
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 08 03:35:25.785937 2026] [security2:error] [pid 29133:tid 29133] [client 188.214.199.67:62842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "enzeder.com"] [uri "/sftp-config.json"] [unique_id "ak39vRND91vkBhmG-OKJmwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-07 23:39:33
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 19:39:26.323434 2026] [security2:error] [pid 20945:tid 20945] [client 188.214.199.67:22068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "enlightened-workplace.com"] [uri "/sftp-config.json"] [unique_id "ak2OLi2UH0yL2Sb0B57qHQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-07 21:10:35
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 17:10:30.234090 2026] [security2:error] [pid 3800:tid 3800] [client 188.214.199.67:33122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "englishmagic.us"] [uri "/sftp-config.json"] [unique_id "ak1rRhgPMHNlktQTYGjB-QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-07 17:07:42
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 13:07:35.768717 2026] [security2:error] [pid 31587:tid 31587] [client 188.214.199.67:56112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "enespiral.net"] [uri "/sftp-config.json"] [unique_id "ak0yV4qevkRhXzo_Bkvs4AAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-07 12:58:56
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 188.214.199.67 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 07 08:58:50.902088 2026] [security2:error] [pid 27504:tid 27504] [client 188.214.199.67:3168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "endoperfect.com"] [uri "/sftp-config.json"] [unique_id "akz4CoM8VznX23xODHRLvwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack