🇬🇧
consul.to
2026-11-10 10:05:10
UTC ·
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇷🇴
clauss
2026-11-10 04:18:31
UTC ·
(2 days ago)
20.214.227.111 - - [10/Nov/2026:06:18:28 +0200] "GET /.vscode/sftp.json HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
20.214.227.111 - - [10/Nov/2026:06:18:30 +0200] "GET /.vscode/sftp.json H ...
show more
20.214.227.111 - - [10/Nov/2026:06:18:28 +0200] "GET /.vscode/sftp.json HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
20.214.227.111 - - [10/Nov/2026:06:18:30 +0200] "GET /.vscode/sftp.json HTTP/2.0" 404 27970 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 14:39:43
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 20.214.227.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:39:37.142767 2026] [security2:error] [pid 3166:tid 3166] [client 20.214.227.111:0] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 20.214.227.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 09:39:37.142767 2026] [security2:error] [pid 3166:tid 3166] [client 20.214.227.111:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "antitribu.com"] [uri "/sftp-config.json"] [unique_id "avHbKSkfJ38ML1CsWirxAAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-09 12:50:24
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 20.214.227.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:50:19.741506 2026] [security2:error] [pid 9139:tid 9139] [client 20.214.227.111:0] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 20.214.227.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 07:50:19.741506 2026] [security2:error] [pid 9139:tid 9139] [client 20.214.227.111:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ard.global"] [uri "/sftp-config.json"] [unique_id "avHBixfeP2UHFTotMd9WQgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
akac
2026-11-08 19:44:22
UTC ·
(4 days ago)
Web vulnerability scanning: HTTP/1.1 GET /sftp-config.json
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:04:32
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 20.214.227.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:04:29.527715 2026] [security2:error] [pid 21398:tid 21398] [client 20.214.227.111:62379] ...
show more
(mod_security) mod_security (id:210492) triggered by 20.214.227.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:04:29.527715 2026] [security2:error] [pid 21398:tid 21398] [client 20.214.227.111:62379] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agworldmissions.org"] [uri "/sftp-config.json"] [unique_id "avCdjUwIM7zi6lO07PY2ZQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 15:31:10
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 20.214.227.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:31:06.363050 2026] [security2:error] [pid 10182:tid 10182] [client 20.214.227.111:58372] ...
show more
(mod_security) mod_security (id:210492) triggered by 20.214.227.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:31:06.363050 2026] [security2:error] [pid 10182:tid 10182] [client 20.214.227.111:58372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agupgrade.net"] [uri "/sftp-config.json"] [unique_id "avCVupi-ZsWlp4sZ5Oaq2wAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-11-08 14:34:39
UTC ·
(4 days ago)
[redacted] 20.214.227.111 - - [08/Nov/2026:15:34:37 +0100] "GET /[redacted] HTTP/1.1" 302 6776 0/158383 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 443 [redacted] 20.214.227.111 - - [08/Nov/2026:15:34:38 + ...
show more
[redacted] 20.214.227.111 - - [08/Nov/2026:15:34:37 +0100] "GET /[redacted] HTTP/1.1" 302 6776 0/158383 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 443 [redacted] 20.214.227.111 - - [08/Nov/2026:15:34:38 +0100] "GET /.vscode/[redacted] HTTP/1.1" 302 1559 0/34941 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 443
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-07 01:33:30
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 20.214.227.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 20:33:25.916486 2026] [security2:error] [pid 21773:tid 21796] [client 20.214.227.111:61793] ...
show more
(mod_security) mod_security (id:210492) triggered by 20.214.227.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 20:33:25.916486 2026] [security2:error] [pid 21773:tid 21796] [client 20.214.227.111:61793] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "achillconsulting.com"] [uri "/sftp-config.json"] [unique_id "au5_5aeuIu0J9wVFw8yAcAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 19:23:06
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 20.214.227.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 14:23:01.744548 2026] [security2:error] [pid 27914:tid 27914] [client 20.214.227.111:58435] ...
show more
(mod_security) mod_security (id:210492) triggered by 20.214.227.111 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 14:23:01.744548 2026] [security2:error] [pid 27914:tid 27914] [client 20.214.227.111:58435] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dmasoftlab.com"] [uri "/sftp-config.json"] [unique_id "auo0lQvWfCXOetdIba7xlgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
