πΊπΈ
TPI-Abuse
2024-06-03 05:13:52
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2002:674d:f6ea::674d:f6ea (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2002:674d:f6ea::674d:f6ea (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 03 01:13:46.666408 2024] [security2:error] [pid 2875908] [client 2002:674d:f6ea::674d:f6ea:59414] [client 2002:674d:f6ea::674d:f6ea] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3penguinsdesign.com"] [uri "/sftp-config.json"] [unique_id "Zl1RCg6nFQiKNH-yDPiWKQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2024-06-01 08:53:44
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2002:674d:f6ea::674d:f6ea (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2002:674d:f6ea::674d:f6ea (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 01 04:53:38.023391 2024] [security2:error] [pid 8193] [client 2002:674d:f6ea::674d:f6ea:59742] [client 2002:674d:f6ea::674d:f6ea] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "2janderson.com"] [uri "/sftp-config.json"] [unique_id "ZlrhklZzqX4MJItzo6ZWjgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2024-05-30 03:16:04
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2002:674d:f6ea::674d:f6ea (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2002:674d:f6ea::674d:f6ea (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 29 23:15:57.710192 2024] [security2:error] [pid 20811] [client 2002:674d:f6ea::674d:f6ea:57249] [client 2002:674d:f6ea::674d:f6ea] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "manty.com"] [uri "/sftp-config.json"] [unique_id "ZlfvbcbW5igI7gFLH-IpJgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
mawan
2024-05-19 22:12:33
(2 years ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
π§πͺ
cmbplf
2024-05-19 16:28:02
(2 years ago)
157 requests to */sftp-config.json
Brute-Force
Bad Web Bot
πΊπΈ
TPI-Abuse
2024-05-19 14:34:14
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2002:674d:f6ea::674d:f6ea (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2002:674d:f6ea::674d:f6ea (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun May 19 10:34:07.944941 2024] [security2:error] [pid 16682:tid 47109772449536] [client 2002:674d:f6ea::674d:f6ea:54929] [client 2002:674d:f6ea::674d:f6ea] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aiegroup.com"] [uri "/sftp-config.json"] [unique_id "ZkoN38WBW3CeIv_AYAda3AAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
mawan
2024-05-08 23:11:31
(2 years ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
πΊπΈ
mawan
2024-05-06 03:39:10
(2 years ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
π§πͺ
cmbplf
2024-05-05 03:45:10
(2 years ago)
208 requests to */sftp-config.json
Brute-Force
Bad Web Bot
π³π±
vestibtech
2024-05-03 03:44:55
(2 years ago)
2002:674d:f6ea::674d:f6ea - - [02/May/2024:21:44:55 -0600] "GET /sftp-config.json HTTP/1.1" 404 6470 ...
show more
2002:674d:f6ea::674d:f6ea - - [02/May/2024:21:44:55 -0600] "GET /sftp-config.json HTTP/1.1" 404 6470 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36"
...
show less
Web App Attack
π©πͺ
hfbusiness.de
2024-04-29 02:57:46
(2 years ago)
2002:674d:f6ea::674d:f6ea - - [29/Apr/2024:04:57:45 +0200] "GET /.vscode/sftp.json HTTP/1.1" 404 100 ...
show more
2002:674d:f6ea::674d:f6ea - - [29/Apr/2024:04:57:45 +0200] "GET /.vscode/sftp.json HTTP/1.1" 404 10016 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36"
...
show less
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
πΊπΈ
TPI-Abuse
2024-04-27 02:38:40
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 2002:674d:f6ea::674d:f6ea (Unknown): 1 in the l ...
show more
(mod_security) mod_security (id:210492) triggered by 2002:674d:f6ea::674d:f6ea (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Apr 26 22:38:35.152634 2024] [security2:error] [pid 9292:tid 46967221118720] [client 2002:674d:f6ea::674d:f6ea:52950] [client 2002:674d:f6ea::674d:f6ea] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.trejbal.com"] [uri "/sftp-config.json"] [unique_id "ZixlK6gKdXCTZWET2mjEYgAAAUI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
hfbusiness.de
2024-04-26 22:10:24
(2 years ago)
2002:674d:f6ea::674d:f6ea - - [27/Apr/2024:00:10:23 +0200] "GET /.vscode/sftp.json HTTP/1.1" 404 100 ...
show more
2002:674d:f6ea::674d:f6ea - - [27/Apr/2024:00:10:23 +0200] "GET /.vscode/sftp.json HTTP/1.1" 404 10016 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36"
...
show less
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
π§πͺ
cmbplf
2024-04-26 18:22:03
(2 years ago)
104 requests to */sftp-config.json
Brute-Force
Bad Web Bot
πΊπΈ
mawan
2024-04-22 17:21:04
(2 years ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack