🇺🇸
Epimetheus
2025-06-10 04:04:30
(1 year ago)
Unauthorized access attempts:
From:
206.189.88.148
Method:
HTTPS GET
URI Path:
/.vscode/sftp.j ...
show more
Unauthorized access attempts:
From:
206.189.88.148
Method:
HTTPS GET
URI Path:
/.vscode/sftp.json
UA:
"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Web App Attack
🇫🇮
oh.mg
2025-06-09 11:04:05
(1 year ago)
[Mon Jun 09 13:04:04.678885 2025] [security2:error] [pid 1064358:tid 1064388] [client 206.189.88.148 ...
show more
[Mon Jun 09 13:04:04.678885 2025] [security2:error] [pid 1064358:tid 1064388] [client 206.189.88.148:56298] [client 206.189.88.148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mmn.name"] [uri "/sftp-config.json"] [unique_id "aEa_pA8M9SHHleI-bIgxygAAAI4"]
...
show less
Bad Web Bot
Web App Attack
🇩🇪
conseilgouz
2025-06-09 06:19:49
(1 year ago)
gie-22 : 8G : REQUEST_URI error=>/sftp-config.json
Hacking
🇫🇮
oh.mg
2025-06-09 00:39:49
(1 year ago)
[Mon Jun 09 02:39:48.420627 2025] [security2:error] [pid 1064380:tid 1064410] [client 206.189.88.148 ...
show more
[Mon Jun 09 02:39:48.420627 2025] [security2:error] [pid 1064380:tid 1064410] [client 206.189.88.148:0] [client 206.189.88.148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "mrman.net"] [uri "/sftp-config.json"] [unique_id "aEYtVD3JNN4B1YTnw5a3sgAAAMg"]
[Mon Jun 09 02:39:49.092164 2025] [security2:error] [pid 1064380:tid 1064414] [client 206.189.88.148:0] [client 206.189.88.148] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [t
...
show less
Bad Web Bot
Web App Attack
🇩🇪
sverson
2025-06-08 08:18:57
(1 year ago)
Mutliple unauthorized attempts to access web resources
Web App Attack
🇳🇱
JCB
2025-06-08 07:01:00
(1 year ago)
206.189.88.148 - - [08/Jun/2025:09:37:36 +0300] "GET /sftp-config.json HTTP/1.1" 403 199 "-" "Mozill ...
show more
206.189.88.148 - - [08/Jun/2025:09:37:36 +0300] "GET /sftp-config.json HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
206.189.88.148 - - [08/Jun/2025:09:37:37 +0300] "GET /.vscode/sftp.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Hacking
Web App Attack
🇫🇮
as211431.net
2025-06-08 03:24:54
(1 year ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1. ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: MANAGED_CHALLENGE
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
snappic
2025-06-08 02:29:32
(1 year ago)
Scanning for SFTP credentials [GET /sftp-config.json] [Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; ...
show more
Scanning for SFTP credentials [GET /sftp-config.json] [Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0]
show less
Bad Web Bot
Web App Attack
🇫🇷
Savoie
2025-06-08 01:10:00
(1 year ago)
206.189.88.148 ***.*** - [08/Jun/2025:03:10:58 +0200] "GET /sftp-config.json HTTP/1.1" 302 225 "-" " ...
show more
206.189.88.148 ***.*** - [08/Jun/2025:03:10:58 +0200] "GET /sftp-config.json HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
206.189.88.148 ***.*** - [08/Jun/2025:03:11:07 +0200] "GET /.vscode/sftp.json HTTP/1.1" 302 225 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Bad Web Bot
Web App Attack
2025-06-07 23:41:54
(1 year ago)
Infostealer / login credentials theft attempt: /sftp-config.json
Hacking
🇩🇪
www.Examensfragen.de
2025-06-07 20:33:58
(1 year ago)
Web Spam
Bad Web Bot
🇩🇪
conseilgouz
2025-06-07 18:52:51
(1 year ago)
vee-22 : 8G : REQUEST_URI error=>/sftp-config.json
Hacking
🇩🇪
Reinhard
2025-06-07 15:09:26
(1 year ago)
Parameter or path manipulation, hacking. /sftp-config.json
Hacking
🇩🇪
tentwentyfour
2025-06-07 14:51:03
(1 year ago)
Blocked for probing for web application vulnerabilities
Brute-Force
Web App Attack
🇩🇪
expandmade.com
2025-06-07 12:04:07
(1 year ago)
trolling for installation vulnerabilities [07/Jun/2025:12:04:07 "GET /.vscode/sftp.json"]
Web App Attack