๐ฌ๐ง
consul.to
2026-07-31 02:50:00
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐ฎ๐น
mediarama.com
2026-07-30 06:04:52
(1 day ago)
Banned by Fail2Ban
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-30 02:32:47
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 219.117.219.36 (deb12.tacmic-atr.biz): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 219.117.219.36 (deb12.tacmic-atr.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 22:32:43.349025 2026] [security2:error] [pid 9544:tid 9544] [client 219.117.219.36:59756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.domainexecs.com"] [uri "/sftp-config.json"] [unique_id "amq3y7lfyFsnj_wD9yiQwwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-07-30 01:31:30
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-30 00:44:09
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 219.117.219.36 (deb12.tacmic-atr.biz): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 219.117.219.36 (deb12.tacmic-atr.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 20:44:00.516796 2026] [security2:error] [pid 2309268:tid 2309268] [client 219.117.219.36:38238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jmichaelpope.com"] [uri "/sftp-config.json"] [unique_id "amqeUDuyKd2sEeSss87_PAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-29 23:45:30
(2 days ago)
Blocked by ModSec and CSF
Port Scan
๐ง๐ช
cmbplf
2026-07-29 20:33:30
(2 days ago)
175 requests with url.path *config.json
Brute-Force
Bad Web Bot
๐ซ๐ท
masterguru
2026-07-29 20:21:35
(2 days ago)
BAD BOT - Detected and Blocked.. Matched phrase "aiohttp" at REQUEST_HEADERS:User-Agent. (1100000-13 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "aiohttp" at REQUEST_HEADERS:User-Agent. (1100000-135)
show less
Bad Web Bot
๐ช๐ธ
masterguru
2026-07-29 19:45:10
(2 days ago)
BAD BOT - Detected and Blocked.. Matched phrase "aiohttp" at REQUEST_HEADERS:User-Agent. (1100000-12 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "aiohttp" at REQUEST_HEADERS:User-Agent. (1100000-122)
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-07-29 16:29:53
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 219.117.219.36 (deb12.tacmic-atr.biz): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 219.117.219.36 (deb12.tacmic-atr.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 12:29:45.837637 2026] [security2:error] [pid 2664714:tid 2664714] [client 219.117.219.36:57082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "baiaosantos.com"] [uri "/sftp-config.json"] [unique_id "amoqedwWiNJJcu07AoYVNwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-07-29 14:39:17
(2 days ago)
Bad bot ignoring robot.txt
Bad Web Bot
๐ซ๐ท
masterguru
2026-07-29 11:45:06
(2 days ago)
BAD BOT - Detected and Blocked.. Matched phrase "python" at REQUEST_HEADERS:User-Agent. (1100000-196 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "python" at REQUEST_HEADERS:User-Agent. (1100000-196)
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-07-29 03:30:00
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 219.117.219.36 (deb12.tacmic-atr.biz): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 219.117.219.36 (deb12.tacmic-atr.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 23:29:57.214457 2026] [security2:error] [pid 3672150:tid 3672150] [client 219.117.219.36:43240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bentonflybox.com"] [uri "/sftp-config.json"] [unique_id "amlztUvU_tWfRVbLxQI7dAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-29 02:06:41
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 219.117.219.36 (deb12.tacmic-atr.biz): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 219.117.219.36 (deb12.tacmic-atr.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 22:06:37.389774 2026] [security2:error] [pid 1191988:tid 1191988] [client 219.117.219.36:48430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "canadianwildlifemuseum.com"] [uri "/sftp-config.json"] [unique_id "amlgLSlP3uucLIFq-nStaQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-29 00:09:36
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 219.117.219.36 (deb12.tacmic-atr.biz): 1 in the ...
show more
(mod_security) mod_security (id:210492) triggered by 219.117.219.36 (deb12.tacmic-atr.biz): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 20:09:28.801829 2026] [security2:error] [pid 3972831:tid 3972831] [client 219.117.219.36:57566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "catzpaw.com"] [uri "/sftp-config.json"] [unique_id "amlEuMP49w6kGUFeyOrQ8gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack