2026-11-12 19:56:53
UTC ·
(23 hours ago)
IM360 WAF: Direct access to editor deployment file MV:/.vscode/sftp.json
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 03:58:45
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 23.109.205.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 22:58:38.858025 2026] [security2:error] [pid 6944:tid 6944] [client 23.109.205.171:59174] M ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.205.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 22:58:38.858025 2026] [security2:error] [pid 6944:tid 6944] [client 23.109.205.171:59174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "willmarksynthetics.com"] [uri "/sftp-config.json"] [unique_id "avU5bnf58tiJ9TQesTIqVQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-12 02:26:49
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 23.109.205.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 21:26:46.194705 2026] [security2:error] [pid 20158:tid 20158] [client 23.109.205.171:37696] ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.205.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 21:26:46.194705 2026] [security2:error] [pid 20158:tid 20158] [client 23.109.205.171:37696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "title34.com"] [uri "/sftp-config.json"] [unique_id "avUj5pZG5znv6El3jKwqWwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 18:23:32
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 23.109.205.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:23:24.901357 2026] [security2:error] [pid 32118:tid 32143] [client 23.109.205.171:59228] ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.205.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:23:24.901357 2026] [security2:error] [pid 32118:tid 32143] [client 23.109.205.171:59228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "livingalegacybulldogges.com"] [uri "/sftp-config.json"] [unique_id "avSynPHB9b0wg0Vo6MZS7QAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 09:34:14
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 23.109.205.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:34:09.867691 2026] [security2:error] [pid 1223:tid 1223] [client 23.109.205.171:3754] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.205.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:34:09.867691 2026] [security2:error] [pid 1223:tid 1223] [client 23.109.205.171:3754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "darnorb.com"] [uri "/sftp-config.json"] [unique_id "auW2ES42t5FYP_85MTDu7gAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 17:24:30
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 23.109.205.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 13:23:45.764044 2026] [security2:error] [pid 27429:tid 27429] [client 23.109.205.171:50232] ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.205.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 13:23:45.764044 2026] [security2:error] [pid 27429:tid 27429] [client 23.109.205.171:50232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jpfamilyllc.com"] [uri "/sftp-config.json"] [unique_id "at-MoWan6BfWtXRng-MRdgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-20 12:44:37
UTC ·
(3 weeks ago)
Secret file probe | method: GET | path: /.vscode/sftp.json | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 07:57:50
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 23.109.205.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 03:57:44.488265 2026] [security2:error] [pid 970:tid 970] [client 23.109.205.171:41756] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.205.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 03:57:44.488265 2026] [security2:error] [pid 970:tid 970] [client 23.109.205.171:41756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unilabkenya.com"] [uri "/sftp-config.json"] [unique_id "atce-DJGInlAlywCR5tUlwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-19 14:58:49
UTC ·
(3 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 16:53:29
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 23.109.205.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 12:53:20.113008 2026] [security2:error] [pid 1199:tid 1199] [client 23.109.205.171:5254] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 23.109.205.171 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 12:53:20.113008 2026] [security2:error] [pid 1199:tid 1199] [client 23.109.205.171:5254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cgcontinental.com"] [uri "/sftp-config.json"] [unique_id "atT5gIZkvo0Mbz3i2svRvAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
