🇩🇪
LRob.fr
2026-06-15 01:15:22
(2 days ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-14 20:05:43
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 16:05:32.895663 2026] [security2:error] [pid 20455:tid 20455] [client 2400:8901::2000:b3ff:fe41:2532:61746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "farmers123.com"] [uri "/sftp-config.json"] [unique_id "ai8JjE2tt72IJm5JPqsHkQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-06-14 19:38:36
(2 days ago)
[SunJun1421:38:30.5373272026][security2:error][pid2397640:tid2397711][client2400:8901::2000:b3ff:fe4 ...
show more
[SunJun1421:38:30.5373272026][security2:error][pid2397640:tid2397711][client2400:8901::2000:b3ff:fe41:2532:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"farmaciaferrari.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"ai8DNhdi3Jy3jZW4V59COwAAAIo\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 16:30:08
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 12:29:59.718697 2026] [security2:error] [pid 32351:tid 32351] [client 2400:8901::2000:b3ff:fe41:2532:56149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "esneuro.net"] [uri "/sftp-config.json"] [unique_id "ai7XB6TGuoysrcZfOJumVgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 14:04:42
(3 days ago)
(mod_security) mod_security (id:949110) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:949110) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 10:04:28.467640 2026] [security2:error] [pid 19404:tid 19404] [client 2400:8901::2000:b3ff:fe41:2532:58186] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "exorex.com"] [uri "/sftp-config.json"] [unique_id "ai607N0Zl4_z3sIIHiIU-QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Viveronese
2026-06-14 11:07:39
(3 days ago)
HTTP vulnerability scanning
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 08:40:00
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 04:39:56.466447 2026] [security2:error] [pid 29627:tid 29627] [client 2400:8901::2000:b3ff:fe41:2532:55483] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ferrarapanfitness.com"] [uri "/sftp-config.json"] [unique_id "ai5o3NOoyDL389v4FzDtBAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 07:51:59
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 03:51:54.416724 2026] [security2:error] [pid 10727:tid 10727] [client 2400:8901::2000:b3ff:fe41:2532:56313] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fabulouswire.net"] [uri "/sftp-config.json"] [unique_id "ai5dmljSDi94G9GQf8hLvwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 06:55:14
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 02:55:06.310031 2026] [security2:error] [pid 14507:tid 14522] [client 2400:8901::2000:b3ff:fe41:2532:50224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fatassparty.com"] [uri "/sftp-config.json"] [unique_id "ai5QSsukFiMoYk57ys5yqQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 05:35:17
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 01:35:12.965827 2026] [security2:error] [pid 14151:tid 14151] [client 2400:8901::2000:b3ff:fe41:2532:60364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radar24hrs.com"] [uri "/sftp-config.json"] [unique_id "ai49kA8-Q_mRDONKGzRuzgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 04:19:51
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 00:19:46.441876 2026] [security2:error] [pid 26746:tid 26746] [client 2400:8901::2000:b3ff:fe41:2532:56931] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eye7graphics.com"] [uri "/sftp-config.json"] [unique_id "ai4r4siKNBtTCFDipvO06wAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 02:41:18
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 22:41:11.911228 2026] [security2:error] [pid 5002:tid 5002] [client 2400:8901::2000:b3ff:fe41:2532:61317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "feiz.church"] [uri "/sftp-config.json"] [unique_id "ai4Ux3NQsNq9vHBsEvu2eQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 01:44:06
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 21:44:03.546419 2026] [security2:error] [pid 6657:tid 6657] [client 2400:8901::2000:b3ff:fe41:2532:49212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tttns.com"] [uri "/about-jason//sftp-config.json"] [unique_id "ai4HYwsECSdyVQh4AQCKMgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 01:22:10
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 21:22:05.935435 2026] [security2:error] [pid 31833:tid 31833] [client 2400:8901::2000:b3ff:fe41:2532:61173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "enriquejezik.com"] [uri "/sftp-config.json"] [unique_id "ai4CPX7Tx_NYZcCxwJWTUwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 20:46:03
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 2400:8901::2000:b3ff:fe41:2532 (Unknown): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 16:45:51.757082 2026] [security2:error] [pid 7254:tid 7254] [client 2400:8901::2000:b3ff:fe41:2532:65507] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cephedanisman.com"] [uri "/en/sftp-config.json"] [unique_id "ai3Bf8ml78nDe-Ys0bPnNQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack