🇨🇭
4server
2026-11-08 00:16:27
UTC ·
(5 hours ago)
[SunNov0801:16:19.9949132026][security2:error][pid412775:tid412863][client45.134.139.216:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BL ...
show more
[SunNov0801:16:19.9949132026][security2:error][pid412775:tid412863][client45.134.139.216:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"cybertelgroup.com\"][uri\"/sftp-config.json\"][unique_id\"au-_U32S8s0r7Ex-tuvC5wAAAMk\"]
show less
Hacking
Web App Attack
🇮🇹
CoreTech srl
2026-11-06 04:43:56
UTC ·
(2 days ago)
cloudlinux2 fail2ban: 2026-11-06 05:39:02,800 fail2ban.actions [1651]: NOTICE [plesk-modsecurity] Unban 136.85.117.86cloudlinux2 fail2ban: 2026-11-06 05:39:06,001 fail2ban.filter [1651]: INFO [plesk-wordpress] Found 38.41.187.223 - ...
show more
cloudlinux2 fail2ban: 2026-11-06 05:39:02,800 fail2ban.actions [1651]: NOTICE [plesk-modsecurity] Unban 136.85.117.86cloudlinux2 fail2ban: 2026-11-06 05:39:06,001 fail2ban.filter [1651]: INFO [plesk-wordpress] Found 38.41.187.223 - 2026-11-06 05:39:05cloudlinux2 fail2ban: 2026-11-06 05:39:08,149 fail2ban.actions [1651]: NOTICE [plesk-wordpress] Ban 38.41.187.223cloudlinux2 fail2ban: 2026-11-06 05:39:08,065 fail2ban.filter [1651]: INFO [plesk-wordpress] Found 38.41.187.223 - 2026-11-06 05:39:07cloudlinux2 fail2ban: 2026-11-06 05:39:08,155 fail2ban.filter [1651]: INFO [recidive] Found 38.41.187.223 - 2026-11-06 05:39:08cloudlinux2 fail2ban: 2026-11-06 05:39:07,122 fail2ban.filter [1651]: INFO [plesk-wordpress] Found 38.41.187.223 - 2026-11-06 05:39:06cloudlinux2 fail2ban: 2026-11-06 05:39:42,738 fail2ban.filter [1651]: INFO [plesk-wordpress] Found 91.193.232.167 - 2026-11-06 05:39:41cloudlinux2 fail2ban: 2026-11-06 05:39:41,138 fail2ban.filt
show less
Web App Attack
🇳🇱
BlueWire Hosting
2026-11-05 19:34:06
UTC ·
(2 days ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 04:08:43
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:08:37.565340 2026] [security2:error] [pid 21893:tid 21893] [client 45.134.139.216:26008] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 23:08:37.565340 2026] [security2:error] [pid 21893:tid 21893] [client 45.134.139.216:26008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "belgiophar.com"] [uri "/sftp-config.json"] [unique_id "auqvxQGoTaNYpEGscJkUAgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-29 11:33:44
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 07:32:35.155513 2026] [security2:error] [pid 23346:tid 23346] [client 45.134.139.216:27664] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 29 07:32:35.155513 2026] [security2:error] [pid 23346:tid 23346] [client 45.134.139.216:27664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anus.net"] [uri "/sftp-config.json"] [unique_id "auMu04-SR5-DrVK2IzTqFgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 00:37:39
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:35:47.176804 2026] [security2:error] [pid 28138:tid 28152] [client 45.134.139.216:38302] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:35:47.176804 2026] [security2:error] [pid 28138:tid 28152] [client 45.134.139.216:38302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "woadwellness.com"] [uri "/sftp-config.json"] [unique_id "auFDY_7NGdPZYYR-g68ITgAAAMc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 18:11:59
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 14:10:31.077171 2026] [security2:error] [pid 4797:tid 4797] [client 45.134.139.216:28714] M ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 14:10:31.077171 2026] [security2:error] [pid 4797:tid 4797] [client 45.134.139.216:28714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "avanyupublishing.com"] [uri "/sftp-config.json"] [unique_id "at-Xl4Y9Tv3oLwDM9XL4ZgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 01:17:35
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 21:17:32.023179 2026] [security2:error] [pid 27334:tid 27334] [client 45.134.139.216:59878] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 21:17:32.023179 2026] [security2:error] [pid 27334:tid 27334] [client 45.134.139.216:59878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arsenaultartistmanagement.com"] [uri "/sftp-config.json"] [unique_id "at1YrMjWPJskSnI08lM_fQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-10-24 09:04:45
UTC ·
(2 weeks ago)
[SatOct2411:04:42.2968352026][security2:error][pid3126619:tid3126711][client45.134.139.216:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949- ...
show more
[SatOct2411:04:42.2968352026][security2:error][pid3126619:tid3126711][client45.134.139.216:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"verticalti.ch\"][uri\"/sftp-config.json\"][unique_id\"atx0qtwueq8tXKOZ_ZpIZAAAAQQ\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 13:19:44
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 45.134.139.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:19:41.155125 2026] [security2:error] [pid 15238:tid 15238] [client 45.134.139.216:26514] ...
show more
(mod_security) mod_security (id:210492) triggered by 45.134.139.216 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 09:19:41.155125 2026] [security2:error] [pid 15238:tid 15238] [client 45.134.139.216:26514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bywaterpress.com"] [uri "/sftp-config.json"] [unique_id "atTHbQ3_cHHyKI97eD4asgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-27 09:10:04
UTC ·
(4 months ago)
Web App Attack, Hacking
Hacking
Web App Attack