🇩🇪
4server
2026-11-15 02:09:23
UTC ·
(34 minutes ago)
[SunNov1503:09:18.5049172026][security2:error][pid717182:tid717310][client67.219.22.157:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][li ...
show more
[SunNov1503:09:18.5049172026][security2:error][pid717182:tid717310][client67.219.22.157:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"sanierung-pilzen-schimmel.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"avkUTg1V1wr20huxlrm7bQAAANc\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 10:07:40
UTC ·
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 67.219.22.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:07:05.387634 2026] [security2:error] [pid 23435:tid 23435] [client 67.219.22.157:50862] M ...
show more
(mod_security) mod_security (id:210492) triggered by 67.219.22.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:07:05.387634 2026] [security2:error] [pid 23435:tid 23435] [client 67.219.22.157:50862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/sftp-config.json"] [unique_id "avgyyZC7bnL2rEBEFI75dQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:57:13
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 67.219.22.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:57:08.077070 2026] [security2:error] [pid 18693:tid 18693] [client 67.219.22.157:29558] M ...
show more
(mod_security) mod_security (id:210492) triggered by 67.219.22.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:57:08.077070 2026] [security2:error] [pid 18693:tid 18693] [client 67.219.22.157:29558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thegrabbagshow.com"] [uri "/sftp-config.json"] [unique_id "avbe9KilDeQ79gYu9GXRwgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:41:18
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 67.219.22.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:41:10.679750 2026] [security2:error] [pid 631:tid 631] [client 67.219.22.157:52740] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 67.219.22.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:41:10.679750 2026] [security2:error] [pid 631:tid 631] [client 67.219.22.157:52740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kozyramodularhomebuilder.com"] [uri "/sftp-config.json"] [unique_id "avbbNlXYDApMBE7vq-R7jQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 10:35:19
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 67.219.22.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:32:53.023385 2026] [security2:error] [pid 11080:tid 11080] [client 67.219.22.157:22574] M ...
show more
(mod_security) mod_security (id:210492) triggered by 67.219.22.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:32:53.023385 2026] [security2:error] [pid 11080:tid 11080] [client 67.219.22.157:22574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "towida.org"] [uri "/sftp-config.json"] [unique_id "au2s1ZsyosoOxACNDB8KmAAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 10:52:02
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 67.219.22.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:51:54.690151 2026] [security2:error] [pid 31723:tid 31723] [client 67.219.22.157:49310] M ...
show more
(mod_security) mod_security (id:210492) triggered by 67.219.22.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:51:54.690151 2026] [security2:error] [pid 31723:tid 31723] [client 67.219.22.157:49310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drgtek.com"] [uri "/sftp-config.json"] [unique_id "auxfyn-Ro-f5xtpI4sJVeQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:21:23
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 67.219.22.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:21:15.552784 2026] [security2:error] [pid 27087:tid 27087] [client 67.219.22.157:42342] M ...
show more
(mod_security) mod_security (id:210492) triggered by 67.219.22.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:21:15.552784 2026] [security2:error] [pid 27087:tid 27087] [client 67.219.22.157:42342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jmichaelpope.com"] [uri "/sftp-config.json"] [unique_id "auhyK-_velos7v9TaP7YnwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-24 00:14:45
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 67.219.22.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:14:21.883711 2026] [security2:error] [pid 10080:tid 10080] [client 67.219.22.157:15312] M ...
show more
(mod_security) mod_security (id:210492) triggered by 67.219.22.157 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:14:21.883711 2026] [security2:error] [pid 10080:tid 10080] [client 67.219.22.157:15312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/sftp-config.json"] [unique_id "atv4XYdSTQf9OY-0aeTU4gAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-10-21 00:08:00
UTC ·
(3 weeks ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
2020-11-23 04:00:00
UTC ·
(5 years ago)
"Participating in a credential stuffing attack against application"
Brute-Force
2020-11-23 04:00:00
UTC ·
(5 years ago)
"Participating in a credential stuffing attack against application"
Brute-Force
2020-11-23 04:00:00
UTC ·
(5 years ago)
"Participating in a credential stuffing attack against application"
Brute-Force
2020-11-23 04:00:00
UTC ·
(5 years ago)
"Participating in a credential stuffing attack against application"
Brute-Force
