🇺🇸
TPI-Abuse
2026-11-06 10:34:01
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 82.23.40.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:32:50.266000 2026] [security2:error] [pid 24155:tid 24155] [client 82.23.40.71:9594] ModSec ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.40.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 05:32:50.266000 2026] [security2:error] [pid 24155:tid 24155] [client 82.23.40.71:9594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "divineadventures.org"] [uri "/sftp-config.json"] [unique_id "au2s0uP8X28NszjEHsiOPQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-11-06 05:56:43
UTC ·
(1 day ago)
[FriNov0606:56:37.2245592026][security2:error][pid1992066:tid1992177][client82.23.40.71:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][li ...
show more
[FriNov0606:56:37.2245592026][security2:error][pid1992066:tid1992177][client82.23.40.71:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"studiokellybenessere.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"au1sFWIc2LQjSMod-fD5DAAAARE\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:32:18
UTC ·
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 82.23.40.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:32:11.989385 2026] [security2:error] [pid 4956:tid 4956] [client 82.23.40.71:24908] ModSecu ...
show more
(mod_security) mod_security (id:949110) triggered by 82.23.40.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:32:11.989385 2026] [security2:error] [pid 4956:tid 4956] [client 82.23.40.71:24908] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pleasejustfixit.org"] [uri "/sftp-config.json"] [unique_id "au1KO3_DkEOJYrxYzU_dqQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:35:30
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 82.23.40.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:35:24.440157 2026] [security2:error] [pid 12806:tid 12831] [client 82.23.40.71:3324] ModSec ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.40.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:35:24.440157 2026] [security2:error] [pid 12806:tid 12831] [client 82.23.40.71:3324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coloradosellers.com"] [uri "/sftp-config.json"] [unique_id "auh1fBJ8iRJ7INDykIkChgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:19:12
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 82.23.40.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:19:05.425121 2026] [security2:error] [pid 6196:tid 6196] [client 82.23.40.71:20428] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.40.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:19:05.425121 2026] [security2:error] [pid 6196:tid 6196] [client 82.23.40.71:20428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aguasolar.com"] [uri "/sftp-config.json"] [unique_id "auhxqcfp3UnJ5BJ9xSMNVAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 14:29:19
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 82.23.40.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 10:27:25.700938 2026] [security2:error] [pid 9858:tid 9858] [client 82.23.40.71:36500] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.40.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 10:27:25.700938 2026] [security2:error] [pid 9858:tid 9858] [client 82.23.40.71:36500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "78cardsofthetarot-tarotmancy-tarot-cards-and-tarot-readings.com"] [uri "/sftp-config.json"] [unique_id "auSpTXvJaxwrccTcZF5LNwAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 18:31:18
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.40.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 14:31:15.205404 2026] [security2:error] [pid 9919:tid 9919] [client 82.23.40.71:30180] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.40.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 14:31:15.205404 2026] [security2:error] [pid 9919:tid 9919] [client 82.23.40.71:30180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "awakenings.info"] [uri "/sftp-config.json"] [unique_id "atezc8xCyrnIEXI4l-03igAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 03:47:21
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 82.23.40.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 23:47:15.280529 2026] [security2:error] [pid 28986:tid 28986] [client 82.23.40.71:26416] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 82.23.40.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 23:47:15.280529 2026] [security2:error] [pid 28986:tid 28986] [client 82.23.40.71:26416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zenmonkeyproject.com"] [uri "/sftp-config.json"] [unique_id "atbkQ1kLhYMfe5OhgJjM6QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-19 01:26:04
UTC ·
(2 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: budyn.ovh | URI: /sftp-config.json | UA: Mozil ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: budyn.ovh | URI: /sftp-config.json | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
🇩🇪
LRob
2026-10-18 01:39:04
UTC ·
(2 weeks ago)
Secret file probe | method: GET | path: /.vscode/sftp.json | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Hacking
Web App Attack
🇩🇪
Packets-Decreaser.NET
2025-09-01 13:23:09
UTC ·
(1 year ago)
Incoming Layer 7 Flood Detected
DDoS Attack
Web Spam
