🇳🇱
Mangelot Hosting
2026-11-06 13:00:48
UTC ·
(7 hours ago)
(web_sensitive_file) srv201 Sensitive file probe (.env/.git/backup) 23.95.157.25 (US/United States/23-95-157-25-host.colocrossing.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:20:23
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 23.95.157.25 (23-95-157-25-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:20:15.868991 2026] [security2:error] [pid 1114325:tid 111 ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.157.25 (23-95-157-25-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:20:15.868991 2026] [security2:error] [pid 1114325:tid 1114335] [client 23.95.157.25:2798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "artthatfeedsthehomeless.org"] [uri "/sftp-config.json"] [unique_id "auhx77dzXaVnhIubEprEyAAAAUg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Carsten
2026-11-01 04:58:36
UTC ·
(5 days ago)
GET [.vscode/sftp.json]
Port Scan
🇺🇸
TPI-Abuse
2026-10-28 00:37:17
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 23.95.157.25 (23-95-157-25-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:35:44.617377 2026] [security2:error] [pid 27999:tid 28012 ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.157.25 (23-95-157-25-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 20:35:44.617377 2026] [security2:error] [pid 27999:tid 28012] [client 23.95.157.25:3046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leadingedgesupply.com"] [uri "/sftp-config.json"] [unique_id "auFDYCZm2dWi4JhLFbl8bAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 19:07:46
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 23.95.157.25 (23-95-157-25-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 15:07:40.408393 2026] [security2:error] [pid 5782:tid 5782] ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.157.25 (23-95-157-25-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 15:07:40.408393 2026] [security2:error] [pid 5782:tid 5782] [client 23.95.157.25:7538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jmichaelpope.com"] [uri "/sftp-config.json"] [unique_id "atuwfAEYyGvnkxBiWg__8AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-20 10:43:45
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 23.95.157.25 (23-95-157-25-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 06:43:40.183687 2026] [security2:error] [pid 28531:tid 28531 ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.157.25 (23-95-157-25-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 06:43:40.183687 2026] [security2:error] [pid 28531:tid 28531] [client 23.95.157.25:61264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rohanbyles.com.au"] [uri "/sftp-config.json"] [unique_id "atdF3BEoG6YBaj1Mcs16YQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 14:45:29
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 23.95.157.25 (23-95-157-25-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 10:45:23.802516 2026] [security2:error] [pid 8084:tid 8097] ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.157.25 (23-95-157-25-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 10:45:23.802516 2026] [security2:error] [pid 8084:tid 8097] [client 23.95.157.25:29108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sjstauffer.com"] [uri "/sftp-config.json"] [unique_id "atYtAwLtxf3Txg7wl94SKQAAAMs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-19 12:29:35
UTC ·
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 09:50:22
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 23.95.157.25 (23-95-157-25-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 05:50:18.425174 2026] [security2:error] [pid 4368:tid 4368] ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.157.25 (23-95-157-25-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 05:50:18.425174 2026] [security2:error] [pid 4368:tid 4368] [client 23.95.157.25:48600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shawnlayne.com"] [uri "/sftp-config.json"] [unique_id "atXn2owKRyZ3fLT8LrraigAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 09:58:12
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 23.95.157.25 (23-95-157-25-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 05:58:05.763020 2026] [security2:error] [pid 23512:tid 23512 ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.157.25 (23-95-157-25-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 05:58:05.763020 2026] [security2:error] [pid 23512:tid 23512] [client 23.95.157.25:38102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.literarylights.com"] [uri "/sftp-config.json"] [unique_id "atSYLalhzrQwVjtzoaAPPgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-18 03:03:54
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 23.95.157.25 (23-95-157-25-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:03:48.150483 2026] [security2:error] [pid 7295:tid 7295] ...
show more
(mod_security) mod_security (id:210492) triggered by 23.95.157.25 (23-95-157-25-host.colocrossing.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:03:48.150483 2026] [security2:error] [pid 7295:tid 7295] [client 23.95.157.25:9242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elessenux.com"] [uri "/sftp-config.json"] [unique_id "atQ3FHXsqDgEuPe0qopv3QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-08-06 16:31:14
UTC ·
(3 months ago)
[ThuAug0618:31:07.7451882026][security2:error][pid22044:tid22182][client23.95.157.25:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"[\\\\\\\\n\\\\\\\\r]\"atARGS_GET:message.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\ ...
show more
[ThuAug0618:31:07.7451882026][security2:error][pid22044:tid22182][client23.95.157.25:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"[\\\\\\\\n\\\\\\\\r]\"atARGS_GET:message.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"143\"][id\"390722\"][rev\"5\"][msg\"Atomicorp.comWAFRules:HTTPHeaderInjectionAttackviapayload\(CR/LFdetected\)\"][data\"MatchedData:\\\\x0dfoundwithinARGS_GET:message:Greetings\\\\x0d\\\\x0a\\\\x0d\\\\x0aSubmiteimeko.chinGoogle\'sSearchIndexsoitcanappearinGooglesearchresults\!\\\\x0d\\\\x0a\\\\x0d\\\\x0aFeatureeimeko.chtoday:\\\\x0d\\\\x0a\\\\x0d\\\\x0asearchindex.pro\"][severity\"CRITICAL\"][hostname\"www.eimeko.ch\"][uri\"/\"][unique_id\"anS2y8JgsGzd6xH5HJwrggAAARc\"]\,referer:https://www.eimeko.ch/
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
nowyouknow
2024-06-27 14:29:26
UTC ·
(2 years ago)
(From [email protected] ) Business-Changing Offer: Grab a 30-Day Trial
During my research I landed on lighthouse-chiro.com and sent this message from your website.
Discover the BEST solutions for building a highly profitable business QU ...
show more
(From [email protected] ) Business-Changing Offer: Grab a 30-Day Trial
During my research I landed on lighthouse-chiro.com and sent this message from your website.
Discover the BEST solutions for building a highly profitable business QUICKLY even if you suck at marketing.
Grab Complete Access to All 300+ Features In Our CRM Immediately.
- Zoom Support.
- Easy Onboarding Course.
- Zero Hidden Fees!
“Top Tier has made my life easier and more lucrative, by streamlining a good part of my business.”
Miss Singh Advisor
We’re told that TTC saves business owners an average of four hours each week, by streamlining even simple tasks. Saving at least an hour monthly on admin work covers the CRM cost.
Your benefit?
You Get To Turn Your Company Into A Client Lead Magnet!
It's all yours to take for a spin with a 30-day trial.
$20 per month after the trial.
And it comes with a 60-Day Satisfaction Guarantee
- There is no commitment required.
Click here.
https://toptiercrm.tech/
show less
Phishing
Web Spam
🇺🇸
oncord
2024-06-12 16:40:44
UTC ·
(2 years ago)
Form spam
Web Spam
