๐บ๐ธ
TPI-Abuse
2026-06-27 10:27:24
(16 hours ago)
(mod_security) mod_security (id:949110) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroad ...
show more
(mod_security) mod_security (id:949110) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 06:27:19.462166 2026] [security2:error] [pid 20404:tid 20404] [client 93.152.22.95:44070] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "lenukuhivabookings.com"] [uri "/sftp-config.json"] [unique_id "aj-lh5UvpW_2kkriLQGQXAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-27 07:27:13
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroad ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 27 03:27:09.478178 2026] [security2:error] [pid 14385:tid 14385] [client 93.152.22.95:63920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lemay.design"] [uri "/sftp-config.json"] [unique_id "aj97TVStL0CSnGBX6k-MzwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 20:51:55
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroad ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 16:51:49.125038 2026] [security2:error] [pid 5903:tid 5903] [client 93.152.22.95:35664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lebarca.com"] [uri "/sftp-config.json"] [unique_id "aj7mZQ78j7bsg-rwanRoQQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 15:22:59
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroad ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 11:22:54.456029 2026] [security2:error] [pid 18311:tid 18389] [client 93.152.22.95:8776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leadingedgesupply.com"] [uri "/sftp-config.json"] [unique_id "aj6ZTmiCYT_krMmOXofeEQAAAI8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 06:35:05
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroad ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 02:34:57.940185 2026] [security2:error] [pid 14223:tid 14223] [client 93.152.22.95:41856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lawrencehale.com"] [uri "/sftp-config.json"] [unique_id "aj4dkT1MbV9kAoyP3k0pswAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 05:18:39
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroad ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 01:18:31.829730 2026] [security2:error] [pid 20567:tid 20567] [client 93.152.22.95:12146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.news.aguasolar.com"] [uri "/blog//sftp-config.json"] [unique_id "aj4Lp8ELB-TxqQhlE7kVQgAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 02:58:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroad ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 22:58:52.037484 2026] [security2:error] [pid 5574:tid 5574] [client 93.152.22.95:33742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "laurengardner.org"] [uri "/sftp-config.json"] [unique_id "aj3q7PQcU96Kr5GTtIPUEwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
iNetWorker
2026-06-26 00:39:31
(2 days ago)
trolling for resource vulnerabilities
Web App Attack
๐จ๐ญ
4server
2026-06-25 17:20:35
(2 days ago)
[ThuJun2519:20:28.3410162026][security2:error][pid2819552:tid2819627][client93.152.22.95:0]ModSecuri ...
show more
[ThuJun2519:20:28.3410162026][security2:error][pid2819552:tid2819627][client93.152.22.95:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"larademarco.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"aj1jXI_ahUQ8xidpTNZC5gAAAAs\"]
show less
Hacking
Web App Attack
๐ฎ๐ฉ
Burayot
2026-06-25 16:11:11
(2 days ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 93.152.22.95 (FR/France/93-152-22-95 ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 93.152.22.95 (FR/France/93-152-22-95.eurotel.managedbroadband.co.uk): 1 in the last 3600 secs
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-25 01:11:03
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroad ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 21:10:56.182778 2026] [security2:error] [pid 9964:tid 9964] [client 93.152.22.95:64348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makegoodsausage.com"] [uri "/sftp-config.json"] [unique_id "ajyAIBoFOouSSDyEAmdsLwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-24 21:23:33
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroad ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 17:23:27.396921 2026] [security2:error] [pid 9829:tid 9829] [client 93.152.22.95:45874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mairslair.com"] [uri "/sftp-config.json"] [unique_id "ajxKz-6xcRkzXEIbzGR4YAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-24 20:06:10
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroad ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 16:06:05.921183 2026] [security2:error] [pid 8733:tid 8733] [client 93.152.22.95:32048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atticlodgeoutdoorlearningcenter.com"] [uri "/sftp-config.json"] [unique_id "ajw4rbnaWwotkOSBVMWLzwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-24 16:11:36
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroad ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 12:11:29.270710 2026] [security2:error] [pid 18114:tid 18114] [client 93.152.22.95:10998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magodarman.com"] [uri "/sftp-config.json"] [unique_id "ajwBsSxwsTtKt8uHOoQQggAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-24 12:25:06
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroad ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.22.95 (93-152-22-95.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 08:24:58.755110 2026] [security2:error] [pid 7302:tid 7302] [client 93.152.22.95:28490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "magacine.tv"] [uri "/sftp-config.json"] [unique_id "ajvMmqvXQ239XUa3xnjFPwAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack