🇨🇭
4server
2026-06-13 13:32:50
(2 days ago)
[SatJun1315:32:44.4013782026][security2:error][pid1377249:tid1377942][client93.152.58.8:0]ModSecurit ...
show more
[SatJun1315:32:44.4013782026][security2:error][pid1377249:tid1377942][client93.152.58.8:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"edomustech.com\"][uri\"/.vscode/sftp.json\"][unique_id\"ai1b_HoRq8p3hwAycVSblQAAARg\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 09:37:58
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadba ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 05:37:51.459650 2026] [security2:error] [pid 16658:tid 16658] [client 93.152.58.8:10464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "edgecomix.com"] [uri "/sftp-config.json"] [unique_id "ai0k72KxQYTw0R-csEkn2gAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 09:10:20
(2 days ago)
(mod_security) mod_security (id:210580) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadba ...
show more
(mod_security) mod_security (id:210580) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 05:10:15.370344 2026] [security2:error] [pid 25940:tid 25940] [client 93.152.58.8:35462] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_url. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||edfisherco.com|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_url: https:/edelweiss-berchtesgaden.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "edfisherco.com"] [uri "/.vscode/sftp.json"] [unique_id "ai0ed7FEdcP49KqKwpoSVwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nyt
2026-06-13 05:18:21
(2 days ago)
Deploy Config Probe
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 00:23:44
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadba ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 20:23:40.662098 2026] [security2:error] [pid 19889:tid 19889] [client 93.152.58.8:47712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ecodesarrollourbano.com"] [uri "/sftp-config.json"] [unique_id "aiyjDPQBh8xgi76odxX0mQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 18:35:17
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadba ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 14:35:12.113366 2026] [security2:error] [pid 12602:tid 12602] [client 93.152.58.8:7564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ebookthrillers.xyz"] [uri "/sftp-config.json"] [unique_id "aixRYFB13cExQdwQOrcnAAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 15:17:56
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadba ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 11:17:52.747370 2026] [security2:error] [pid 14970:tid 14970] [client 93.152.58.8:42334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eatinnola.com"] [uri "/sftp-config.json"] [unique_id "aiwjILRFMQYRab6JY_mwXwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-12 09:07:27
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadba ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 12 05:07:21.179357 2026] [security2:error] [pid 19403:tid 19403] [client 93.152.58.8:55470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "earthtwoworkshop.com"] [uri "/sftp-config.json"] [unique_id "aivMSdzJOElisH6lT-wgOQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 22:59:10
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadba ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 18:59:03.993253 2026] [security2:error] [pid 18498:tid 18498] [client 93.152.58.8:33660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dylancreates.org"] [uri "/sftp-config.json"] [unique_id "ais9t5diwVyZR3xsTtVB0gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
dwmosaics
2026-06-11 22:26:06
(3 days ago)
"GET /.vscode/sftp.json HTTP/1.1" 404 4966 "-" "Mozilla/5.0 (Windows NT 10....
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 14:33:57
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadba ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 10:33:50.284152 2026] [security2:error] [pid 18660:tid 18660] [client 93.152.58.8:18416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "duermaseaprisa.com"] [uri "/sftp-config.json"] [unique_id "airHTqcd7NlAcbGLNsGr3QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 10:16:11
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadba ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 06:16:07.598553 2026] [security2:error] [pid 6802:tid 6802] [client 93.152.58.8:38256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dsjostrom.com"] [uri "/sftp-config.json"] [unique_id "aiqK54ey_Wcukdn_dk4nnAAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 07:19:58
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadba ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 03:19:53.188829 2026] [security2:error] [pid 13544:tid 13544] [client 93.152.58.8:6350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drstilesdds.com"] [uri "/sftp-config.json"] [unique_id "aiphmRx6mhMcWi8NtgBxrQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 06:49:22
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadba ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 11 02:49:14.705936 2026] [security2:error] [pid 20823:tid 20836] [client 93.152.58.8:30824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drronaldhecker.com"] [uri "/sftp-config.json"] [unique_id "aipaanEzB1-e5SB5UD-6BgAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-11 03:52:25
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadba ...
show more
(mod_security) mod_security (id:210492) triggered by 93.152.58.8 (93-152-58-8.eurotel.managedbroadband.co.uk): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 23:52:17.887484 2026] [security2:error] [pid 17629:tid 17629] [client 93.152.58.8:22606] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drkerryklett.com"] [uri "/sftp-config.json"] [unique_id "aiow8SHuxpc5u6pSRBHxWwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack