🇺🇸
TPI-Abuse
2026-11-14 09:53:26
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:53:18.560597 2026] [security2:error] [pid 9020:tid 9020] [client 95.163.148.69:17412] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:53:18.560597 2026] [security2:error] [pid 9020:tid 9020] [client 95.163.148.69:17412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.michaelkivisto.com"] [uri "/sftp-config.json"] [unique_id "avgvjj7959qenWNvTsvr-gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 09:36:14
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:36:08.597860 2026] [security2:error] [pid 14802:tid 14802] [client 95.163.148.69:26930] M ...
show more
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 04:36:08.597860 2026] [security2:error] [pid 14802:tid 14802] [client 95.163.148.69:26930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.al-harbi.com"] [uri "/m.html/sftp-config.json"] [unique_id "avgriMkqVNNkxu-Ftf4OzQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:08:56
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:08:49.859908 2026] [security2:error] [pid 31096:tid 31096] [client 95.163.148.69:9464] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:08:49.859908 2026] [security2:error] [pid 31096:tid 31096] [client 95.163.148.69:9464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jr2g.com"] [uri "/sftp-config.json"] [unique_id "avbhsQZRTnSlG_kRjwcEoQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:17:23
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:16:58.529853 2026] [security2:error] [pid 7942:tid 8040] [client 95.163.148.69:54426] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:16:58.529853 2026] [security2:error] [pid 7942:tid 8040] [client 95.163.148.69:54426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aapm.eu"] [uri "/sftp-config.json"] [unique_id "avbVigeNW1sIZKVL5jB7PgAAAwI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-11-13 01:13:09
UTC ·
(2 days ago)
[FriNov1302:13:04.6491052026][security2:error][pid2124808:tid2124913][client95.163.148.69:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][ ...
show more
[FriNov1302:13:04.6491052026][security2:error][pid2124808:tid2124913][client95.163.148.69:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"tourkomanis.ch\"][uri\"/.vscode/sftp.json\"][unique_id\"avZkIGY67aEMifGGwmbdlgAAAMw\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 10:33:12
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:33:03.033106 2026] [security2:error] [pid 12010:tid 12010] [client 95.163.148.69:27638] M ...
show more
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 05:33:03.033106 2026] [security2:error] [pid 12010:tid 12010] [client 95.163.148.69:27638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cubbylure.com"] [uri "/sftp-config.json"] [unique_id "avREX4Dp1Y3_JtlR8jxZJwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 01:32:36
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:32:31.310799 2026] [security2:error] [pid 7972:tid 7972] [client 95.163.148.69:18316] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 20:32:31.310799 2026] [security2:error] [pid 7972:tid 7972] [client 95.163.148.69:18316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4azadi.org"] [uri "/sftp-config.json"] [unique_id "auk5r_tOIN5Sq05ZSio3ugAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 16:51:59
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 11:51:50.685228 2026] [security2:error] [pid 20926:tid 20926] [client 95.163.148.69:33372] M ...
show more
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 11:51:50.685228 2026] [security2:error] [pid 20926:tid 20926] [client 95.163.148.69:33372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinnairdwoodworking.com"] [uri "/sftp-config.json"] [unique_id "aui_pvkIKIP7CxL2jU9L5QAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-11-01 23:05:43
UTC ·
(1 week ago)
Try to access /.vscode/sftp.json
Web App Attack
🇨🇭
4server
2026-10-31 12:46:21
UTC ·
(2 weeks ago)
[SatOct3113:46:05.7379522026][security2:error][pid1359732:tid1359786][client95.163.148.69:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][ ...
show more
[SatOct3113:46:05.7379522026][security2:error][pid1359732:tid1359786][client95.163.148.69:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\\\\\\\\.vscode/\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"1189\"][id\"350593\"][rev\"1\"][msg\"Atomicorp.comWAFRules:AttackBlocked-Dataleakage-attempttoaccessstoredvscodepasswords\"][severity\"CRITICAL\"][hostname\"4-server.com\"][uri\"/.vscode/sftp.json\"][unique_id\"auXjDfUIXFjbLLh1ZQcJLQAAAQc\"]
show less
Hacking
Web App Attack
🇩🇪
LRob
2026-10-29 14:27:25
UTC ·
(2 weeks ago)
Secret file probe | method: GET | path: /sftp-config.json | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 21:39:13
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 17:39:04.995851 2026] [security2:error] [pid 30271:tid 30271] [client 95.163.148.69:37766] M ...
show more
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 17:39:04.995851 2026] [security2:error] [pid 30271:tid 30271] [client 95.163.148.69:37766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wmbbqing.com"] [uri "/sftp-config.json"] [unique_id "ataN-EZ7uTl6hFd3dNvmtwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 00:34:26
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 20:34:16.544281 2026] [security2:error] [pid 10660:tid 10660] [client 95.163.148.69:56880] M ...
show more
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 20:34:16.544281 2026] [security2:error] [pid 10660:tid 10660] [client 95.163.148.69:56880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qyzaco.com"] [uri "/sftp-config.json"] [unique_id "atLCiLycq_JWhxokIIJjCgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 20:12:37
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 16:12:29.425074 2026] [security2:error] [pid 30463:tid 30463] [client 95.163.148.69:31072] M ...
show more
(mod_security) mod_security (id:210492) triggered by 95.163.148.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 16:12:29.425074 2026] [security2:error] [pid 30463:tid 30463] [client 95.163.148.69:31072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "happyvalleynh.org"] [uri "/sftp-config.json"] [unique_id "atKFLQK222T2AgCz6IE_pQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
