🇷🇴
clauss
2026-11-14 12:27:25
UTC ·
(18 hours ago)
142.252.11.65 - - [14/Nov/2026:14:27:24 +0200] "GET /.vscode/sftp.json HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
142.252.11.65 - - [14/Nov/2026:14:27:25 +0200 ...
show more
142.252.11.65 - - [14/Nov/2026:14:27:24 +0200] "GET /.vscode/sftp.json HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
142.252.11.65 - - [14/Nov/2026:14:27:25 +0200] "GET /.vscode/sftp.json HTTP/2.0" 404 27968 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 10:07:53
UTC ·
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:07:05.015550 2026] [security2:error] [pid 23434:tid 23434] [client 142.252.11.65:47156] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 14 05:07:05.015550 2026] [security2:error] [pid 23434:tid 23434] [client 142.252.11.65:47156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/sftp-config.json"] [unique_id "avgyyTMyM-G-g2F-jsm0wAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 10:28:31
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:28:25.942739 2026] [security2:error] [pid 910:tid 910] [client 142.252.11.65:49586] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:28:25.942739 2026] [security2:error] [pid 910:tid 910] [client 142.252.11.65:49586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jrpiano.com"] [uri "/sftp-config.json"] [unique_id "avbmSRUifqHIY1d2WerFYgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:39:52
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:39:49.385078 2026] [security2:error] [pid 31467:tid 31467] [client 142.252.11.65:9530] Mo ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:39:49.385078 2026] [security2:error] [pid 31467:tid 31467] [client 142.252.11.65:9530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sbiusa.org"] [uri "/sftp-config.json"] [unique_id "avTutbnJmUl5Z8alFXpaKQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:08:43
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:08:38.366292 2026] [security2:error] [pid 24486:tid 24486] [client 142.252.11.65:18494] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:08:38.366292 2026] [security2:error] [pid 24486:tid 24486] [client 142.252.11.65:18494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abilityimprinting.com"] [uri "/sftp-config.json"] [unique_id "avTnZqRDiufpVAgNURvWKQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 18:00:11
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:00:04.676395 2026] [security2:error] [pid 18171:tid 18171] [client 142.252.11.65:18868] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 13:00:04.676395 2026] [security2:error] [pid 18171:tid 18171] [client 142.252.11.65:18868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "birdsofnewcaledonia.com"] [uri "/sftp-config.json"] [unique_id "avStJDti0bcjUI2LqzlfmQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 03:14:02
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 22:13:56.837250 2026] [security2:error] [pid 29602:tid 29602] [client 142.252.11.65:57148] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 22:13:56.837250 2026] [security2:error] [pid 29602:tid 29602] [client 142.252.11.65:57148] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "worthhomes4rent.com"] [uri "/sftp-config.json"] [unique_id "avPddMMErtrbaxWhoklMYQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-11-09 11:19:56
UTC ·
(5 days ago)
[redacted] 142.252.11.65 - - [09/Nov/2026:12:19:52 +0100] "GET /.vscode/[redacted] HTTP/2.0" 301 299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 142.252.11.65 - - [0 ...
show more
[redacted] 142.252.11.65 - - [09/Nov/2026:12:19:52 +0100] "GET /.vscode/[redacted] HTTP/2.0" 301 299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" [redacted] 142.252.11.65 - - [09/Nov/2026:12:19:53 +0100] "GET /fr/.vscode/[redacted]/ HTTP/2.0" 404 34945 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 03:27:57
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:27:53.096384 2026] [security2:error] [pid 3521:tid 3521] [client 142.252.11.65:4428] ModS ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:27:53.096384 2026] [security2:error] [pid 3521:tid 3521] [client 142.252.11.65:4428] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "talentstar.com"] [uri "/sftp-config.json"] [unique_id "au1JOdHyqYk4x_Kjl_5VFgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:34:17
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:34:12.253096 2026] [security2:error] [pid 20878:tid 20878] [client 142.252.11.65:39130] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:34:12.253096 2026] [security2:error] [pid 20878:tid 20878] [client 142.252.11.65:39130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "independentmusicconference.com"] [uri "/sftp-config.json"] [unique_id "auh1NIDE_eA09TSTOdckaQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 05:32:15
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 00:31:23.395268 2026] [security2:error] [pid 32096:tid 32096] [client 142.252.11.65:29254] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 00:31:23.395268 2026] [security2:error] [pid 32096:tid 32096] [client 142.252.11.65:29254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "michaelholdawayvideos.info"] [uri "/sftp-config.json"] [unique_id "auggKyWfEeTN5w2GNE9_fgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-11-01 20:17:58
UTC ·
(1 week ago)
(web_sensitive_file) srv201 Sensitive file probe (.env/.git/backup) 142.252.11.65 (IT/Italy/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 08:52:38
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:52:33.951591 2026] [security2:error] [pid 30091:tid 30128] [client 142.252.11.65:12714] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:52:33.951591 2026] [security2:error] [pid 30091:tid 30128] [client 142.252.11.65:12714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boxvalleyrockers.com"] [uri "/sftp-config.json"] [unique_id "auWsUXBWtNFjrfTQVGGqyAAAAYQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 11:32:00
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:31:49.575477 2026] [security2:error] [pid 24770:tid 24770] [client 142.252.11.65:18946] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 07:31:49.575477 2026] [security2:error] [pid 24770:tid 24770] [client 142.252.11.65:18946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "10bestrealtors.com"] [uri "/sftp-config.json"] [unique_id "auSAJTIpr7rqDDVXUODvhQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 05:07:50
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 01:06:08.489918 2026] [security2:error] [pid 16239:tid 16239] [client 142.252.11.65:48044] M ...
show more
(mod_security) mod_security (id:210492) triggered by 142.252.11.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 01:06:08.489918 2026] [security2:error] [pid 16239:tid 16239] [client 142.252.11.65:48044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lamanchaorchards.com"] [uri "/sftp-config.json"] [unique_id "auAxQOsLeq21VTOt8576iQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
