201.24.162.34

(mod_security) mod_security (id:210492) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:16:36.462742 2026] [security2:error] [pid 14781:tid 14781] [client 201.24.162.34:58994] M ... show more (mod_security) mod_security (id:210492) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:16:36.462742 2026] [security2:error] [pid 14781:tid 14781] [client 201.24.162.34:58994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.danzadance.org"] [uri "/sftp-config.json"] [unique_id "avTpRDe45DRgHVMp7h0I5QAAAAw"] show less

(mod_security) mod_security (id:210492) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:11:40.440638 2026] [security2:error] [pid 29522:tid 29522] [client 201.24.162.34:64002] M ... show more (mod_security) mod_security (id:210492) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:11:40.440638 2026] [security2:error] [pid 29522:tid 29522] [client 201.24.162.34:64002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "waleed-alshalan.com"] [uri "/sftp-config.json"] [unique_id "avMYDJdg2gBcQya_RanLugAAAAI"] show less

(mod_security) mod_security (id:210492) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:09:00.745006 2026] [security2:error] [pid 2114:tid 2158] [client 201.24.162.34:7602] ModS ... show more (mod_security) mod_security (id:210492) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 00:09:00.745006 2026] [security2:error] [pid 2114:tid 2158] [client 201.24.162.34:7602] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "absurdotron.com"] [uri "/sftp-config.json"] [unique_id "avKm7Elnwd7Z6AfZ_5ewUQAAAQs"] show less

(mod_security) mod_security (id:210492) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 18:21:03.459132 2026] [security2:error] [pid 3420:tid 3420] [client 201.24.162.34:49212] Mod ... show more (mod_security) mod_security (id:210492) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 18:21:03.459132 2026] [security2:error] [pid 3420:tid 3420] [client 201.24.162.34:49212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mitchellart.com"] [uri "/sftp-config.json"] [unique_id "auka3_Mr8R0ijkMmHUls-gAAAAE"] show less

(mod_security) mod_security (id:210492) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:36:05.557843 2026] [security2:error] [pid 3501:tid 3501] [client 201.24.162.34:11612] Mod ... show more (mod_security) mod_security (id:210492) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:36:05.557843 2026] [security2:error] [pid 3501:tid 3501] [client 201.24.162.34:11612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kinesiologiaenmovimiento.com"] [uri "/sftp-config.json"] [unique_id "auh1pTkE9MA7bp-3Z2Z0ewAAAAU"] show less

(mod_security) mod_security (id:210492) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 11:07:27.136627 2026] [security2:error] [pid 8068:tid 8068] [client 201.24.162.34:25366] Mod ... show more (mod_security) mod_security (id:210492) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 11:07:27.136627 2026] [security2:error] [pid 8068:tid 8068] [client 201.24.162.34:25366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brucerohrphotography.com"] [uri "/sftp-config.json"] [unique_id "at4bL9_AqPI5mC-Khb6EtAAAAAo"] show less

GET /.vscode/sftp.json HTTP/1.1

(mod_security) mod_security (id:210492) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:09:34.290703 2026] [security2:error] [pid 19628:tid 19654] [client 201.24.162.34:28774] M ... show more (mod_security) mod_security (id:210492) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 20:09:34.290703 2026] [security2:error] [pid 19628:tid 19654] [client 201.24.162.34:28774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "juantrece.com"] [uri "/sftp-config.json"] [unique_id "atv3PpqslfMnA1odfhqQEgAAAIs"] show less

(mod_security) mod_security (id:210492) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 19:32:11.296244 2026] [security2:error] [pid 5301:tid 5301] [client 201.24.162.34:8754] ModS ... show more (mod_security) mod_security (id:210492) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 19:32:11.296244 2026] [security2:error] [pid 5301:tid 5301] [client 201.24.162.34:8754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "box903.com"] [uri "/sftp-config.json"] [unique_id "atf5-6Iv_YAH3x6wnpSMIgAAAB0"] show less

(mod_security) mod_security (id:210580) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 15:25:23.558327 2026] [security2:error] [pid 27806:tid 27806] [client 201.24.162.34:38890] M ... show more (mod_security) mod_security (id:210580) triggered by 201.24.162.34 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 15:25:23.558327 2026] [security2:error] [pid 27806:tid 27806] [client 201.24.162.34:38890] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "sftp-config.json" at REQUEST_COOKIES:handl_landing_page. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||casagrotto.com|F|2"] [data "Matched Data: sftp-config.json found within REQUEST_COOKIES:handl_landing_page: https:/careercoachsanfrancisco.com/sftp-config.json"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "casagrotto.com"] [uri "/.vscode/sftp.json"] [unique_id "atUdI-LGwtq9018wa2nzLgAAAAI"] show less

Automated account enumeration: unauthenticated email-existence lookups against a mobile app API with a spoofed iOS app user agent. This IP belongs to a rotating proxy pool of ~2,000 IPs that sent up to ~39,000 lookups per day since September 2026.