🇺🇸
TPI-Abuse
2026-06-30 08:48:33
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 04:48:26.115994 2026] [security2:error] [pid 28657:tid 28657] [client 31.42.135.46:33840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gbcwoodbine.org"] [uri "/sftp-config.json"] [unique_id "akOC2t1ITjot9wLLim6_7QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-29 22:37:27
(19 hours ago)
31.42.135.46 - - [29/Jun/2026:22:37:25 +0000] "GET /.vscode/sftp.json HTTP/1.1" 302 645 "-" "Mozilla ...
show more
31.42.135.46 - - [29/Jun/2026:22:37:25 +0000] "GET /.vscode/sftp.json HTTP/1.1" 302 645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 08:17:45
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 29 04:17:39.620612 2026] [security2:error] [pid 6980:tid 6980] [client 31.42.135.46:11608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gandmaquatics.com"] [uri "/sftp-config.json"] [unique_id "akIqI8wr8Zr-nXVvsNon4AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-29 03:46:43
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210730) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 23:46:38.341544 2026] [security2:error] [pid 28123:tid 28123] [client 31.42.135.46:22708] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gamepart.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gamepart.com"] [uri "/home/tancedi1/gamepart.com"] [unique_id "akHqnhIGBufTLZFlIawTvAAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 16:31:13
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 12:31:05.037851 2026] [security2:error] [pid 23644:tid 23644] [client 31.42.135.46:52968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gaeltv.com"] [uri "/sftp-config.json"] [unique_id "akFMSSQ7jhnN8wprtClZzgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
barbarella
2026-06-28 14:13:41
(2 days ago)
unauthorized access to Visual Studio Code - SFTP Extension (GET /.vscode/sftp.json)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-28 13:05:35
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 28 09:05:28.804127 2026] [security2:error] [pid 25354:tid 25375] [client 31.42.135.46:5110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gabegabel.com"] [uri "/sftp-config.json"] [unique_id "akEcGMtB9Vjp_nHQdD5zzQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-28 03:59:16
(2 days ago)
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy ...
show more
Probing for known exploit paths (.env, .git, wp-admin, shell files, etc.). Single-strike ban policy — zero tolerance for exploit scanning. Banned Jun 28, 03:59 UTC. Origin: Germany, Frankfurt am Main.
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-06-26 16:46:37
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 09:16:00
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 05:15:56.155793 2026] [security2:error] [pid 17786:tid 17786] [client 31.42.135.46:56526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "franklycommerce.com"] [uri "/sftp-config.json"] [unique_id "aj5DTFTjTS0QN08GI_HWdQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 08:14:28
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 26 04:14:24.356806 2026] [security2:error] [pid 11614:tid 11614] [client 31.42.135.46:35108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "francoiseroy.com"] [uri "/sftp-config.json"] [unique_id "aj404JgruXDp4O0TbliwEAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 03:44:58
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 23:44:52.210151 2026] [security2:error] [pid 6164:tid 6164] [client 31.42.135.46:51726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "foxmm.com"] [uri "/sftp-config.json"] [unique_id "aj31tLWeIiVLtTAHuF_jVgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 16:29:59
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 12:29:53.543979 2026] [security2:error] [pid 3975:tid 3996] [client 31.42.135.46:55912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "foresthillseast.com"] [uri "/sftp-config.json"] [unique_id "aj1XgVIRdl7xsygtZ_suhwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
openstrike.co.uk
2026-06-04 05:13:20
(3 weeks ago)
32 attacks on password grabbing URLs:
GET /.vscode/sftp.json HTTP/1.1
Hacking
🇺🇸
TPI-Abuse
2026-05-31 03:42:23
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.42.135.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 23:42:18.840031 2026] [security2:error] [pid 32131:tid 32131] [client 31.42.135.46:16944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boraimpact.com"] [uri "/sftp-config.json"] [unique_id "ahuuGjXhorWTFPXbVg9p3QAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack