🇩🇪
big-cloud.nl
2026-11-15 10:13:48
UTC ·
(8 hours ago)
Try to access /.vscode/sftp.json
Web App Attack
🇳🇱
Mangelot Hosting
2026-11-15 03:14:28
UTC ·
(15 hours ago)
(web_sensitive_file) srv104 Sensitive file probe (.env/.git/backup) 89.117.208.62 (IN/India/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇺🇸
TPI-Abuse
2026-11-13 09:40:22
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 89.117.208.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:40:14.804660 2026] [security2:error] [pid 30152:tid 30152] [client 89.117.208.62:33366] M ...
show more
(mod_security) mod_security (id:210492) triggered by 89.117.208.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 04:40:14.804660 2026] [security2:error] [pid 30152:tid 30152] [client 89.117.208.62:33366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thegreatleapforward.com"] [uri "/boxofrain.html/sftp-config.json"] [unique_id "avba_skWv5-snm6BVjd74AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-11 22:31:46
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 89.117.208.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:31:37.672483 2026] [security2:error] [pid 20086:tid 20086] [client 89.117.208.62:62302] M ...
show more
(mod_security) mod_security (id:210492) triggered by 89.117.208.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 11 17:31:37.672483 2026] [security2:error] [pid 20086:tid 20086] [client 89.117.208.62:62302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.voodooshop.com"] [uri "/sftp-config.json"] [unique_id "avTsyePIR43jwgBjE0kKEQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 08:16:05
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 89.117.208.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:15:59.010721 2026] [security2:error] [pid 8826:tid 8826] [client 89.117.208.62:19308] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 89.117.208.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 04:15:59.010721 2026] [security2:error] [pid 8826:tid 8826] [client 89.117.208.62:19308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "calendarcardsholiday.com"] [uri "/sftp-config.json"] [unique_id "auWjv4QorVtgKjclVUcuKwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 12:57:49
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 89.117.208.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 08:57:43.982398 2026] [security2:error] [pid 21359:tid 21359] [client 89.117.208.62:25724] M ...
show more
(mod_security) mod_security (id:210492) triggered by 89.117.208.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 08:57:43.982398 2026] [security2:error] [pid 21359:tid 21359] [client 89.117.208.62:25724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bacpool.com"] [uri "/sftp-config.json"] [unique_id "auSURyeZpuRmWE-H2D5RKQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-26 18:12:44
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 89.117.208.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 14:10:42.881379 2026] [security2:error] [pid 14487:tid 14487] [client 89.117.208.62:35282] M ...
show more
(mod_security) mod_security (id:210492) triggered by 89.117.208.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 14:10:42.881379 2026] [security2:error] [pid 14487:tid 14487] [client 89.117.208.62:35282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dandksupply.com"] [uri "/sftp-config.json"] [unique_id "at-XogTrk5PhE54bCqGXfgAAAC4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-24 12:07:03
UTC ·
(3 weeks ago)
Automated web scanner. Requested suspicious paths: /.vscode/sftp.json. UTC: 2026-10-24 11:22:34.
Web App Attack
🇺🇸
TPI-Abuse
2026-10-23 18:09:36
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 89.117.208.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 14:09:28.560776 2026] [security2:error] [pid 14983:tid 14983] [client 89.117.208.62:10112] M ...
show more
(mod_security) mod_security (id:210492) triggered by 89.117.208.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 14:09:28.560776 2026] [security2:error] [pid 14983:tid 14983] [client 89.117.208.62:10112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marcosbarraza.net"] [uri "/sftp-config.json"] [unique_id "atui2MhNK1prFXBTzL5w5gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 02:34:55
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 89.117.208.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 22:34:50.509296 2026] [security2:error] [pid 8534:tid 8546] [client 89.117.208.62:32696] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 89.117.208.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 22:34:50.509296 2026] [security2:error] [pid 8534:tid 8546] [client 89.117.208.62:32696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "malvadocuaderno.com"] [uri "/sftp-config.json"] [unique_id "atgkypvI5bfDZs686FR2ewAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-19 03:00:33
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 89.117.208.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 23:00:30.209931 2026] [security2:error] [pid 18755:tid 18755] [client 89.117.208.62:15474] M ...
show more
(mod_security) mod_security (id:210492) triggered by 89.117.208.62 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 18 23:00:30.209931 2026] [security2:error] [pid 18755:tid 18755] [client 89.117.208.62:15474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tedmccachren.com"] [uri "/labs/indexlabs.html/sftp-config.json"] [unique_id "atWHzk550tRdas96ILmcwQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
