🇺🇸
TPI-Abuse
2026-07-27 06:13:59
(52 minutes ago)
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 02:13:54.422991 2026] [security2:error] [pid 4047689:tid 4047689] [client 74.91.48.1:60260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deserttrails.net"] [uri "/sftp-config.json"] [unique_id "amb3IjYFOb7AmbXTudthywAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 05:30:09
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 01:30:03.310852 2026] [security2:error] [pid 3186803:tid 3186803] [client 74.91.48.1:29522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "descolargtsv.com"] [uri "/sftp-config.json"] [unique_id "ambs28O_4zS6F0fXNGT4JwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 12:26:23
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 08:26:19.959676 2026] [security2:error] [pid 29965:tid 29970] [client 74.91.48.1:58752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cargostuff.com"] [uri "/sftp-config.json"] [unique_id "altw642BatodTR2U4zig0QAAAMM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-18 01:15:05
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 21:14:57.755665 2026] [security2:error] [pid 2394373:tid 2394373] [client 74.91.48.1:32896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "captechtraining.com"] [uri "/sftp-config.json"] [unique_id "alrTkceQgwmOD1vVpCqYiwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 21:21:13
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 17:21:06.950565 2026] [security2:error] [pid 1734411:tid 1734411] [client 74.91.48.1:15030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "capitalacc.com"] [uri "/sftp-config.json"] [unique_id "alqcwt1EK7RuUKqJUlCcfwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 20:10:03
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 16:09:56.292568 2026] [security2:error] [pid 1227972:tid 1227972] [client 74.91.48.1:25628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "capecodbeachfront.com"] [uri "/sftp-config.json"] [unique_id "alqMFBPm1VDs8vhc_Z9GwgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 13:59:40
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 09:59:32.253275 2026] [security2:error] [pid 17776:tid 17776] [client 74.91.48.1:46700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "canebrakes.com"] [uri "/sftp-config.json"] [unique_id "alo1RErwU1UQfB36OAOE3AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 11:07:18
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 07:07:11.533114 2026] [security2:error] [pid 28631:tid 28631] [client 74.91.48.1:21350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "canadianwildlifemuseum.com"] [uri "/sftp-config.json"] [unique_id "aloM37HOEj30fve0itC1cQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 06:50:21
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 02:50:15.424407 2026] [security2:error] [pid 365007:tid 365007] [client 74.91.48.1:38970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "campconcerto.com"] [uri "/sftp-config.json"] [unique_id "alnQp4JTYUYxxxQN-GeShQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-07-17 06:30:19
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 05:33:05
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 01:32:59.002250 2026] [security2:error] [pid 10076:tid 10076] [client 74.91.48.1:34240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caminorfoundation.org"] [uri "/sftp-config.json"] [unique_id "alm-i309tFN4KwBxxvAJoAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
i-turnradio.nl
2026-07-17 04:15:14
(1 week ago)
2026-07-17 @ 06:15:13 (CET) ~ Blocked for trying to access: /sftp-config.json
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 03:03:25
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 23:03:17.992046 2026] [security2:error] [pid 232948:tid 232948] [client 74.91.48.1:24058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rademeyer.com"] [uri "/sftp-config.json"] [unique_id "almbdQqyccM2cE9gM2-k0QAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-17 01:56:28
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 21:56:21.857715 2026] [security2:error] [pid 5255:tid 5255] [client 74.91.48.1:36190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "calvarycavaliers.org"] [uri "/sftp-config.json"] [unique_id "almLxafZPf8IIdMtP1XLvwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-16 22:16:30
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 74.91.48.1 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 16 18:16:27.031455 2026] [security2:error] [pid 18661:tid 18679] [client 74.91.48.1:18178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/sftp-config.json" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "californialifecoach.com"] [uri "/sftp-config.json"] [unique_id "allYOz7pXcHoNHRrcLGUHgAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack