๐บ๐ธ
TPI-Abuse
2026-08-26 01:26:11
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 108.162.241.25 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 108.162.241.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 21:26:06.113893 2026] [security2:error] [pid 12422:tid 12422] [client 108.162.241.25:13432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.edsantos.biz"] [uri "/.git/HEAD"] [unique_id "ao5ArtQmVR-OcYlIGXQLuwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 03:23:49
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 108.162.241.25 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 108.162.241.25 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 24 23:23:45.634275 2026] [security2:error] [pid 18819:tid 18981] [client 108.162.241.25:11798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.eliteproductions.tv"] [uri "/.git/HEAD"] [unique_id "ao0KwRxGcZzE9m_iyr-LDgAAAks"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mawan
2026-08-19 08:10:36
(1 week ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐ง๐ช
madeit
2026-08-15 03:41:05
(1 week ago)
Web App Attack
Anonymous
2026-08-10 21:31:27
(2 weeks ago)
108.162.241.25 - - [10/Aug/2026:23:31:25 +0200] "GET /api-key_s3%2etxt HTTP/1.1" 403 124 "-" "curl/8 ...
show more
108.162.241.25 - - [10/Aug/2026:23:31:25 +0200] "GET /api-key_s3%2etxt HTTP/1.1" 403 124 "-" "curl/8.7.1"
108.162.241.25 - - [10/Aug/2026:23:31:25 +0200] "GET /wp-content/aws_credentials%2ejson HTTP/1.1" 403 124 "-" "curl/8.7.1"
108.162.241.25 - - [10/Aug/2026:23:31:25 +0200] "GET /env/smtp_password%2etxt HTTP/1.1" 403 124 "-" "curl/8.7.1"
108.162.241.25 - - [10/Aug/2026:23:31:25 +0200] "GET /new/%2eenv%2eproduction HTTP/1.1" 403 124 "-" "curl/8.7.1"
108.162.241.25 - - [10/Aug/2026:23:31:25 +0200] "GET /ecommerce-app/src/%2eenv HTTP/1.1" 403 124 "-" "curl/8.7.1"
108.162.241.25 - - [10/Aug/2026:23:31:25 +0200] "GET /smtp%2einc%2ephp%2ebak HTTP/1.1" 403 124 "-" "curl/8.7.1"
108.162.241.25 - - [10/Aug/2026:23:31:25 +0200] "GET /dump%2esql%2elz4%2ebak HTTP/1.1" 403 124 "-" "curl/8.7.1"
108.162.241.25 - - [10/Aug/2026:23:31:26 +0200] "GET /application/%2eenv%2esave HTTP/1.1" 403 124 "-" "curl/8.7.1"
108.162.241.25 - - [10/Aug/2026:23:31:26 +0200] "GET /alpha/%2egit/config HTTP/1.1" 403 124
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-08-07 04:16:37
(2 weeks ago)
108.162.241.25 - - [07/Aug/2026:06:16:35 +0200] "GET //2020/wp-includes/wlwmanifest.xml HTTP/1.1" 40 ...
show more
108.162.241.25 - - [07/Aug/2026:06:16:35 +0200] "GET //2020/wp-includes/wlwmanifest.xml HTTP/1.1" 404 441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
108.162.241.25 - - [07/Aug/2026:06:16:35 +0200] "GET //2020/wp-includes/wlwmanifest.xml HTTP/1.1" 404 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
108.162.241.25 - - [07/Aug/2026:06:16:36 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
108.162.241.25 - - [07/Aug/2026:06:16:36 +0200] "GET //2019/wp-includes/wlwmanifest.xml HTTP/1.1" 404 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"
108.162.241.25 - - [07/Aug/2026:06:16:36 +0200] "GET //2021/wp-includes/wlwmanifest.xml HTTP
...
show less
Brute-Force
Web App Attack
Anonymous
2026-07-28 08:30:10
(4 weeks ago)
108.162.241.25 - - [28/Jul/2026:10:30:07 +0200] "GET /Jenkinsfile HTTP/1.1" 404 441 "-" "Mozilla/5.0 ...
show more
108.162.241.25 - - [28/Jul/2026:10:30:07 +0200] "GET /Jenkinsfile HTTP/1.1" 404 441 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)"
108.162.241.25 - - [28/Jul/2026:10:30:07 +0200] "GET /Jenkinsfile HTTP/1.1" 404 246 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)"
108.162.241.25 - - [28/Jul/2026:10:30:07 +0200] "GET /jenkinsfile HTTP/1.1" 404 441 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)"
108.162.241.25 - - [28/Jul/2026:10:30:07 +0200] "GET /jenkinsfile HTTP/1.1" 404 246 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)"
108.162.241.25 - - [28/Jul/2026:10:30:07 +0200] "GET /.drone.yml HTTP/1.1" 404 441 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)"
108.162.241.25 - - [28/Jul/2026:10:30:07 +0200] "GET /.drone.yml HTTP/1.1" 404 246 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)"
108.162.241.25 - - [28/Jul/2026:10:30:08 +0200] "GET /.drone.yaml HTTP/1.1" 404 441 "-" "Mozilla/5.0 (compatible; SecurityResearch/1.0)"
108.162.241.25 - - [28/Jul/2026:10:30:08 +0
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
mawan
2026-07-28 02:09:05
(4 weeks ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
Anonymous
2026-07-26 11:05:44
(1 month ago)
108.162.241.25 - - [26/Jul/2026:13:05:43 +0200] "GET //media/wp-includes/wlwmanifest.xml HTTP/1.1" 4 ...
show more
108.162.241.25 - - [26/Jul/2026:13:05:43 +0200] "GET //media/wp-includes/wlwmanifest.xml HTTP/1.1" 404 441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
108.162.241.25 - - [26/Jul/2026:13:05:43 +0200] "GET //media/wp-includes/wlwmanifest.xml HTTP/1.1" 404 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
108.162.241.25 - - [26/Jul/2026:13:05:44 +0200] "GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 404 441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
108.162.241.25 - - [26/Jul/2026:13:05:44 +0200] "GET //wp2/wp-includes/wlwmanifest.xml HTTP/1.1" 404 246 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36"
108.162.241.25 - - [26/Jul/2026:13:05:44 +0200] "GET //site/wp-includes/wlwmanifest.xml
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
mawan
2026-07-23 06:59:01
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐บ๐ธ
mawan
2026-07-20 07:12:03
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
Anonymous
2026-07-06 20:50:04
(1 month ago)
| Multiple SQL injection attempts from same source ip.(multiple servers)
Web App Attack
Hacking
SQL Injection
๐บ๐ธ
mawan
2026-07-05 02:55:19
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐บ๐ธ
mawan
2026-07-02 05:00:55
(1 month ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐บ๐ธ
mawan
2026-06-15 13:40:13
(2 months ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack