๐บ๐ธ
TPI-Abuse
2026-08-28 08:59:55
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 62.101.160.225 (62-101-160-225.telecomgroupserv ...
show more
(mod_security) mod_security (id:210492) triggered by 62.101.160.225 (62-101-160-225.telecomgroupservice.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 04:59:51.129343 2026] [security2:error] [pid 11155:tid 11155] [client 62.101.160.225:56349] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "m2pg.net"] [uri "/.gitignore"] [unique_id "apFOBxfgNtT2zc4-yeZQ0AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
todix
2026-08-28 01:52:57
(5 days ago)
Web App Attack Exploid from 62.101.160.225
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 01:23:40
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 62.101.160.225 (62-101-160-225.telecomgroupserv ...
show more
(mod_security) mod_security (id:210492) triggered by 62.101.160.225 (62-101-160-225.telecomgroupservice.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 21:23:32.142676 2026] [security2:error] [pid 30289:tid 30289] [client 62.101.160.225:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eddysgroup.com"] [uri "/.gitignore"] [unique_id "apDjFE7VefVFuUuDzKByPwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 00:50:26
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 62.101.160.225 (62-101-160-225.telecomgroupserv ...
show more
(mod_security) mod_security (id:210492) triggered by 62.101.160.225 (62-101-160-225.telecomgroupservice.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 20:50:18.674811 2026] [security2:error] [pid 2774:tid 2774] [client 62.101.160.225:29345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackjobsnetwork.com"] [uri "/.gitignore"] [unique_id "apDbSveWRhx7BaRfiOR6igAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 23:25:20
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 62.101.160.225 (62-101-160-225.telecomgroupserv ...
show more
(mod_security) mod_security (id:210492) triggered by 62.101.160.225 (62-101-160-225.telecomgroupservice.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 19:25:14.102101 2026] [security2:error] [pid 7003:tid 7003] [client 62.101.160.225:29134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scadco.com"] [uri "/.gitignore"] [unique_id "apDHWf1L2-QJCDi33oe-WQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
bazter.pro
2026-08-27 23:25:00
(5 days ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
๐ซ๐ท
ingroscart.it
2026-08-27 04:44:05
(6 days ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted])
Port Scan
๐บ๐ธ
TPI-Abuse
2026-08-26 23:13:38
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 62.101.160.225 (62-101-160-225.telecomgroupserv ...
show more
(mod_security) mod_security (id:210492) triggered by 62.101.160.225 (62-101-160-225.telecomgroupservice.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 19:13:31.964964 2026] [security2:error] [pid 7459:tid 7459] [client 62.101.160.225:22598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.gitignore" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aguasolar.com"] [uri "/.gitignore"] [unique_id "ao9zG640MmzPoUoAruahoAAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-08-26 17:02:15
(1 week ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config | 2026-08-26 17:02 UTC
show less
Hacking
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-08-26 10:18:32
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ซ๐ท
Stara
2026-08-26 01:55:09
(1 week ago)
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kinesk ...
show more
Automated block - Joomla/WordPress/OpenCart vulnerability scanner exploitation detected (Mala Kineskinja)
show less
Hacking
Brute-Force
Web App Attack
๐ฆ๐บ
2000cn.com.au
2026-08-26 01:06:34
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ฎ๐น
VHosting
2026-08-25 19:10:05
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack