🇳🇱
StopAbuse
2026-04-21 13:22:44
(1 month ago)
tcp/18789
Port Scan
🇺🇸
MPL
2026-04-21 02:51:30
(1 month ago)
tcp/5918
Port Scan
🇺🇸
xmission.com
2026-04-21 02:16:16
(1 month ago)
Blocked by UFW (TCP on 10000)
Source port: 61013
TTL: 241
Packet length: 44
TOS: 0x08
This report ( ...
show more
Blocked by UFW (TCP on 10000)
Source port: 61013
TTL: 241
Packet length: 44
TOS: 0x08
This report (for 142.93.154.162) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇫🇷
SpaceHost-Server
2026-03-18 23:59:38
(2 months ago)
Brute-Force
Web App Attack
🇹🇷
rtbh.com.tr
2026-03-17 20:12:07
(2 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇺🇸
TPI-Abuse
2026-03-17 12:01:04
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 142.93.154.162 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 142.93.154.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 08:00:59.555510 2026] [security2:error] [pid 26167:tid 26167] [client 142.93.154.162:37650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lalalana.mx"] [uri "/.git/config"] [unique_id "ablCewR0xA2o1oledHbSLgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-17 10:25:10
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 142.93.154.162 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 142.93.154.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 17 06:25:03.411767 2026] [security2:error] [pid 4309:tid 4309] [client 142.93.154.162:54624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jmms.mx"] [uri "/.git/config"] [unique_id "abkr_5lhC44gstj0_PIiqAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-03-17 08:17:33
(2 months ago)
{"level":"info","ts":1773735441.0014386,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1773735441.0014386,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"142.93.154.162","remote_port":"43266","client_ip":"142.93.154.162","proto":"HTTP/1.1","method":"GET","host":"info.ecolana.com.mx","uri":"/.git/config","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"],"Connection":["keep-alive"]}},"bytes_read":0,"user_id":"","duration":0.000043604,"size":0,"status":308,"resp_headers":{"Location":["https://info.ecolana.com.mx/.git/config"],"Content-Type":[],"Server":["Caddy"],"Connection":["close"]}}
{"level":"info","ts":1773735441.7463033,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"142.93.154.162","remote_port":"41360","client_ip":"142.93.154.162","proto":"HTTP/1.1","method":"GET","host":"info.ecolana.com.mx","uri":"/jquery.filer/php/readme.txt","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64
...
show less
DDoS Attack
Web App Attack
🇫🇷
SpaceHost-Server
2026-03-17 00:27:29
(2 months ago)
Brute-Force
Web App Attack
🇩🇪
macrob
2026-03-17 00:03:50
(2 months ago)
2026/03/17 00:03:47 [error] 399693#399693: *80100618 access forbidden by rule, client: 142.93.154.16 ...
show more
2026/03/17 00:03:47 [error] 399693#399693: *80100618 access forbidden by rule, client: 142.93.154.162, server: finami.mx, request: "GET /.git/config HTTP/2.0", host: "finami.mx"
2026/03/17 00:03:48 [error] 399692#399692: *80100513 access forbidden by rule, client: 142.93.154.162, server: finami.mx, request: "GET /assets/plugins/jQuery-File-Upload/server/php/ HTTP/2.0", host: "finami.mx"
2026/03/17 00:03:48 [error] 399692#399692: *80100513 access forbidden by rule, client: 142.93.154.162, server: finami.mx, request: "GET /static/lib/jquery-file-upload/server/php/ HTTP/2.0", host: "finami.mx"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-03-16 23:48:27
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 142.93.154.162 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 142.93.154.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 19:48:21.611526 2026] [security2:error] [pid 27543:tid 27543] [client 142.93.154.162:56564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ferreteria.imerka.com.mx"] [uri "/.git/config"] [unique_id "abiWxZdZPFwXYkCEg0fTngAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
macrob
2026-03-16 16:14:21
(2 months ago)
2026/03/16 16:14:19 [error] 346688#346688: *79330427 access forbidden by rule, client: 142.93.154.16 ...
show more
2026/03/16 16:14:19 [error] 346688#346688: *79330427 access forbidden by rule, client: 142.93.154.162, server: binixo.mx, request: "GET /.git/config HTTP/1.1", host: "binixo.mx"
2026/03/16 16:14:20 [error] 346688#346688: *79330427 access forbidden by rule, client: 142.93.154.162, server: binixo.mx, request: "GET /assets/js/frontend/jquery-file-upload/server/php/ HTTP/1.1", host: "binixo.mx"
2026/03/16 16:14:20 [error] 346691#346691: *79330500 access forbidden by rule, client: 142.93.154.162, server: binixo.mx, request: "GET /assets/admin/bower_components/jquery.filer/php/readme.txt HTTP/1.1", host: "binixo.mx"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-03-16 12:11:33
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 142.93.154.162 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 142.93.154.162 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 16 08:11:28.446877 2026] [security2:error] [pid 16425:tid 16425] [client 142.93.154.162:35718] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "animatuevento.com.mx"] [uri "/.git/config"] [unique_id "abfzcPwImgPpNXF1B5iDhAAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-03-16 12:02:37
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
2026-03-16 11:56:36
(2 months ago)
Ports: *; Direction: 0; Trigger: CT_LIMIT
Brute-Force
SSH