JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

149.102.130.210

Neutral Activity

Abuse confidence score ?

0% Low Risk

35 reports

20 reporters · latest 2 years ago

ISP	Contabo GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS51167
Hostname(s)	vmi2849686.contaboserver.net
Domain Name	contabo.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	Portsmouth, England

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

149.102.130.210 has been reported 35 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 149.102.130.210

Export CSV

This IP address has been reported a total of 35 times from 20 distinct sources. 149.102.130.210 was first reported on December 25th 2023, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 Ross Wheatley	2023-12-27 23:49:25 (2 years ago)	GET /.env HTTP/1.1 404 5809 - python-requests/2.28.1	Brute-Force Web App Attack
Anonymous	2023-12-27 21:57:00 (2 years ago)	149.102.130.210 - - [27/Dec/2023:22:56:59 +0100] "GET /.env HTTP/1.1" 403 400 "-" "python-requests/2 ... show more 149.102.130.210 - - [27/Dec/2023:22:56:59 +0100] "GET /.env HTTP/1.1" 403 400 "-" "python-requests/2.28.1" 149.102.130.210 - - [27/Dec/2023:22:56:59 +0100] "GET /.env HTTP/1.1" 403 6394 "-" "python-requests/2.28.1" ... show less	Web App Attack
🇺🇦 URAN Publishing Service	2023-12-27 21:50:32 (2 years ago)	149.102.130.210 - - [27/Dec/2023:23:50:31 +0200] "GET /.env HTTP/1.1" 404 494 "-" "python-requests/2 ... show more 149.102.130.210 - - [27/Dec/2023:23:50:31 +0200] "GET /.env HTTP/1.1" 404 494 "-" "python-requests/2.28.1" 149.102.130.210 - - [27/Dec/2023:23:50:31 +0200] "GET /.env HTTP/1.1" 404 5245 "-" "python-requests/2.28.1" ... show less	Web App Attack
🇨🇭 zynex	2023-12-27 21:47:19 (2 years ago)	URL Probing: /.env	Web App Attack
🇩🇪 Ba-Yu	2023-12-27 15:02:04 (2 years ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2023-12-27 12:07:28 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 27 07:07:22.723287 2023] [security2:error] [pid 7218] [client 149.102.130.210:51707] [client 149.102.130.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.115"] [uri "/.env"] [unique_id "ZYwTei7hBkG_nCYgZ9mbOwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-27 11:23:27 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 27 06:23:21.246713 2023] [security2:error] [pid 10011:tid 47760157677312] [client 149.102.130.210:50237] [client 149.102.130.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.44"] [uri "/.env"] [unique_id "ZYwJKau6CXFrGPIVUtbsrgAAAE8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-27 10:47:14 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 27 05:47:06.970497 2023] [security2:error] [pid 31666] [client 149.102.130.210:54505] [client 149.102.130.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.90"] [uri "/.env"] [unique_id "ZYwAqpHkJOlOHnpXSG5cdwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-27 09:56:23 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 27 04:56:15.037322 2023] [security2:error] [pid 9944] [client 149.102.130.210:54351] [client 149.102.130.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.154"] [uri "/.env"] [unique_id "ZYv0v7WzG8xVIDIlkWnqVwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-27 09:41:21 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 27 04:41:16.350500 2023] [security2:error] [pid 18801] [client 149.102.130.210:53584] [client 149.102.130.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.27"] [uri "/.env"] [unique_id "ZYvxPD5r2_26o8QGDJWLcAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-27 09:25:54 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 27 04:25:50.208299 2023] [security2:error] [pid 11482] [client 149.102.130.210:57685] [client 149.102.130.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.16"] [uri "/.env"] [unique_id "ZYvtnqsgdA5KvtH6hG5ozAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-27 09:09:25 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 27 04:09:21.452143 2023] [security2:error] [pid 24428] [client 149.102.130.210:59979] [client 149.102.130.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.105"] [uri "/.env"] [unique_id "ZYvpwafZZRAS0uJ0uRBMlAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-27 08:50:36 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 27 03:50:28.845308 2023] [security2:error] [pid 8519] [client 149.102.130.210:53707] [client 149.102.130.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.47"] [uri "/.env"] [unique_id "ZYvlVGHTasSRHlnoiyUIIQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-27 08:34:07 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 27 03:34:02.721942 2023] [security2:error] [pid 5259] [client 149.102.130.210:53207] [client 149.102.130.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.98"] [uri "/.env"] [unique_id "ZYvhetUjZWinqVtDegRLCQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2023-12-27 08:11:11 (2 years ago)	(mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): ... show more (mod_security) mod_security (id:210492) triggered by 149.102.130.210 (vmi1556168.contaboserver.net): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 27 03:11:08.324415 2023] [security2:error] [pid 22371:tid 47456677336832] [client 149.102.130.210:49969] [client 149.102.130.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.127"] [uri "/.env"] [unique_id "ZYvcHAwebQlLbov4FpyVEgAAAME"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇳 2401:4900:8857:8189:e80b:228e:9f20:2de4

🇰🇷 211.220.197.170

🇨🇱 201.189.5.254

🇧🇪 198.235.24.166

🇸🇰 147.175.64.249

🇸🇬 145.223.150.67

🇪🇬 41.32.128.38

🇬🇧 35.203.211.103

🇶🇦 34.18.194.167

🇩🇿 197.140.43.211

🇲🇦 196.64.19.21

🇮🇳 182.73.176.186

🇬🇪 176.74.124.52

🇨🇦 167.114.139.75

🇮🇳 152.59.151.141

🇮🇳 152.56.71.227

🇨🇳 146.56.197.194

🇭🇰 124.156.157.91

🇮🇳 103.180.89.186

🇳🇱 85.203.40.26