๐บ๐ธ
TPI-Abuse
2026-07-28 12:41:43
(18 minutes ago)
(mod_security) mod_security (id:210492) triggered by 149.102.240.75 (unn-149-102-240-75.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 149.102.240.75 (unn-149-102-240-75.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 08:41:37.051769 2026] [security2:error] [pid 586821:tid 586821] [client 149.102.240.75:52612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boatpeople.org"] [uri "/.git/index"] [unique_id "amijgUo_CfV4bYhRGPtM3QAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-28 12:01:27
(58 minutes ago)
(mod_security) mod_security (id:210492) triggered by 149.102.240.75 (unn-149-102-240-75.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 149.102.240.75 (unn-149-102-240-75.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 08:01:21.255622 2026] [security2:error] [pid 994748:tid 994748] [client 149.102.240.75:56210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blackballprojects.com"] [uri "/.git/index"] [unique_id "amiaEUOXGoZr3tW90so7QQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Lino Project
2026-07-28 11:40:12
(1 hour ago)
149.102.240.75 - - [28/Jul/2026:13:40:08 +0200] "GET /.git/index HTTP/2.0" 302 480 "-" "moving-to-bi ...
show more
149.102.240.75 - - [28/Jul/2026:13:40:08 +0200] "GET /.git/index HTTP/2.0" 302 480 "-" "moving-to-bins/1.0"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-07-28 11:33:56
(1 hour ago)
cloudlinux2 fail2ban: 2026-07-28 13:30:15,016 fail2ban.filter [1917]: INFO [plesk-proftpd ...
show more
cloudlinux2 fail2ban: 2026-07-28 13:30:15,016 fail2ban.filter [1917]: INFO [plesk-proftpd] Found 207.175.5.87 - 2026-07-28 13:30:15cloudlinux2 fail2ban: 2026-07-28 13:31:45,157 fail2ban.filter [1917]: INFO [plesk-wordpress] Found 192.250.229.134 - 2026-07-28 13:31:44cloudlinux2 fail2ban: 2026-07-28 13:32:15,749 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 223.185.61.227 - 2026-07-28 13:32:15cloudlinux2 fail2ban: 2026-07-28 13:32:37,690 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 223.185.61.227 - 2026-07-28 13:32:37cloudlinux2 fail2ban: 2026-07-28 13:32:52,120 fail2ban.filter [1917]: INFO [plesk-modsecurity] Found 149.102.240.75 - 2026-07-28 13:32:52cloudlinux2 fail2ban: 2026-07-28 13:33:12,435 fail2ban.actions [1917]: NOTICE [plesk-modsecurity] Unban 103.137.71.187cloudlinux2 fail2ban: 2026-07-28 13:33:20,665 fail2ban.filter [1917]: INFO [recidive] Found 223.185.61.227 - 2026-07-28 13:33:20cloudlinux2 fail2ban: 2026
show less
FTP Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-28 11:22:59
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 149.102.240.75 (unn-149-102-240-75.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 149.102.240.75 (unn-149-102-240-75.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 07:22:56.100556 2026] [security2:error] [pid 986245:tid 986245] [client 149.102.240.75:40762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigredgraphicdesign.com"] [uri "/.git/index"] [unique_id "amiRED0bGrllyS8YHuEMJAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-28 10:35:32
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 149.102.240.75 (unn-149-102-240-75.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 149.102.240.75 (unn-149-102-240-75.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 06:35:25.274657 2026] [security2:error] [pid 1528806:tid 1528806] [client 149.102.240.75:36508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "benshermanguitar.com"] [uri "/.git/index"] [unique_id "amiF7aFdaLsB3HczHTnZXgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-28 10:02:30
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 149.102.240.75 (unn-149-102-240-75.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 149.102.240.75 (unn-149-102-240-75.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 28 06:02:23.243939 2026] [security2:error] [pid 1120004:tid 1120004] [client 149.102.240.75:52940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aupapierjaponais.com"] [uri "/.git/index"] [unique_id "amh-LzRMVVky1webqZge0gAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-27 21:08:26
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 149.102.240.75 (unn-149-102-240-75.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 149.102.240.75 (unn-149-102-240-75.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 17:08:20.040743 2026] [security2:error] [pid 7536:tid 7536] [client 149.102.240.75:59902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "disneylawsuit.com"] [uri "/.git/index"] [unique_id "amfIxL-meDG-WIBdAHD23QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-27 20:45:16
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 149.102.240.75 (unn-149-102-240-75.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 149.102.240.75 (unn-149-102-240-75.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 16:45:08.925248 2026] [security2:error] [pid 2306598:tid 2306598] [client 149.102.240.75:45032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "digifonics.com"] [uri "/.git/index"] [unique_id "amfDVEA7JQGmIllTYpUG9gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-27 20:24:09
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 149.102.240.75 (unn-149-102-240-75.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 149.102.240.75 (unn-149-102-240-75.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 16:24:02.690523 2026] [security2:error] [pid 102448:tid 102527] [client 149.102.240.75:60350] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deyyoungart.com"] [uri "/.git/index"] [unique_id "ame-Yt6KpcFeDvSPPlsMLAAAANQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
IndigoRidge
2026-07-10 02:41:52
(2 weeks ago)
149.102.240.75 - - [09/Jul/2026:22:41:09 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5263 "-" "Jetpack by ...
show more
149.102.240.75 - - [09/Jul/2026:22:41:09 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5263 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.4)"
149.102.240.75 - - [09/Jul/2026:22:41:19 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5263 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)"
149.102.240.75 - - [09/Jul/2026:22:41:30 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5263 "-" "Jetpack/12.0; WordPress/6.1; http://site85179231.com"
149.102.240.75 - - [09/Jul/2026:22:41:41 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5263 "-" "WordPress.com; https://wordpress.com"
149.102.240.75 - - [09/Jul/2026:22:41:51 -0400] "POST /xmlrpc.php HTTP/1.0" 200 5263 "-" "Jetpack/12.1; WordPress/6.1; http://site59861973.com"
...
show less
Web App Attack
๐ง๐ช
boxed-it
2026-06-30 16:03:22
(3 weeks ago)
GET /.env (Tarpitted for 1d15h8m28s, wasted 8.06MB)
Web App Attack
๐บ๐ธ
jormaster3k
2026-06-29 03:34:49
(4 weeks ago)
Attack against Apache (too many 404s)
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-06-29 02:50:09
(4 weeks ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ฌ
HighWay
2026-06-29 02:28:02
(4 weeks ago)
[Mon Jun 29 02:28:00.796018 2026] [authz_core:error] [pid 1853091:tid 134975697438400] [client 149.1 ...
show more
[Mon Jun 29 02:28:00.796018 2026] [authz_core:error] [pid 1853091:tid 134975697438400] [client 149.102.240.75:33634] AH01630: client denied by server configuration: /var/www/html/
[Mon Jun 29 02:28:01.022650 2026] [authz_core:error] [pid 1853091:tid 134975445788352] [client 149.102.240.75:33634] AH01630: client denied by server configuration: /var/www/html/
[Mon Jun 29 02:28:01.249038 2026] [authz_core:error] [pid 1853091:tid 134976077031104] [client 149.102.240.75:33634] AH01630: client denied by server configuration: /var/www/html/.env.dev
[Mon Jun 29 02:28:01.456508 2026] [authz_core:error] [pid 1853091:tid 134975722616512] [client 149.102.240.75:33718] AH01630: client denied by server configuration: /var/www/html/.env.old
[Mon Jun 29 02:28:01.456508 2026] [authz_core:error] [pid 1853092:tid 134975907124928] [client 149.102.240.75:33704] AH01630: client denied by server configuration: /var/www/html/.env.backup
...
show less
Brute-Force