๐ฉ๐ช
Guardian
2026-09-09 07:33:47
(1 month ago)
Unauthorized connection attempt / Port scanning (x4)
149.102.247.243 [09/Sep/2026:09:33:46 +0200] "G ...
show more
Unauthorized connection attempt / Port scanning (x4)
149.102.247.243 [09/Sep/2026:09:33:46 +0200] "GET /wp/xmlrpc.php HTTP/1.1"
149.102.247.243 [09/Sep/2026:09:33:46 +0200] "GET /blog/xmlrpc.php HTTP/1.1"
149.102.247.243 [09/Sep/2026:09:33:46 +0200] "GET /wordpress/xmlrpc.php HTTP/1.1"
149.102.247.243 [09/Sep/2026:09:33:46 +0200] "GET /xmlrpc.php HTTP/1.1"
149.102.247.243 [09/Sep/2026:09:33:46 +0200] "GET /blog/xmlrpc.php HTTP/1.1"
149.102.247.243 [09/Sep/2026:09:33:46 +0200] "GET /wp/xmlrpc.php HTTP/1.1"
149.102.247.243 [09/Sep/2026:09:33:46 +0200] "GET /wordpress/xmlrpc.php HTTP/1.1"
149.102.247.243 [09/Sep/2026:09:33:46 +0200] "GET /xmlrpc.php HTTP/1.1"
show less
Port Scan
Web App Attack
๐ฎ๐ฉ
soc-yk
2026-09-09 07:06:27
(1 month ago)
Type: suspicious_network_activity
Risk: 100
Events: 92
Evidence:
- Persistent suspicious network ac ...
show more
Type: suspicious_network_activity
Risk: 100
Events: 92
Evidence:
- Persistent suspicious network activity detected
- Repeated hostile operational behavior observed
- Multi-event operational persistence identified
- Threat escalation behavior observed
show less
Port Scan
Hacking
๐ฉ๐ช
ghostwarriors
2026-09-07 00:20:24
(1 month ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ksol-hostmaster
2026-09-07 00:10:48
(1 month ago)
2026/09/07 02:10:47 [error] 19599#178749: *3303506 limiting requests, excess: 0.990 by zone "crawler ...
show more
2026/09/07 02:10:47 [error] 19599#178749: *3303506 limiting requests, excess: 0.990 by zone "crawler", client: 149.102.247.243, server: ksol.io, request: "GET /.git/config?__goaway_challenge=cookie&__goaway_id=95df435190992435c37d50a577d5c76d&__goaway_referer=http%3A%2F%2Fksol.io%2F.git%2Fconfig HTTP/1.1", host: "ksol.io", referrer: "https://ksol.io/.git/config"
...
show less
Bad Web Bot
๐ณ๐ฑ
ipoac.nl
2026-09-07 00:07:21
(1 month ago)
ipoac.nl:80 149.102.247.243 - - [07/Sep/2026:02:07:20 +0200] ipoac.nl "GET /.git/config HTTP/1.1" 40 ...
show more
ipoac.nl:80 149.102.247.243 - - [07/Sep/2026:02:07:20 +0200] ipoac.nl "GET /.git/config HTTP/1.1" 403 1661 "-" "Go-http-client/1.1"
show less
Bad Web Bot
๐ฉ๐ช
nyt
2026-09-03 00:08:40
(1 month ago)
Sensitive File Probe
Web App Attack
๐ซ๐ท
conseilgouz
2026-08-30 00:06:04
(1 month ago)
joe-Direct access to plugin not allowed.
Hacking
๐ท๐ธ
Smel
2026-08-29 00:22:01
(1 month ago)
HTTP/80/443/8080 Unauthorized Probe, Hack -
Hacking
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-08-25 22:01:13
(1 month ago)
Auto-ban: >3000 req/min op 2026-08-25
Web App Attack
SSH
Hacking
๐ฌ๐ง
Aetherweb Ark
2026-08-25 17:19:12
(1 month ago)
(mod_security) mod_security (id:949110) triggered by 149.102.247.243 (HR/Croatia/unn-149-102-247-243 ...
show more
(mod_security) mod_security (id:949110) triggered by 149.102.247.243 (HR/Croatia/unn-149-102-247-243.datapacket.com): N in the last X secs
show less
Web App Attack
๐ฌ๐ง
consul.to
2026-08-25 17:09:25
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
๐ท๐ด
iulianh
2026-08-25 16:21:58
(1 month ago)
80,443
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2026-08-25 15:32:34
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 149.102.247.243 (unn-149-102-247-243.datapacket ...
show more
(mod_security) mod_security (id:210492) triggered by 149.102.247.243 (unn-149-102-247-243.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 11:32:28.854744 2026] [security2:error] [pid 10969:tid 10969] [client 149.102.247.243:53743] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cwvr.org"] [uri "/.git/config"] [unique_id "ao21jD3oBKDSghynBY02wQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-25 15:09:28
(1 month ago)
[Firewall Canary] Temporary ban due to firewall rule match [URI:*/.git/*]
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-25 15:06:50
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 149.102.247.243 (unn-149-102-247-243.datapacket ...
show more
(mod_security) mod_security (id:210492) triggered by 149.102.247.243 (unn-149-102-247-243.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 25 11:06:44.415222 2026] [security2:error] [pid 24803:tid 24803] [client 149.102.247.243:20731] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "calvarycavaliers.org"] [uri "/.git/config"] [unique_id "ao2vhDqEYVRIKq2Hinxg0gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack