This IP address has been reported a total of
7
times from
2 distinct
sources.
152.237.230.36 was first reported on
October 12th 2026 , and the most recent report was
6 hours ago United States of America
with 6
reports;
Germany
with 1
report.
The most common categories in these recent reports were:
Web App Attack
7
times;
Bad Web Bot
6
times;
Brute-Force
6
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-10-14 19:46:08
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 152.237.230.36 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 152.237.230.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 15:46:03.227996 2026] [security2:error] [pid 5395:tid 5395] [client 152.237.230.36:48026] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "insua.com"] [uri "/.git/info/refs"] [unique_id "as_b-1u0WkUZGDi5Q0HmqQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 13:51:33
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 152.237.230.36 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 152.237.230.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 09:51:27.085937 2026] [security2:error] [pid 26205:tid 26205] [client 152.237.230.36:43002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sonoranwaterworks.com"] [uri "/.git/info/refs"] [unique_id "as-I3wItx0mrstdd0t81_wAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 17:30:07
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 152.237.230.36 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 152.237.230.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 13:29:57.454702 2026] [security2:error] [pid 10153:tid 10153] [client 152.237.230.36:34398] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.shawnlayne.com"] [uri "/.git/info/refs"] [unique_id "as5qlfJhFjJBphHSsGKztAAAAD0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 09:30:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 152.237.230.36 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 152.237.230.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 05:30:44.870170 2026] [security2:error] [pid 20811:tid 20811] [client 152.237.230.36:33650] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emmavance.com"] [uri "/.git/info/refs"] [unique_id "as36RAZbJg1PhcSovhqAIgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 08:35:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 152.237.230.36 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 152.237.230.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 04:35:00.625536 2026] [security2:error] [pid 28121:tid 28121] [client 152.237.230.36:48454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.billiardlifetapleague.com"] [uri "/.git/info/refs"] [unique_id "as3tNN-h6NS7e7_qdCoTHwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
webanyone
2026-10-13 07:57:31
(1 day ago)
Secret file probe | method: GET | path: /.git/info/refs | ua: git/2.53.0
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 19:49:25
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 152.237.230.36 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 152.237.230.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 15:49:18.858931 2026] [security2:error] [pid 19640:tid 19640] [client 152.237.230.36:34104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.urlpick.com"] [uri "/.git/info/refs"] [unique_id "as05vhuw2PS1hgsVxehwnQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
7
of 7 reports
