๐บ๐ธ
TPI-Abuse
2026-07-22 00:09:54
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 20:09:49.901746 2026] [security2:error] [pid 45971:tid 45971] [client 157.52.92.54:16768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.therhclan.com"] [uri "/.git/HEAD"] [unique_id "amAKTbAkq8gNzP_xq7N23gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-21 23:22:57
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 19:22:51.971147 2026] [security2:error] [pid 549256:tid 549256] [client 157.52.92.54:10442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mofcolorado.com"] [uri "/.git/HEAD"] [unique_id "al__S3_QIlMMwagIiDsESAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-21 17:10:21
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 13:10:17.785466 2026] [security2:error] [pid 27847:tid 27847] [client 157.52.92.54:26286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mollins.com"] [uri "/.git/HEAD"] [unique_id "al-n-S0NMA3mKrF3-TIrmwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-21 13:16:13
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 09:16:06.550029 2026] [security2:error] [pid 3687798:tid 3687817] [client 157.52.92.54:53490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tristatepropertymgmt.com"] [uri "/.git/HEAD"] [unique_id "al9xFho4R10xL4vubdFrrgAAAFE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
xxkodedxx
2026-07-21 12:37:11
(15 hours ago)
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 2ร edge-block in 10 ...
show more
[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost)
Trigger: 2ร edge-block in 10m window.
Origin: SG / AS54113 Fastly, Inc.
Active: 12:37:03โ12:37:04 UTC
Volume: 2 HTTP req
Probed: /.git/HEAD
Status mix: 444ร2
UA: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-21 11:46:34
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 07:46:27.996343 2026] [security2:error] [pid 342958:tid 342958] [client 157.52.92.54:37894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.tortoisehosting.com"] [uri "/.git/HEAD"] [unique_id "al9cE3Oh5otcxUvr3Yt1-gAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-21 10:51:21
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 06:51:16.376958 2026] [security2:error] [pid 21277:tid 21277] [client 157.52.92.54:31264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.mariedjones.com"] [uri "/.git/HEAD"] [unique_id "al9PJCYkMyGeXV33ZHoGZgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-07-21 05:13:48
(23 hours ago)
2 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
๐บ๐ธ
TPI-Abuse
2026-07-21 00:02:05
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 20:02:00.107727 2026] [security2:error] [pid 3281916:tid 3281916] [client 157.52.92.54:7542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.debhill.com"] [uri "/.git/HEAD"] [unique_id "al62-LwV8JKsr1OB5heEKwAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Starburst SysOp Team
2026-07-20 23:03:19
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-nue6-1)
Hacking
Web App Attack
๐ฟ๐ฆ
conure
2026-07-20 22:46:01
(1 day ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-20 22:41:53
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 18:41:50.986516 2026] [security2:error] [pid 24814:tid 24814] [client 157.52.92.54:33952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ruthbalser.org"] [uri "/.git/HEAD"] [unique_id "al6kLjgHLjHitToKC2ecvwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-20 22:20:25
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 18:20:17.922080 2026] [security2:error] [pid 5646:tid 5646] [client 157.52.92.54:45842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brauerfamily.org"] [uri "/.git/HEAD"] [unique_id "al6fIZUhy_L_RHeoYa6ttAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-20 18:05:10
(1 day ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-20 18:01:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.54 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 14:01:07.555887 2026] [security2:error] [pid 16570:tid 16570] [client 157.52.92.54:2628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.brandfacets.com"] [uri "/.git/HEAD"] [unique_id "al5iYxoRjSIPaZuozfodPAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack