πΊπΈ
TPI-Abuse
2026-07-20 01:32:04
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 21:31:58.533197 2026] [security2:error] [pid 13499:tid 13499] [client 157.52.92.55:12948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.heckenbach.org"] [uri "/.git/HEAD"] [unique_id "al16jmRpYDZIhi3CPq1tWQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-19 23:04:55
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 19:04:50.776883 2026] [security2:error] [pid 2269773:tid 2269773] [client 157.52.92.55:26560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.sbiusa.org"] [uri "/.git/HEAD"] [unique_id "al1YEuK749kuzgFdABzFSAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-19 14:58:22
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 10:58:17.826470 2026] [security2:error] [pid 6782:tid 6782] [client 157.52.92.55:58450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mtl.microkerneltechnologies.com"] [uri "/.git/HEAD"] [unique_id "alzmCRrrdBcRRoRJYtSxkAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-19 14:25:40
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 10:25:35.034734 2026] [security2:error] [pid 9443:tid 9443] [client 157.52.92.55:61018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.artocratic.com"] [uri "/.git/config"] [unique_id "alzeX8iPfcm-XH4GZ-8NuQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
FeG Deutschland
2026-07-19 12:35:35
(15 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-19 11:34:30
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 07:34:26.380775 2026] [security2:error] [pid 216523:tid 216547] [client 157.52.92.55:28580] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.luckystonebeads.com"] [uri "/.git/config"] [unique_id "aly2QoowzoR_p6s4QeMq0wAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-19 09:39:17
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 05:39:12.208176 2026] [security2:error] [pid 22226:tid 22226] [client 157.52.92.55:41596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "harrisonwilde.com"] [uri "/.git/config"] [unique_id "alybQK_11MZl6cFeGsI1-wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-19 07:23:56
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 03:23:52.837355 2026] [security2:error] [pid 17764:tid 17764] [client 157.52.92.55:19894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ohnosound.com"] [uri "/.git/HEAD"] [unique_id "alx7iKrGE567JwLW-yK1VQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-19 05:15:22
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 01:15:06.511454 2026] [security2:error] [pid 15010:tid 15010] [client 157.52.92.55:18630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.muddypuddy.com.halotoys.com"] [uri "/.git/HEAD"] [unique_id "alxdWt4SOn03QKqI3PJvqwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-07-19 04:54:08
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 00:54:03.801080 2026] [security2:error] [pid 22638:tid 22647] [client 157.52.92.55:49998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.fernfieldbrooks.com"] [uri "/.git/config"] [unique_id "alxYa6waxOJXfXM-DxkJrQAAAQc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
MM-bot
2026-07-19 04:27:33
(23 hours ago)
URL-probe: HTTP/1.1 GET request on /.git/config (2026-07-19 06:27:33 UTC+2)
Web App Attack
Hacking
π«π·
masterguru
2026-07-19 03:13:33
(1 day ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 157.52.92.55 (SG/Singapore/-): 2 in t ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 157.52.92.55 (SG/Singapore/-): 2 in the last 3600 secs (0-196)
show less
Hacking
πΊπΈ
TPI-Abuse
2026-07-19 02:36:26
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.55 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 22:36:19.860055 2026] [security2:error] [pid 16806:tid 16806] [client 157.52.92.55:6666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.ggisoft.com"] [uri "/.git/HEAD"] [unique_id "alw4I652BOb8_CVVPjHAVwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π§πͺ
boxed-it
2026-07-17 22:09:09
(2 days ago)
GET /.git/config (Tarpitted for 2m10s, wasted 7.73kB)
Web App Attack
π¬π§
Smish
2026-07-17 22:06:57
(2 days ago)
HONEYPOT HIT --> Fail2ban time=1784326016 log=2026-07-17T23:06:56+01:00 ip=157.52.92.55 host=as21066 ...
show more
HONEYPOT HIT --> Fail2ban time=1784326016 log=2026-07-17T23:06:56+01:00 ip=157.52.92.55 host=as210667.net method=GET uri="/.git/config" status=404 ua="Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:126.0) Gecko/20100101 Firefox/126.0" ref="-" rid=e48d7ad9bbf3122a57cad2d0668f6335
show less
Web App Attack