๐บ๐ธ
TPI-Abuse
2026-07-19 05:37:56
(16 minutes ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.65 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 01:37:48.317792 2026] [security2:error] [pid 20003:tid 20003] [client 157.52.92.65:45880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "34.gisur.com"] [uri "/.git/HEAD"] [unique_id "alxirLTMHkkq0ofobyKkMgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-19 04:23:14
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.65 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jul 19 00:23:08.950706 2026] [security2:error] [pid 18138:tid 18138] [client 157.52.92.65:56466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.rbmediaworks.com"] [uri "/.git/HEAD"] [unique_id "alxRLD9Qz4GMUNL4uc1wEgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-19 01:30:06
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.65 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 21:30:02.026047 2026] [security2:error] [pid 10969:tid 10969] [client 157.52.92.65:59722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.midwayisland.com"] [uri "/.git/config"] [unique_id "alwomskmBHbx53XfWeC37wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-19 01:11:41
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.65 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 21:11:37.663671 2026] [security2:error] [pid 7201:tid 7201] [client 157.52.92.65:8384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.sandiegoone.com"] [uri "/.git/HEAD"] [unique_id "alwkSXCoyp8B3CoYR8i9CgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-19 00:21:32
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.65 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 20:21:29.149915 2026] [security2:error] [pid 30068:tid 30068] [client 157.52.92.65:45278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "web217.dnchosting.com"] [uri "/.git/HEAD"] [unique_id "alwYiaQ5V79DmOsuRpqY9gAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-07-18 17:47:28
(12 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐ญ๐บ
bcsaba
2026-07-18 08:50:18
(21 hours ago)
Probing for .git:
157.52.92.65 - - [18/Jul/2026:10:50:16 +0200] "GET /.git/HEAD HTTP/1.1" 403 548 "- ...
show more
Probing for .git:
157.52.92.65 - - [18/Jul/2026:10:50:16 +0200] "GET /.git/HEAD HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
show less
Web App Attack
๐ฉ๐ช
ISPLtd
2026-07-17 12:34:55
(1 day ago)
157.52.92.65 [17/Jul/2026:09:34:54 -0300] altenberg-ib.com:443 URL:/.git/config "GET /.git/config
15 ...
show more
157.52.92.65 [17/Jul/2026:09:34:54 -0300] altenberg-ib.com:443 URL:/.git/config "GET /.git/config
157.52.92.65 [17/Jul/2026:09:34:54 -0300] altenberg-ib.com:443 URL:/.git/HEAD "GET /.git/HEAD
...
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-03-03 11:48:11
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.65 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.65 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 03 06:48:02.161720 2026] [security2:error] [pid 12931:tid 12931] [client 157.52.92.65:48592] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thelotsmokehouse.com"] [uri "/media/.env"] [unique_id "aabKcjfZVSJPRIvrKRyQNgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฟ
Antinson
2026-02-22 08:27:24
(4 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot