๐บ๐ธ
TPI-Abuse
2026-07-22 20:25:44
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 16:25:39.583608 2026] [security2:error] [pid 2520862:tid 2520862] [client 157.52.92.86:63866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joepeters.org"] [uri "/.git/config"] [unique_id "amEnQyrwJtx6MG2BqFfEfQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-22 20:04:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 16:04:34.160534 2026] [security2:error] [pid 19130:tid 19130] [client 157.52.92.86:19438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nbcnewsradio.com"] [uri "/.git/HEAD"] [unique_id "amEiUtwbpHO_5Aqw03qhtgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-07-22 14:11:10
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-22 09:44:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 22 05:44:35.834535 2026] [security2:error] [pid 997391:tid 997391] [client 157.52.92.86:56948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.redbends.com"] [uri "/.git/HEAD"] [unique_id "amCRA7BobqjHCe9wFhxuEQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-21 23:58:43
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 19:58:35.861607 2026] [security2:error] [pid 28958:tid 28958] [client 157.52.92.86:64062] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.therhclan.com"] [uri "/.git/HEAD"] [unique_id "amAHq_U3M5ReO2vfHJMQ3gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-21 20:48:40
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 16:48:35.705059 2026] [security2:error] [pid 24973:tid 24973] [client 157.52.92.86:21876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tttns.com"] [uri "/.git/HEAD"] [unique_id "al_bI4J9oCLqth0AxtkegQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-21 17:48:49
(2 days ago)
2026/07/21 17:48:46 [error] 4713#4713: *98641 [client 157.52.92.86] ModSecurity: Access denied with ...
show more
2026/07/21 17:48:46 [error] 4713#4713: *98641 [client 157.52.92.86] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file "/usr/local/owasp-modsecurity-crs-4.11.0/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.28.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "datingapp.ingeltechgh.com"] [uri "/.git/HEAD"] [unique_id "178465612644.336220"] [ref ""], client: 157.52.92.86, server: srv.ingeltechgh.com, request: "GET /.git/HEAD HTTP/1.1", host: "datingapp.ingeltechgh.com"
2026/07/21 17:48:46 [error] 4713#4713: *98641 [client 157.52.92.86] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file "/usr/loca
...
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-07-21 12:14:37
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 08:14:32.468342 2026] [security2:error] [pid 1610:tid 1610] [client 157.52.92.86:39768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.snotrocketgames.com"] [uri "/.git/HEAD"] [unique_id "al9iqI27mY7d3ZDIySCcMgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-21 10:43:44
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 06:43:38.910726 2026] [security2:error] [pid 24485:tid 24485] [client 157.52.92.86:20720] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.sixsensehealing.com"] [uri "/.git/HEAD"] [unique_id "al9NWhRiBfuX9B094zrmdAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-21 10:05:38
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 06:05:33.654639 2026] [security2:error] [pid 30256:tid 30256] [client 157.52.92.86:48376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.pascoyardsale.com"] [uri "/.git/HEAD"] [unique_id "al9EbdaPYoW5pC38VQDybgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-07-21 05:14:21
(3 days ago)
2 attacks on VC URLs:
GET /.git/HEAD HTTP/1.1
Hacking
๐บ๐ธ
TPI-Abuse
2026-07-20 23:48:49
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 19:48:44.222902 2026] [security2:error] [pid 4472:tid 4472] [client 157.52.92.86:14054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.scrunchiebutt.com"] [uri "/.git/HEAD"] [unique_id "al6z3KtW_tHZDqmvh6_PnwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฟ๐ฆ
conure
2026-07-20 23:31:01
(3 days ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 0s
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-20 22:38:06
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 157.52.92.86 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 18:38:01.449083 2026] [security2:error] [pid 9150:tid 9150] [client 157.52.92.86:33514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "media1069.com"] [uri "/.git/HEAD"] [unique_id "al6jSRuS4hm2ieD9sVWtcwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-20 19:35:02
(3 days ago)
suspicious request in access.log
Web App Attack