JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.52.92.99

157.52.92.99 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 0%: ?

ISP	Fastly, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS54113
Domain Name	fastly.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 157.52.92.99 is an IP address from within our whitelist belonging to the subnet 157.52.64.0/18, which we identify as: "Fastly CDN".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 157.52.92.99

Whois 157.52.92.99

IP Abuse Reports for 157.52.92.99:

This IP address has been reported a total of 53 times from 13 distinct sources. 157.52.92.99 was first reported on March 3rd 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-07-21 19:16:36 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 157.52.92.99 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 157.52.92.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 15:16:28.843801 2026] [security2:error] [pid 2362:tid 2362] [client 157.52.92.99:56762] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "randeen.com"] [uri "/.git/HEAD"] [unique_id "al_FjEVR7OUbv3HKUCVhLQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 RH5	2026-07-21 17:02:16 (3 hours ago)	Restricted URL probing (/.git) (UTC 2026-07-21 17:02)	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 16:41:25 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 157.52.92.99 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 157.52.92.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 12:41:17.729540 2026] [security2:error] [pid 12421:tid 12421] [client 157.52.92.99:64858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.therhclan.com"] [uri "/.git/HEAD"] [unique_id "al-hLaDaLxdGliUmz3HTWQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇲🇾 Rizzy	2026-07-21 16:01:35 (4 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-07-21 15:14:30 (5 hours ago)	Try to access /.git/HEAD	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 11:55:53 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 157.52.92.99 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 157.52.92.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 07:55:48.808404 2026] [security2:error] [pid 19665:tid 19665] [client 157.52.92.99:45836] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.scoretopicturenetwork.com"] [uri "/.git/HEAD"] [unique_id "al9eREMqGVrTi3PeLM389AAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 11:04:10 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 157.52.92.99 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 157.52.92.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 07:04:04.197718 2026] [security2:error] [pid 29859:tid 29859] [client 157.52.92.99:48574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bronislawsuchanek.com"] [uri "/.git/HEAD"] [unique_id "al9SJFdOV7pXd17CluyR9wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-07-21 09:38:57 (10 hours ago)	cloudlinux2 fail2ban: 2026-07-21 11:34:04,779 fail2ban.filter [1927]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-07-21 11:34:04,779 fail2ban.filter [1927]: INFO [plesk-wordpress] Found 173.239.214.130 - 2026-07-21 11:34:04cloudlinux2 fail2ban: 2026-07-21 11:34:11,307 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 164.100.39.102 - 2026-07-21 11:34:11cloudlinux2 fail2ban: 2026-07-21 11:34:21,871 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 164.100.39.102 - 2026-07-21 11:34:21cloudlinux2 fail2ban: 2026-07-21 11:34:22,073 fail2ban.actions [1927]: NOTICE [plesk-modsecurity] Ban 164.100.39.102cloudlinux2 fail2ban: 2026-07-21 11:34:22,081 fail2ban.filter [1927]: INFO [recidive] Found 164.100.39.102 - 2026-07-21 11:34:22cloudlinux2 fail2ban: 2026-07-21 11:35:16,155 fail2ban.actions [1927]: NOTICE [plesk-modsecurity] Unban 103.191.203.104cloudlinux2 fail2ban: 2026-07-21 11:36:09,226 fail2ban.filter [1927]: INFO [plesk-modsecurity] Found 157.52.92.99 - 2026-07-21 11:36:09cloudlinux2 fail2ban: 2026-07-21 11:36:10,831 show less	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 09:31:20 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 157.52.92.99 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 157.52.92.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 05:31:14.745363 2026] [security2:error] [pid 15433:tid 15433] [client 157.52.92.99:47556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.nebraskaadaptivesports.org"] [uri "/.git/HEAD"] [unique_id "al88YteE8FtSzyXVFQDEJQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-07-21 09:08:54 (11 hours ago)	Web vulnerability probing: /.git/HEAD	Web App Attack
🇺🇸 TPI-Abuse	2026-07-21 08:27:43 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 157.52.92.99 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 157.52.92.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jul 21 04:27:39.670332 2026] [security2:error] [pid 29367:tid 29367] [client 157.52.92.99:43530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.neuromancer.xyz"] [uri "/.git/HEAD"] [unique_id "al8te_ppdWBptSbsl4NzSQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Axel	2026-07-21 00:00:15 (20 hours ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/HEAD Se ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/HEAD Server: UK-01 show less	Web App Attack Hacking SQL Injection
🇦🇺 2000cn.com.au	2026-07-20 23:36:34 (20 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 slay3r9903	2026-07-20 23:34:17 (20 hours ago)	IP address blocked by Cloudflare security rules due to suspicious activity and security violations.	Hacking Bad Web Bot
🇺🇸 TPI-Abuse	2026-07-20 23:18:18 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 157.52.92.99 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 157.52.92.99 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 19:18:13.925227 2026] [security2:error] [pid 1172436:tid 1172436] [client 157.52.92.99:63854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "97201.com"] [uri "/.git/HEAD"] [unique_id "al6staRG3GpDzIkR9TeENwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 198.244.189.160

🇲🇺 197.227.8.186

🇨🇴 186.82.87.218

🇮🇶 185.185.173.145

🇺🇸 172.202.37.160

🇬🇧 161.35.34.21

🇭🇰 156.225.1.97

🇺🇸 153.66.28.132

🇯🇵 20.153.204.5

🇮🇳 2404:6800:4000:1025::12a

🇹🇼 198.235.24.48

🇬🇧 194.74.196.10

🇭🇰 152.32.212.226

🇫🇷 91.231.89.48

🇬🇧 5.252.83.166

🇧🇪 2a00:1450:400c:c23::128

🇲🇩 194.110.247.198

🇺🇸 192.129.135.51

🇹🇭 182.53.183.143

🇫🇷 155.117.127.28