🇨🇳
PrivateLiu
2026-06-21 10:45:07
UTC ·
(4 months ago)
[AbuseIPDB auto-report] Rules: Rule1, Rule5. Region: non-CN. Config/sensitive path probing: accessed .env/.config/admin/.git paths returning 4xx/444; Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, ...
show more
[AbuseIPDB auto-report] Rules: Rule1, Rule5. Region: non-CN. Config/sensitive path probing: accessed .env/.config/admin/.git paths returning 4xx/444; Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /.git/logs/HEAD, /.git/index, /.git/HEAD, /.git/config. Statuses: 404. Methods: GET. UA: N/A
show less
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-06-20 23:39:48
UTC ·
(4 months ago)
GET /.git/config (Tarpitted for 1d15h8m26s, wasted 8.06MB)
Web App Attack
🇨🇳
PrivateLiu
2026-06-19 14:57:17
UTC ·
(4 months ago)
[AbuseIPDB auto-report] Rules: Rule1, Rule5. Region: non-CN. Config/sensitive path probing: accessed .env/.config/admin/.git paths returning 4xx/444; Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, ...
show more
[AbuseIPDB auto-report] Rules: Rule1, Rule5. Region: non-CN. Config/sensitive path probing: accessed .env/.config/admin/.git paths returning 4xx/444; Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /.git/config, /.git/HEAD, /.git/index, /.git/logs/HEAD. Statuses: 404. Methods: GET. UA: N/A
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 13:12:13
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 52.15.152.32 (ec2-52-15-152-32.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 09:12:06.339668 2026] [security2:error] [pid 1 ...
show more
(mod_security) mod_security (id:210492) triggered by 52.15.152.32 (ec2-52-15-152-32.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 09:12:06.339668 2026] [security2:error] [pid 10031:tid 10031] [client 52.15.152.32:40560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.104"] [uri "/.git/HEAD"] [unique_id "ajVAJpYV6eEXaNVMy5UkxgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇳
PrivateLiu
2026-06-19 13:08:27
UTC ·
(4 months ago)
[AbuseIPDB auto-report] Rules: Rule1, Rule5. Region: non-CN. Config/sensitive path probing: accessed .env/.config/admin/.git paths returning 4xx/444; Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, ...
show more
[AbuseIPDB auto-report] Rules: Rule1, Rule5. Region: non-CN. Config/sensitive path probing: accessed .env/.config/admin/.git paths returning 4xx/444; Known vulnerability path probing: targeting CMS (WordPress/Drupal), phpMyAdmin, actuator endpoints, or other known vulnerable paths. Sample paths: /.git/HEAD, /.git/config, /.git/logs/HEAD. Statuses: 404. Methods: GET. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0
show less
Bad Web Bot
Web App Attack
🇩🇪
tentwentyfour
2026-06-19 11:57:12
UTC ·
(4 months ago)
Blocked for probing for sensitive web application components
Brute-Force
Web App Attack
🇺🇸
xmission.com
2026-06-19 11:16:02
UTC ·
(4 months ago)
Blocked by UFW (TCP on 80)
Source port: 42128
TTL: 58
Packet length: 60
TOS: 0x00
This report (for 52.15.152.32) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Web App Attack
🇩🇪
dpsbs
2026-06-19 10:55:36
UTC ·
(4 months ago)
url scanning on multiple public ips detected
Bad Web Bot
🇫🇮
[email protected]
2026-06-19 10:53:55
UTC ·
(4 months ago)
Attack attempt against Interwebbi servers; *Port Scan* detected from 52.15.152.32 (US/United States/ec2-52-15-152-32.us-east-2.compute.amazonaws.com). 5 hits in the last 140 seconds; IP: 52.15.152.32; Ports: *; Direction: 0; Trigger: PS_LIMIT;
Brute-Force
🇺🇸
Gabriel Camargo
2026-06-19 10:29:25
UTC ·
(4 months ago)
52.15.152.32 - - [19/Jun/2026:05:29:24 -0500] "GET /.git/HEAD HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36"
52.15.152.32 - - [19/Jun/2026:05:29:24 -0500] ...
show more
52.15.152.32 - - [19/Jun/2026:05:29:24 -0500] "GET /.git/HEAD HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Mobile Safari/537.36"
52.15.152.32 - - [19/Jun/2026:05:29:24 -0500] "GET /.git/config HTTP/1.1" 404 197 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
52.15.152.32 - - [19/Jun/2026:05:29:25 -0500] "GET /.git/logs/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0"
...
show less
Brute-Force
SSH
🇺🇸
MPL
2026-06-19 09:19:26
UTC ·
(4 months ago)
tcp/2087
Port Scan
🇺🇸
TPI-Abuse
2026-06-19 09:13:33
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 52.15.152.32 (ec2-52-15-152-32.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 05:13:29.398792 2026] [security2:error] [pid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 52.15.152.32 (ec2-52-15-152-32.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 05:13:29.398792 2026] [security2:error] [pid 24461:tid 24461] [client 52.15.152.32:38566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.226"] [uri "/.git/HEAD"] [unique_id "ajUIOUqi7uen-jLc_xMiLgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-19 08:49:32
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 52.15.152.32 (ec2-52-15-152-32.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 04:49:29.875970 2026] [security2:error] [pid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 52.15.152.32 (ec2-52-15-152-32.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 04:49:29.875970 2026] [security2:error] [pid 20635:tid 20635] [client 52.15.152.32:48712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.188"] [uri "/.git/config"] [unique_id "ajUCmZBj6Y_Q0x0ccC5O-wAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-19 08:45:18
UTC ·
(4 months ago)
Unauthorized connection attempt
Port Scan
Hacking
Exploited Host
🇫🇷
GabrielJST
2026-06-19 08:40:05
UTC ·
(4 months ago)
*Port Scan* detected from 52.15.152.32 (US/United States/ec2-52-15-152-32.us-east-2.compute.amazonaws.com).
Port Scan