🇩🇪
ValtonTahiri
2026-10-20 12:28:43
(3 days ago)
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show more
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=52.161.75.168; proto=TCP; source_port=13344; target_port=3000
show less
Port Scan
🇺🇸
pduggusa
2026-05-12 03:44:31
(5 months ago)
Detected attacking dugganusa.com at 2026-05-12T03:44:31.505Z | Attack: Web Service | Source: DugganU ...
show more
Detected attacking dugganusa.com at 2026-05-12T03:44:31.505Z | Attack: Web Service | Source: DugganUSA PreCog auto-block
show less
Hacking
🇮🇱
spd.co.il
2026-04-09 01:02:42
(6 months ago)
Web application attack detected
Hacking
Web App Attack
🇳🇱
homeshowdomain.nl
2026-04-07 22:03:15
(6 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-04-06.
show less
Web App Attack
SSH
Hacking
🇫🇮
kumiko
2026-04-07 00:15:19
(6 months ago)
[2026-04-07 03:15:18] Probing for dotfiles
"GET /.git/config HTTP/2.0" 301
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-07 00:03:59
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 52.161.75.168 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 52.161.75.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 20:03:56.117290 2026] [security2:error] [pid 945381:tid 945391] [client 52.161.75.168:35736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cynosureirrigation.com"] [uri "/.git/config"] [unique_id "adRJ7Lqyu9aCY1PBHBhYbAAAAQc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 23:41:20
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 52.161.75.168 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 52.161.75.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 19:41:16.704282 2026] [security2:error] [pid 687494:tid 687494] [client 52.161.75.168:35962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "san-marino-marine-consulting.com"] [uri "/.git/config"] [unique_id "adREnFEDATgaR98vNQvg0gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-04-06 23:11:26
(6 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇧🇪
cmbplf
2026-04-06 22:45:07
(6 months ago)
683 requests with url.path */.git/config
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-04-06 22:41:12
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 52.161.75.168 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 52.161.75.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 18:41:08.287273 2026] [security2:error] [pid 462780:tid 462780] [client 52.161.75.168:36756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "url.kircali.net"] [uri "/.git/config"] [unique_id "adQ2hHTyXZXszWEeIbOIlgAAAAY"], referer: https://www.youtube.com/
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 22:19:47
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 52.161.75.168 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 52.161.75.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 18:19:41.272035 2026] [security2:error] [pid 396694:tid 396694] [client 52.161.75.168:36345] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rondeal.com"] [uri "/.git/config"] [unique_id "adQxfTQY-RLe1bugCXV1HwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-04-06 21:59:40
(6 months ago)
Auto-ban: >3000 req/min op 2026-04-06
Web App Attack
SSH
Hacking
2026-04-06 21:55:08
(6 months ago)
apache vulnerability scan
Web App Attack
🇺🇸
TPI-Abuse
2026-04-06 21:29:30
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 52.161.75.168 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 52.161.75.168 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Apr 06 17:29:24.434860 2026] [security2:error] [pid 3176:tid 3194] [client 52.161.75.168:35774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mailme.name"] [uri "/.git/config"] [unique_id "adQltF7J0pT4CJZvMykh8QAAAVA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-04-06 21:09:52
(6 months ago)
(mod_security) mod_security triggered on hostname [redacted] 52.161.75.168 (US/United States/-)
SQL Injection
