🇺🇸
solantex
2026-10-15 06:02:36
(1 hour ago)
Unauthorized automated scanning and reconnaissance against Solantex resources. No crawl, scan or tes ...
show more
Unauthorized automated scanning and reconnaissance against Solantex resources. No crawl, scan or test permission has been granted to this source.
show less
Web App Attack
🇩🇪
Philister11
2026-10-15 02:47:29
(4 hours ago)
CrowdSec: LePresidente/http-generic-403-bf (DE/AS14061)
Web App Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-10-15 02:08:09
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 165.232.115.98 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 165.232.115.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 22:08:02.103899 2026] [security2:error] [pid 15877:tid 15877] [client 165.232.115.98:36742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sb-adventures.com"] [uri "/.git/config"] [unique_id "atA1gtZTrEaqW9HRY8pUOQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 01:13:09
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 165.232.115.98 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 165.232.115.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 21:13:02.433323 2026] [security2:error] [pid 24781:tid 24781] [client 165.232.115.98:53502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sawmat.com"] [uri "/.git/config"] [unique_id "atAonuDARAEX18HaltyevwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
Inartis
2026-10-15 00:38:46
(6 hours ago)
165.232.115.98 - - [15/Oct/2026:02:38:45 +0200] "GET /.git/config HTTP/1.1" 200 51371 "-" "Mozilla/5 ...
show more
165.232.115.98 - - [15/Oct/2026:02:38:45 +0200] "GET /.git/config HTTP/1.1" 200 51371 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 00:02:48
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 165.232.115.98 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 165.232.115.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 20:02:40.396284 2026] [security2:error] [pid 9608:tid 9608] [client 165.232.115.98:54522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saveourstats.com"] [uri "/.git/config"] [unique_id "atAYIAi0_AyrJFoxfPkE3wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 23:30:44
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 165.232.115.98 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 165.232.115.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 19:30:36.293755 2026] [security2:error] [pid 21169:tid 21169] [client 165.232.115.98:57226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "savannah-house.com"] [uri "/.git/config"] [unique_id "atAQnE6URlYvGM1QkqQESAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ctidrv
2026-10-14 23:06:18
(8 hours ago)
Honeypot detection. Threat score: 45/100. Collector: honeypot. | Request: GET //lib/kcfinder/upload. ...
show more
Honeypot detection. Threat score: 45/100. Collector: honeypot. | Request: GET //lib/kcfinder/upload.php | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 | Reasons: no_sec_fetch, no_cookies, high_frequency, very_high_frequency
show less
Exploited Host
🇺🇸
TPI-Abuse
2026-10-14 22:55:08
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 165.232.115.98 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 165.232.115.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 18:54:57.927483 2026] [security2:error] [pid 21526:tid 21526] [client 165.232.115.98:44960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saudigreenrecyling.com"] [uri "/.git/config"] [unique_id "atAIQTHbNkr0GTp1fUNIXQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
factor1
2026-10-14 22:29:51
(8 hours ago)
CrowdSec at saturn Reports Abuse
Web App Attack
2026-10-14 21:09:23
(9 hours ago)
{"level":"info","ts":1792012162.4703445,"logger":"http.log.access.log0","msg":"handled request","req ...
show more
{"level":"info","ts":1792012162.4703445,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"172.71.164.183","remote_port":"10458","client_ip":"172.71.164.183","proto":"HTTP/2.0","method":"GET","host":"saspunas.com","uri":"/.git/config","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"],"Cf-Ray":["a4a9908f59a7d27d-FRA"],"Cf-Ipcountry":["DE"],"Accept-Encoding":["gzip, br"],"Accept":["*/*"],"Cf-Connecting-Ip":["165.232.115.98"],"Cf-Visitor":["{\"scheme\":\"https\"}"],"X-Forwarded-Proto":["https"],"X-Forwarded-For":["165.232.115.98"],"Cdn-Loop":["cloudflare; loops=1"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"saspunas.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000107673,"size":0,"status":403,"resp_headers":{"Connection":["close"],"Content-Type":[],"Referrer-Policy":["strict-origin-when-cross-origin"],"X-Content-Typ
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 21:04:46
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 165.232.115.98 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 165.232.115.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 17:04:38.493881 2026] [security2:error] [pid 11101:tid 11105] [client 165.232.115.98:47582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saskiarose.com"] [uri "/.git/config"] [unique_id "as_uZkn5aXzNQj9Vb1jcPAAAAUE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-14 21:04:21
(10 hours ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 165.232.115.98 - - [14/Oct/2026:23:04:13 +0200] "GET /.git/config HTTP/1.1" 403 2099 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇫🇷
GoodOldTOS
2026-10-14 20:42:49
(10 hours ago)
Highly suspect IP
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 20:38:42
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 165.232.115.98 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 165.232.115.98 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 16:38:37.016430 2026] [security2:error] [pid 8172:tid 8172] [client 165.232.115.98:33538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sarves.com"] [uri "/.git/config"] [unique_id "as_oTSNlbkO7T9hljAx0uQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
