🇩🇪
FeG Deutschland
2026-05-22 07:18:45
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇫🇷
MatStef132
2026-05-19 20:55:42
(2 weeks ago)
MatShield L7: blocked on mathost.eu (ua-quarantined)
Bad Web Bot
🇳🇱
MatStef132
2026-05-19 20:21:17
(2 weeks ago)
MatShield L7: blocked on chat.justchat.icu (ua-quarantined)
Bad Web Bot
🇳🇱
MatStef132
2026-05-15 13:29:59
(3 weeks ago)
MatShield L7 blocked request to fivemtest.mathost.eu for reason ua-q
DDoS Attack
Bad Web Bot
Web App Attack
🇫🇷
MatStef132
2026-05-14 22:03:10
(3 weeks ago)
MatShield L7 blocked request to mathost.eu for reason ua-q
DDoS Attack
Bad Web Bot
Web App Attack
🇫🇷
MatStef132
2026-05-14 21:32:37
(3 weeks ago)
[mathost.eu] ua-q
DDoS Attack
Bad Web Bot
Web App Attack
🇪🇸
el-brujo
2026-04-28 15:44:20
(1 month ago)
Cloudflare WAF: Request Path: /123456 Request Query: ?ref=7nbp4fPYx Host: elhacker.net userAgent: Mo ...
show more
Cloudflare WAF: Request Path: /123456 Request Query: ?ref=7nbp4fPYx Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.129 Safari/537.36 Action: block Source: ratelimit ASN Description: 3xK Tech GmbH Country: US Method: GET Timestamp: 2026-04-28T15:44:20Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
2026-02-21 19:25:38
(3 months ago)
Forum/form spam
Web Spam
🇺🇸
TPI-Abuse
2026-02-11 17:58:45
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 12:58:38.846456 2026] [security2:error] [pid 18247:tid 18247] [client 104.207.45.32:11141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arabou.co"] [uri "/.env.save"] [unique_id "aYzDTnZGHkcyAEDQwe6ABQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-02-10 21:04:45
(3 months ago)
.env scanning [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 05:25:14
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Feb 10 00:24:57.726355 2026] [security2:error] [pid 1666447:tid 1666447] [client 104.207.45.32:43327] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ifatreefallsfilm.com"] [uri "/test/.git/config"] [unique_id "aYrBKarYhgqks4VRxX9DegAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 04:46:35
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 23:46:29.900764 2026] [security2:error] [pid 12843:tid 12865] [client 104.207.45.32:10289] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idealcentralvac.com"] [uri "/wp/.git/config"] [unique_id "aYq4JfA-0hoRFyiKDvyreAAAAQo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 02:54:30
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:54:23.851282 2026] [security2:error] [pid 21510:tid 21510] [client 104.207.45.32:37077] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingdomvalleyfarm.com"] [uri "/.env"] [unique_id "aYqd31aqH9MfSVThk_K6nQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 02:31:43
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 21:31:38.589355 2026] [security2:error] [pid 12679:tid 12679] [client 104.207.45.32:62771] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinareemagazine.com"] [uri "/api/.env"] [unique_id "aYqYirG7971G0Y-pQ0wdiwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-10 00:05:35
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.45.32 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.45.32 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Feb 09 19:05:32.992346 2026] [security2:error] [pid 2134542:tid 2134542] [client 104.207.45.32:11565] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kentsavagelaw.com"] [uri "/dev/.git/config"] [unique_id "aYp2TJf9CZPEdPBFpioY5AAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack