🇫🇷
MatStef132
2026-05-19 20:55:42
(2 weeks ago)
MatShield L7: blocked on mathost.eu (ua-quarantined)
Bad Web Bot
🇳🇱
MatStef132
2026-05-19 20:21:17
(2 weeks ago)
MatShield L7: blocked on chat.justchat.icu (ua-quarantined)
Bad Web Bot
🇳🇱
MatStef132
2026-05-15 13:30:00
(3 weeks ago)
MatShield L7 blocked request to fivemtest.mathost.eu for reason ua-q
DDoS Attack
Bad Web Bot
Web App Attack
🇫🇷
MatStef132
2026-05-14 22:03:10
(3 weeks ago)
MatShield L7 blocked request to mathost.eu for reason ua-q
DDoS Attack
Bad Web Bot
Web App Attack
🇫🇷
MatStef132
2026-05-14 21:32:38
(3 weeks ago)
[mathost.eu] clic
DDoS Attack
Bad Web Bot
Web App Attack
🇪🇸
el-brujo
2026-04-28 15:44:20
(1 month ago)
Cloudflare WAF: Request Path: /123456 Request Query: ?utm_source=rn84DyQo-Vwoo-E9WS-yabldjPyFxzI Hos ...
show more
Cloudflare WAF: Request Path: /123456 Request Query: ?utm_source=rn84DyQo-Vwoo-E9WS-yabldjPyFxzI Host: elhacker.net userAgent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.129 Safari/537.36 Action: block Source: ratelimit ASN Description: 3xK Tech GmbH Country: DE Method: GET Timestamp: 2026-04-28T15:44:20Z ruleId: 11a71ad4659e48b29b5173e3bcc61b4a. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/MHG-LAB/Cloudflare-WAF-to-AbuseIPDB).
show less
Hacking
SQL Injection
Web App Attack
🇮🇩
Burayot
2026-03-27 00:16:56
(2 months ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.53.36 (GB/United Kingdom/-) ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 104.207.53.36 (GB/United Kingdom/-): 1 in the last 3600 secs
show less
Web App Attack
2026-02-15 04:31:22
(3 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2025-12-02 20:04:24
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.36 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 15:04:21.448598 2025] [security2:error] [pid 3967:tid 3967] [client 104.207.53.36:39617] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "disneyweddinginvitations.com"] [uri "/.env"] [unique_id "aS9GRbrdyjHMHBDWXyG-eQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 13:18:18
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.36 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 08:18:14.783587 2025] [security2:error] [pid 1918:tid 1918] [client 104.207.53.36:13277] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeffjastro.com"] [uri "/.env"] [unique_id "aS7nFl2D7ESNZ0Zaps0oZQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 12:35:31
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.36 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 07:35:28.538888 2025] [security2:error] [pid 28051:tid 28051] [client 104.207.53.36:33709] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kavahawaii.com"] [uri "/.env"] [unique_id "aS7dEEAd8EZNsJr9-0dOSAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 08:28:22
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.36 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 03:28:16.410260 2025] [security2:error] [pid 2060478:tid 2060478] [client 104.207.53.36:18633] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "puregoldmorgans.com"] [uri "/.git/HEAD"] [unique_id "aS6jINJ_Sfn4bSIIMO0OvgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 06:00:45
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.36 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 01:00:35.623139 2025] [security2:error] [pid 15084:tid 15084] [client 104.207.53.36:26615] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jerielster.com"] [uri "/.git/HEAD"] [unique_id "aS6Ag6hYmtEnD3ZVaQEy-gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 05:11:27
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.36 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 02 00:11:19.073035 2025] [security2:error] [pid 24573:tid 24573] [client 104.207.53.36:32895] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gaeltv.com"] [uri "/.git/HEAD"] [unique_id "aS509xtfsxnrI_QVu72-DQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-12-02 03:58:52
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 104.207.53.36 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 104.207.53.36 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Dec 01 22:58:44.765189 2025] [security2:error] [pid 29453:tid 29453] [client 104.207.53.36:58105] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qed-consulting.co"] [uri "/.env"] [unique_id "aS5j9Bnekz92qpe0INp3aAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack