🇫🇷
MatStef132
2026-05-19 20:55:42
(2 weeks ago)
MatShield L7: blocked on mathost.eu (ua-quarantined)
Bad Web Bot
🇳🇱
MatStef132
2026-05-19 20:21:30
(2 weeks ago)
MatShield L7: blocked on chat.justchat.icu (ua-quarantined)
Bad Web Bot
🇫🇷
MatStef132
2026-05-14 21:32:38
(3 weeks ago)
[mathost.eu] ua-q
DDoS Attack
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-03-27 00:55:13
(2 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 13:29:31
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.47.129 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 08:29:24.176614 2026] [security2:error] [pid 32630:tid 309] [client 45.3.47.129:48841] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "millicanjones.com"] [uri "/.env.save"] [unique_id "aY8nND1fK48W5T6p33OWJgAAAk8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 13:09:00
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.47.129 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 08:08:52.131827 2026] [security2:error] [pid 5860:tid 5860] [client 45.3.47.129:51451] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mikeberro.com"] [uri "/test/.git/config"] [unique_id "aY8iZIhr3NyyrLRbsJ6z0AAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-02-13 13:04:59
(3 months ago)
(modsecurity) srv201 ModSecurity 45.3.47.129 (FR/France/-): 5 in the last 3600 secs; Ports: *; Direc ...
show more
(modsecurity) srv201 ModSecurity 45.3.47.129 (FR/France/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 12:52:15
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.47.129 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 07:52:07.525501 2026] [security2:error] [pid 10101:tid 10101] [client 45.3.47.129:12611] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "midnight-tech.com"] [uri "/.git/config"] [unique_id "aY8ed6yTZUsQhIfe0pt4lwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 08:03:48
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.47.129 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 03:03:40.289800 2026] [security2:error] [pid 2577340:tid 2577340] [client 45.3.47.129:36949] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "memelearning.net"] [uri "/dev/.git/config"] [unique_id "aY7a3Bfr9EVF_uXKd6nDoAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
myagent.site
2026-02-13 06:24:27
(3 months ago)
Blocking for trying to access an exploit file: /config/.env
Hacking
🇺🇸
TPI-Abuse
2026-02-13 06:07:21
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.47.129 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Feb 13 01:07:17.044690 2026] [security2:error] [pid 7052:tid 7052] [client 45.3.47.129:55719] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mccachren.org"] [uri "/test/.git/config"] [unique_id "aY6_lSZlkXZF4nOyFTPGJwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 04:00:39
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.47.129 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 23:00:28.831613 2026] [security2:error] [pid 835:tid 835] [client 45.3.47.129:60527] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "markgebhard.net"] [uri "/backend/.env"] [unique_id "aY6h3MGVtpzD8CM9DDxZMQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-13 02:33:12
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.47.129 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 21:33:02.314334 2026] [security2:error] [pid 1783227:tid 1783236] [client 45.3.47.129:60571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "managementconsultantcertification.com"] [uri "/.env.production"] [unique_id "aY6NXiWC_k-0Ydu5YHbZDgAAAIU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
enpepet
2026-02-13 01:06:21
(3 months ago)
GENERAL: parametres: [url:env=] UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 URL: ...
show more
GENERAL: parametres: [url:env=] UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 URL:/.env
show less
Port Scan
Hacking
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-12 15:50:16
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.47.129 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.47.129 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 12 10:50:13.314268 2026] [security2:error] [pid 32006:tid 32006] [client 45.3.47.129:30633] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deniz-bilgisayar.com"] [uri "/.git/config"] [unique_id "aY32tfpx45A2Busb9IE9OAAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack