🇫🇷
MatStef132
2026-05-19 21:18:22
(2 weeks ago)
MatShield L7: blocked on mathost.eu (ua-quarantined)
Bad Web Bot
🇳🇱
MatStef132
2026-05-19 20:59:02
(2 weeks ago)
MatShield L7: blocked on dstat.selify.io (ua-quarantined)
Bad Web Bot
🇫🇷
MatStef132
2026-05-19 20:55:41
(2 weeks ago)
MatShield L7: blocked on mathost.eu (ua-quarantined)
Bad Web Bot
🇫🇷
MatStef132
2026-05-14 22:03:10
(3 weeks ago)
MatShield L7 blocked request to mathost.eu for reason ua-q
DDoS Attack
Bad Web Bot
Web App Attack
🇫🇷
MatStef132
2026-05-14 21:32:37
(3 weeks ago)
[mathost.eu] clic
DDoS Attack
Bad Web Bot
Web App Attack
🇬🇧
Oakley
2026-04-08 13:49:55
(1 month ago)
(mod_security) mod_security (id:900209) triggered by 65.111.0.17 (US/United States/-): 5 in the last ...
show more
(mod_security) mod_security (id:900209) triggered by 65.111.0.17 (US/United States/-): 5 in the last 900 secs
show less
Web App Attack
Hacking
🇳🇱
homeshowdomain.nl
2026-02-19 22:59:36
(3 months ago)
Auto-ban: >3000 req/min op 2026-02-19
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-02-19 03:55:54
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.0.17 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.0.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:55:49.142587 2026] [security2:error] [pid 21184:tid 21184] [client 65.111.0.17:19317] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kinnen.org"] [uri "/.env"] [unique_id "aZaJxU8QcvwEMbmYn9P2ugAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Swiptly
2026-02-19 03:05:37
(3 months ago)
Bot scanning for environment files .env .env/\*
...
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 02:56:08
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.0.17 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.0.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 21:56:02.583301 2026] [security2:error] [pid 13264:tid 13264] [client 65.111.0.17:62729] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kelting.net"] [uri "/test/.git/config"] [unique_id "aZZ7wnQxd5NXNu3m2BCqkAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 21:41:26
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.0.17 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.0.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 16:41:19.464594 2026] [security2:error] [pid 6630:tid 6703] [client 65.111.0.17:10941] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ultimate-billiards.com"] [uri "/.git/config"] [unique_id "aZYx_wyAV4zCIVjK4DG_PAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 19:47:17
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.0.17 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.0.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 14:47:13.235621 2026] [security2:error] [pid 17919:tid 17919] [client 65.111.0.17:16091] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "topgunsecurityservice.com"] [uri "/app/.git/config"] [unique_id "aZYXQdYvhWxk7mUlHWCKiAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 19:08:40
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.0.17 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.0.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 14:08:34.437336 2026] [security2:error] [pid 23074:tid 23074] [client 65.111.0.17:61765] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "timlandry.com"] [uri "/.env"] [unique_id "aZYOMoPvNNjwH4BlKtLFFgAAACg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-18 17:07:16
(3 months ago)
Scanning/Probing (23)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-18 13:20:28
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 65.111.0.17 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 65.111.0.17 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 08:20:23.652092 2026] [security2:error] [pid 912:tid 912] [client 65.111.0.17:18235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "willieplaymoreband.com"] [uri "/backup/.git/config"] [unique_id "aZW8l9w-HrgXxf9Px8GdTQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack