๐ง๐ท
Halux
2026-09-06 06:33:25
(1 month ago)
34.175.148.219 Probing protected path or service
Web App Attack
๐น๐ท
pashait
2026-09-06 06:13:12
(1 month ago)
Auto-blocked by Seczar SecureOps โ IPS Web Attack Signature (1 events in 5min) at 2026-09-06 06:13
Web App Attack
Bad Web Bot
๐ฎ๐ช
AutosOnShow
2026-09-06 06:13:06
(1 month ago)
blocked for webapp attack | path requested: / | seen at 2026-09-06 06:12:27.393 |
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-06 03:55:06
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.175.148.219 (219.148.175.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.148.219 (219.148.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:54:58.684970 2026] [security2:error] [pid 16900:tid 16917] [client 34.175.148.219:48242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.wirefactor.com"] [uri "/.env.prod"] [unique_id "apzkEqTNKh2FGrL4HnSRkQAAAUw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-06 03:06:28
(1 month ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
Anonymous
2026-09-06 03:01:55
(1 month ago)
34.175.148.219 - - [06/Sep/2026:11:01:55 +0800] "GET /.env.production HTTP/1.1" 404 196 "-" "crusade ...
show more
34.175.148.219 - - [06/Sep/2026:11:01:55 +0800] "GET /.env.production HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
34.175.148.219 - - [06/Sep/2026:11:01:55 +0800] "GET /.env.backup HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
34.175.148.219 - - [06/Sep/2026:11:01:55 +0800] "GET /.env HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
34.175.148.219 - - [06/Sep/2026:11:01:55 +0800] "GET /env HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
34.175.148.219 - - [06/Sep/2026:11:01:55 +0800] "GET /.env.bak HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
34.175.148.219 - - [06/Sep/2026:11:01:55 +0800] "GET /storage/logs/laravel.log HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
34.175.148.219 - - [06/Sep/2026:11:01:55 +0800] "GET /crusader-404-probe HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
34.175.148.219 - - [06/Sep/2026:11:01:55 +0800] "GET /.env.save HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
34.175.148.219 - - [06/Sep/2026:11:01:55 +0800] "GET /_ignition/health-check HTTP/1.1" 404 196 "-" "crusader-worker/
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-06 02:59:50
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.175.148.219 (219.148.175.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.148.219 (219.148.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:59:42.891667 2026] [security2:error] [pid 2567:tid 2567] [client 34.175.148.219:56562] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.garrelsms.com"] [uri "/.env.example"] [unique_id "apzXHskiuXuN_CbJInuJHwAAAGA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-06 02:31:44
(1 month ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
๐ฌ๐ง
Apache
2026-09-06 01:59:09
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.175.148.219 (ES/Spain/219.148.175.34.bc.goog ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.148.219 (ES/Spain/219.148.175.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
๐ฉ๐ช
raph
2026-09-06 01:57:56
(1 month ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-06 01:49:18
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.175.148.219 (219.148.175.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.148.219 (219.148.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:49:13.009659 2026] [security2:error] [pid 14411:tid 14411] [client 34.175.148.219:41966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saladmasterhealth.starrmail.net"] [uri "/.env.production"] [unique_id "apzGmXFtnCF5O2huMfck2wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-09-06 01:44:44
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-09-06 01:17:02
(1 month ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-09-06 00:32:47
(1 month ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-05 22:37:50
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.175.148.219 (219.148.175.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.148.219 (219.148.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 18:37:45.365339 2026] [security2:error] [pid 17935:tid 17935] [client 34.175.148.219:60010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.buanamegah.com"] [uri "/.env"] [unique_id "apyZublvSAfD51LsyyCRnQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack