🇬🇧
openstrike.co.uk
2026-03-12 06:13:47
(3 months ago)
5 attacks on PHP URLs, VC URLs, env grabbing URLs, site downloads (type 2), Laravel URLs:
POST /vend ...
show more
5 attacks on PHP URLs, VC URLs, env grabbing URLs, site downloads (type 2), Laravel URLs:
POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
GET /.git/config HTTP/1.1
GET /.env HTTP/1.1
GET /demo HTTP/1.1
GET /_ignition/execute-solution HTTP/1.1
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-03-11 10:24:46
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 170.64.176.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.176.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 06:24:43.188054 2026] [security2:error] [pid 13420:tid 13420] [client 170.64.176.71:27338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "recipesfortrump.com.namadiscount.com"] [uri "/.env"] [unique_id "abFC67voMoDNFLKsGEDepgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
antlac1
2026-03-11 10:15:49
(3 months ago)
crowdsecurity/CVE-2017-9841
Brute-Force
Web App Attack
🇪🇸
masterguru
2026-03-11 10:11:56
(3 months ago)
. Matched phrase "/.git/" at REQUEST_URI. (210492-123)
Web App Attack
2026-03-11 09:23:16
(3 months ago)
Try to connect to Port_Scan_443_stealth
Port Scan
🇦🇪
CG
2026-03-11 09:03:20
(3 months ago)
Web application attack, Automated scan
Web App Attack
Hacking
SQL Injection
🇬🇧
consul.to
2026-03-11 08:05:28
(3 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
myagent.site
2026-03-11 07:57:36
(3 months ago)
Blocking for trying to access an exploit file: /.env
Hacking
2026-03-11 07:05:39
(3 months ago)
Blocked: Reason='Suspicious traffic score=80 (review-based detection)'; Requests=17
Hacking
🇺🇸
TPI-Abuse
2026-03-11 06:52:46
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 170.64.176.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.176.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 02:52:42.624929 2026] [security2:error] [pid 30142:tid 30142] [client 170.64.176.71:22076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realtorpaul.buynorthwest.com"] [uri "/.env"] [unique_id "abEROp45NwiIUgyhKMdnRAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-11 06:33:53
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 170.64.176.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.176.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 02:33:46.986713 2026] [security2:error] [pid 18318:tid 18318] [client 170.64.176.71:3086] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realstorybooks.com"] [uri "/.env"] [unique_id "abEMyl_rt-qvMan5850-UgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-03-11 06:23:58
(3 months ago)
Restricted File Access Attempt. Matched phrase "/.env" at REQUEST_FILENAME. (930130-122)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-03-11 06:09:56
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 170.64.176.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.176.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 02:09:52.694742 2026] [security2:error] [pid 10121:tid 10121] [client 170.64.176.71:45838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realmhealth.waggonerfinancial.com"] [uri "/.env"] [unique_id "abEHMOyhbzInt-pqKGGQBwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob.fr
2026-03-11 05:45:08
(3 months ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-11 05:35:44
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 170.64.176.71 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.176.71 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 01:35:40.953232 2026] [security2:error] [pid 2742:tid 2742] [client 170.64.176.71:25046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "realitiesofseniortransitions.com"] [uri "/.env"] [unique_id "abD_LP1bg6UbnHHXKf0Y9QAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack