🇬🇧
openstrike.co.uk
2026-03-12 06:13:40
UTC ·
(8 months ago)
15 attacks on env grabbing URLs, site downloads (type 2), Laravel URLs, VC URLs, PHP URLs:
GET /.env HTTP/1.1
GET /demo HTTP/1.1
GET /_ignition/execute-solution HTTP/1.1
GET /.git/config HTTP/1.1
POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.p ...
show more
15 attacks on env grabbing URLs, site downloads (type 2), Laravel URLs, VC URLs, PHP URLs:
GET /.env HTTP/1.1
GET /demo HTTP/1.1
GET /_ignition/execute-solution HTTP/1.1
GET /.git/config HTTP/1.1
POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1
show less
Hacking
Web App Attack
🇺🇸
mnsf
2026-03-11 17:05:23
UTC ·
(8 months ago)
Too many Status 40X (13)
Brute-Force
Web App Attack
🇩🇪
Hary74656
2026-03-11 11:08:10
UTC ·
(8 months ago)
[Wed Mar 11 12:07:57.408407 2026] [security2:error] [pid 124437:tid 124582] [remote 170.64.182.186:43376] [client 170.64.182.186] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsec ...
show more
[Wed Mar 11 12:07:57.408407 2026] [security2:error] [pid 124437:tid 124582] [remote 170.64.182.186:43376] [client 170.64.182.186] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.env" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.env found within REQUEST_FILENAME: /.env"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "sam.weavernet.at"] [uri "/.env"] [unique_id "abFNDcZHvP1PXmI-lR3umQACxgM"]
[Wed Mar 11 12:07:57.414969 2026] [security2:error] [pid 124437:tid 124590] [remote 170.64.182.186:43376] [client 170.64.182.186] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/
...
show less
Web App Attack
🇨🇭
Origon
2026-03-11 10:53:27
UTC ·
(8 months ago)
CVE-2017-9841 - IP: 170.64.182.186 - time="2026-03-11T11:53:27+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/CVE-2017-9841 by ip 170.64.182.186 (AU/14061) : 4h ban on Ip 170.64.182.186" module=db
Web App Attack
🇺🇸
TPI-Abuse
2026-03-11 10:52:58
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 170.64.182.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 06:52:50.930901 2026] [security2:error] [pid 23669:tid 23669] [client 170.64.182.186:59810] ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.182.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 06:52:50.930901 2026] [security2:error] [pid 23669:tid 23669] [client 170.64.182.186:59810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salvoni.org"] [uri "/.env"] [unique_id "abFJglpUPa0pbZg6WoveGgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Mediashaker
2026-03-11 10:41:05
UTC ·
(8 months ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted] from 170.64.182.186 (AU/Australia/-)
Port Scan
🇺🇸
TPI-Abuse
2026-03-11 10:24:30
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 170.64.182.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 06:24:24.184931 2026] [security2:error] [pid 6175:tid 6195] [client 170.64.182.186:52070] M ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.182.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 06:24:24.184931 2026] [security2:error] [pid 6175:tid 6195] [client 170.64.182.186:52070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saludmyg.com.neotienda.com"] [uri "/.env"] [unique_id "abFC2EFia1Vui68sSlMU9AAAAVI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇰
SaltySoftworks
2026-03-11 10:17:05
UTC ·
(8 months ago)
Page: /wordpress/
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-03-11 09:52:01
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 170.64.182.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 05:51:55.581941 2026] [security2:error] [pid 642:tid 642] [client 170.64.182.186:12028] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.182.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 05:51:55.581941 2026] [security2:error] [pid 642:tid 642] [client 170.64.182.186:12028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saltcityprint.com"] [uri "/.env"] [unique_id "abE7O9XjFnOwgN9Hhcv0kQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-03-11 09:09:18
UTC ·
(8 months ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-03-11 08:16:31
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 170.64.182.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 04:16:26.616627 2026] [security2:error] [pid 29797:tid 29797] [client 170.64.182.186:29018] ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.182.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 04:16:26.616627 2026] [security2:error] [pid 29797:tid 29797] [client 170.64.182.186:29018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salinabible.org"] [uri "/.env"] [unique_id "abEk2lWRJAO7xxcmHoDs6AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-11 07:40:53
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 170.64.182.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 03:40:48.474603 2026] [security2:error] [pid 17949:tid 17949] [client 170.64.182.186:9608] ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.182.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 03:40:48.474603 2026] [security2:error] [pid 17949:tid 17949] [client 170.64.182.186:9608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salesfunnelworkflow.wholesalelivelobsters.com"] [uri "/.env"] [unique_id "abEcgGMYui65sXuohOfy9wAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-03-11 07:32:17
UTC ·
(8 months ago)
Too many 404 requests [BY]
Web App Attack
2026-03-11 07:05:41
UTC ·
(8 months ago)
Blocked: Reason='Suspicious traffic score=80 (review-based detection)'; Requests=15
Hacking
🇺🇸
TPI-Abuse
2026-03-11 06:53:28
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 170.64.182.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 02:53:21.960939 2026] [security2:error] [pid 32478:tid 32478] [client 170.64.182.186:25338] ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.182.186 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Mar 11 02:53:21.960939 2026] [security2:error] [pid 32478:tid 32478] [client 170.64.182.186:25338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salernospizza.com"] [uri "/.env"] [unique_id "abERYVmMSvUrORSJRSQXMQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack