🇺🇸
TPI-Abuse
2026-06-05 17:55:56
(4 minutes ago)
(mod_security) mod_security (id:210492) triggered by 23.172.217.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 23.172.217.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 13:55:52.064172 2026] [security2:error] [pid 9879:tid 9879] [client 23.172.217.46:60214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.32"] [uri "/.env"] [unique_id "aiMNqC7owX-H6E_Ixs0QlwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 17:02:15
(57 minutes ago)
(mod_security) mod_security (id:210492) triggered by 23.172.217.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 23.172.217.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 13:02:07.293452 2026] [security2:error] [pid 13304:tid 13304] [client 23.172.217.46:59310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.149"] [uri "/.env"] [unique_id "aiMBDySG7uB955zWJlVEigAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
Jim Keir
2026-06-05 15:44:13
(2 hours ago)
2026-06-05 15:44:12 23.172.217.46 File scanning, blocking 23.172.217.46 for 5 minutes
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 15:22:03
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 23.172.217.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 23.172.217.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 11:21:55.573925 2026] [security2:error] [pid 28314:tid 28314] [client 23.172.217.46:60556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.50"] [uri "/.env"] [unique_id "aiLpk9jWJlSaY_nOLr_0rQAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 15:06:48
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 23.172.217.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 23.172.217.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 11:06:40.823005 2026] [security2:error] [pid 25092:tid 25092] [client 23.172.217.46:60554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.220"] [uri "/.env"] [unique_id "aiLmAN7G9YeHko4BB3QqPAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-06-05 14:06:23
(3 hours ago)
Accessed trap at '/.env'
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 14:05:38
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 23.172.217.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 23.172.217.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 10:05:32.148091 2026] [security2:error] [pid 22124:tid 22124] [client 23.172.217.46:63149] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.6"] [uri "/.env"] [unique_id "aiLXrBdl48cIyTa2qu0TiQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-06-05 13:45:33
(4 hours ago)
23.172.217.46 - - [05/Jun/2026:14:45:30 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; L ...
show more
23.172.217.46 - - [05/Jun/2026:14:45:30 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
2026/06/05 14:45:32 [error] 1725765#1725765: *1922515 access forbidden by rule, client: 23.172.217.46, server: [redacted], request: "GET /.env HTTP/1.1", host: "[redacted]"
23.172.217.46 - - [05/Jun/2026:14:45:32 +0100] "GET /.env HTTP/1.1" 403 1178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36"
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 13:04:23
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 23.172.217.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 23.172.217.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 09:04:16.801843 2026] [security2:error] [pid 14282:tid 14370] [client 23.172.217.46:64368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.21"] [uri "/.env"] [unique_id "aiLJULh0z6kPJ6yUBjw09QAAAMM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 12:23:18
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 23.172.217.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 23.172.217.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 08:23:14.939448 2026] [security2:error] [pid 20070:tid 20070] [client 23.172.217.46:63493] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.213"] [uri "/.env"] [unique_id "aiK_soZMvrpBMQRy4eZ5BAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 10:51:23
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 23.172.217.46 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 23.172.217.46 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 06:51:19.713169 2026] [security2:error] [pid 29089:tid 29089] [client 23.172.217.46:59867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.174"] [uri "/.env"] [unique_id "aiKqJ3vVVZOWA4CGAAufNAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack