🇺🇸
canine.tools
2026-07-19 02:02:09
(1 day ago)
[fail2ban Auto Report] {"time":"2026-07-18T22:02:09.277390838-04:00","level":"INFO","source":{"funct ...
show more
[fail2ban Auto Report] {"time":"2026-07-18T22:02:09.277390838-04:00","level":"INFO","source":{"function":"github.com/TecharoHQ/anubis/lib.(*Server).checkRules","file":"/Users/cadey/Code/TecharoHQ/botstopper/upstream/anubis/lib/anubis.go","line":309},"msg":"explicit deny","subsystem":"anubis","host":"searxng.canine.tools","method":"GET","path":"/search","user_agent":"","accept_language":"","priority":"","x-forwarded-for":"172.70.135.50","x-real-ip":"172.70.135.50","host":"searxng.canine.tools","check_result":{"name":"bot/no-user-agent-string","rule":"DENY","weight":15}}
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-03-30 18:42:57
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 14:42:27.235159 2026] [security2:error] [pid 13347:tid 13347] [client 172.70.135.50:9460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.limeroc.com"] [uri "/.env.old"] [unique_id "acrEE9IqcEIXb4IWvufjnAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 17:18:20
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 13:18:15.645165 2026] [security2:error] [pid 14627:tid 14627] [client 172.70.135.50:10930] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "global.ic1.biz"] [uri "/private/.env"] [unique_id "acqwV4uoNpv0y0k8zHS8TQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 15:05:01
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 11:04:54.192522 2026] [security2:error] [pid 2240:tid 2240] [client 172.70.135.50:10463] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.liberlibro.com"] [uri "/.env.json"] [unique_id "acqRFnqiwL0L1gc-W6KfDQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 13:03:42
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 09:03:36.827076 2026] [security2:error] [pid 2692:tid 2692] [client 172.70.135.50:11545] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.thestrongingroup.com"] [uri "/site/.env"] [unique_id "acp0qCij1_SHn-q27mWncQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 12:11:20
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 08:11:16.028915 2026] [security2:error] [pid 15271:tid 15271] [client 172.70.135.50:10213] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kristasrecoverycoaching.com.kildarafarms.com"] [uri "/app/.env"] [unique_id "acpoZPqC66gX-b0TpVAlAgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 11:52:56
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 07:52:51.561558 2026] [security2:error] [pid 22790:tid 22790] [client 172.70.135.50:14301] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.meghanmack.com"] [uri "/home/.env"] [unique_id "acpkE8ylEFnQ1VExMcO_TAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 11:08:21
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 07:08:15.776805 2026] [security2:error] [pid 13950:tid 13950] [client 172.70.135.50:12605] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kircali.net"] [uri "/.env.development.local"] [unique_id "acpZn7xZpuqGZy5AFATMgwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 10:16:33
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 06:16:26.045849 2026] [security2:error] [pid 32434:tid 32434] [client 172.70.135.50:13553] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "germanflatts.mohawk-ny.org"] [uri "/.env.tmp"] [unique_id "acpNeig0llAYAqRhWDozKgAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 06:29:29
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 02:29:21.769821 2026] [security2:error] [pid 8906:tid 8906] [client 172.70.135.50:14189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.milajarecords.com.jazziientertainment.com"] [uri "/.env.test"] [unique_id "acoYQTTbvgBPGXldjYSQhgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 05:53:24
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 01:53:14.825657 2026] [security2:error] [pid 14490:tid 14490] [client 172.70.135.50:9672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.perlcreative.com"] [uri "/site/.env"] [unique_id "acoPygFIlsENxqKeERCGDgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 04:53:19
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 30 00:52:57.018368 2026] [security2:error] [pid 6617:tid 6617] [client 172.70.135.50:10899] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "totalstorage.solutions"] [uri "/.env.tmp"] [unique_id "acoBqddh8xfCFx-rNxl0kQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 03:50:49
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 23:50:42.985856 2026] [security2:error] [pid 19613:tid 19613] [client 172.70.135.50:11897] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "psdinnersready.needtoorder.us"] [uri "/home/.env"] [unique_id "acnzEmCteSjbqclpcqsL9gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 02:40:43
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 22:40:33.207099 2026] [security2:error] [pid 9855:tid 9930] [client 172.70.135.50:11662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "projectlist.giere.us"] [uri "/.env.orig"] [unique_id "acnioeTy8shpRj_W1YwkqAAAARI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-30 01:57:20
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 172.70.135.50 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Mar 29 21:57:04.674291 2026] [security2:error] [pid 27449:tid 27449] [client 172.70.135.50:12565] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.iiiip.org"] [uri "/.env.development"] [unique_id "acnYcPZArwrMFZjydSpC6AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack