This IP address has been reported a total of
31
times from
20 distinct
sources.
34.146.72.70 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
IP matched detection query more than 2 hosts and only bad rq long ban.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-30.
show less
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.146.72.70 (JP/Japan/70.72.146.34. ...
show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.146.72.70 (JP/Japan/70.72.146.34.bc.googleusercontent.com): 2 in the last 3600 secs
show less
[MonAug3108:33:39.1552722026][security2:error][pid2304122:tid2304166][client34.146.72.70:0]ModSecuri ...
show more[MonAug3108:33:39.1552722026][security2:error][pid2304122:tid2304166][client34.146.72.70:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"4hostgestione.ch.136-243-54-122.cpanel.site\"][uri\"/.env.bak\"][unique_id\"apUgQ3jvdfeLoY36o1IDlQAAAEY\"]
show less
34.146.72.70 - - [30/Aug/2026:14:50:48 +0200] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 ...
show more34.146.72.70 - - [30/Aug/2026:14:50:48 +0200] "GET /.git/config HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.146.72.70 - - [30/Aug/2026:14:50:49 +0200] "GET /.env.local HTTP/1.1" 404 2968 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
...
show less
Brute-Force
Web App Attack
Anonymous
Http Port:80 (http_status:404) - Agent:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, li ...
show moreHttp Port:80 (http_status:404) - Agent:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Web App Attack
Showing 1 to
15
of 31 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ