This IP address has been reported a total of
36
times from
24 distinct
sources.
34.176.49.34 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.176.49.34 (CL/Chile/34.49.176.34. ...
show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.176.49.34 (CL/Chile/34.49.176.34.bc.googleusercontent.com): 2 in the last 3600 secs
show less
Honeypot captured 1 automated attack/scan requests (JR Save Tech). Types: env-leak. Sample: GET /.en ...
show moreHoneypot captured 1 automated attack/scan requests (JR Save Tech). Types: env-leak. Sample: GET /.env.production
show less
[ThuJun1102:27:04.0877582026][security2:error][pid548576:tid548819][client34.176.49.34:0]ModSecurity ...
show more[ThuJun1102:27:04.0877582026][security2:error][pid548576:tid548819][client34.176.49.34:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.avvnicolaurbani.ch.81-17-25-250.cpanel.site\"][uri\"/.env.local\"][unique_id\"aioA2Ftvg4ND9EGiODvYTAAAAIc\"]
show less
{"level":"info","ts":1781128905.7057557,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1781128905.7057557,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.176.49.34","remote_port":"55670","client_ip":"34.176.49.34","proto":"HTTP/1.1","method":"GET","host":"cbupdate.update.srqponmpkjihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/app/.env.bak","headers":{"User-Agent":["Mozilla/5.0 (Linux; U; Android 4.0.3; de-de; Galaxy S II Build/GRJ22) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.000070444,"size":0,"status":308,"resp_headers":{"Connection":["close"],"Location":["https://cbupdate.update.srqponmpkjihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/app/.env.bak"],"Content-Type":[],"Server":["Caddy"]}}
{"level":"info","ts":1781128905.7060666,"logger":"http.log.access.log1","msg":"handled request","request":{"remote
...
show less
Bot / scanning and/or hacking attempts: GET /.env.stage HTTP/1.1, GET /tmp/.env HTTP/1.1, GET /.env. ...
show moreBot / scanning and/or hacking attempts: GET /.env.stage HTTP/1.1, GET /tmp/.env HTTP/1.1, GET /.env.production HTTP/1.1, GET /web/.env HTTP/1.1, GET /cms/.env HTTP/1.1, GET /portal/.env HTTP/1.1, GET /internal/.env.production HTTP/1.1, GET /.env.orig HTTP/1.1, GET /.env.prod HTTP/1.1, GET /api/.env.dev HTTP/1.1
show less