Anonymous
2026-09-12 17:23:55
(7 hours ago)
[Sat Sep 12 06:09:49.715946 2026] [authz_core:error] [pid 1004] [client 34.88.171.219:60412] AH01630 ...
show more
[Sat Sep 12 06:09:49.715946 2026] [authz_core:error] [pid 1004] [client 34.88.171.219:60412] AH01630: client denied by server configuration: /var/www/html/.env.production
[Sat Sep 12 20:23:53.910770 2026] [authz_core:error] [pid 15733] [client 34.88.171.219:42512] AH01630: client denied by server configuration: /var/www/html/.git
[Sat Sep 12 20:23:53.910770 2026] [authz_core:error] [pid 15733] [client 34.88.171.219:42512] AH01630: client denied by server configuration: /var/www/html/.git
show less
Bad Web Bot
🇩🇪
loebas
2026-09-12 15:40:42
(9 hours ago)
[4xx]Probing for non existant files, or client not authorized
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-09-12 15:32:53
(9 hours ago)
apache-auth
Brute-Force
Web App Attack
🇩🇰
HostingGroup
2026-09-12 15:16:53
(9 hours ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show more
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 7. First blocked: 2026-09-12.
show less
Bad Web Bot
Web App Attack
🇩🇪
simsung
2026-09-12 14:48:42
(9 hours ago)
34.88.171.219 - - [12/Sep/2026:14:48:41 +0000] "GET /.git/config HTTP/1.1" 403 177 "-" "Mozilla/5.0 ...
show more
34.88.171.219 - - [12/Sep/2026:14:48:41 +0000] "GET /.git/config HTTP/1.1" 403 177 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-12 11:58:30
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.171.219 (219.171.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.171.219 (219.171.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 07:58:24.256225 2026] [security2:error] [pid 14024:tid 14024] [client 34.88.171.219:33748] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vrbsroma.com"] [uri "/.git/config"] [unique_id "aqU-YPlDAAAJrh59EAZLlwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-12 11:54:54
(12 hours ago)
34.88.171.219 - - [12/Sep/2026:13:54:54 +0200] "GET /.git/config HTTP/2.0" 404 1920 "-" "Mozilla/5.0 ...
show more
34.88.171.219 - - [12/Sep/2026:13:54:54 +0200] "GET /.git/config HTTP/2.0" 404 1920 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-12 11:27:38
(13 hours ago)
6.912 requests with url.path *.env
174 requests with url.path *credentials.json
Brute-Force
Bad Web Bot
🇳🇱
Site.eu
2026-09-12 07:18:23
(17 hours ago)
Excessive multi-domain requests
Brute-Force
🇪🇸
pipeline.es
2026-09-12 07:07:26
(17 hours ago)
Web scanning / probing for vulnerable paths | URL: /frontend/.env | Evidence: vpttours.com 34.88.171 ...
show more
Web scanning / probing for vulnerable paths | URL: /frontend/.env | Evidence: vpttours.com 34.88.171.219 - - [12/Sep/2026:09:06:52 +0200] \"GET /frontend/.env HTTP/1.1\" 404 26091 \"-\" \"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=FI | ASN: GOOGLE-CLOUD-PLATFORM | Country: FI
show less
Port Scan
Web App Attack
🇫🇷
pm33
2026-09-12 04:42:19
(20 hours ago)
Unauthorized connections HTTP 403
Web App Attack
🇫🇷
pm33
2026-09-12 03:45:45
(20 hours ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇳🇱
tmiland
2026-09-12 03:45:12
(21 hours ago)
Detected 51 connections from 34.88.171.219 last 10 minutes.; lone high-rate source (combined 102 req ...
show more
Detected 51 connections from 34.88.171.219 last 10 minutes.; lone high-rate source (combined 102 requests in both windows); Logs: 34.88.171.219 - - [12/Sep/2026:05:44:27 +0200] "GET / HTTP/1.1" 200 50802 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.88.171.219 - - [12/Sep/2026:05:44:27 +0200] "POST / HTTP/1.1" 405 552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.88.171.219 - - [12/Sep/2026:05:44:27 +0200] "POST / HTTP/1.1" 405 552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.88.171.219 - - [12/Sep/2026:05:44:27 +0200] "POST / HTTP/1.1" 405 552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.88.171.219 - - [12/Sep/2026:05:44:27 +0200] "GET /.git/config HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13
show less
DDoS Attack
Bad Web Bot
Web App Attack
🇳🇱
tmiland
2026-09-12 03:44:31
(21 hours ago)
(nginx_404) Dot directory Honeypot Trap 34.88.171.219 (FI/Finland/219.171.88.34.bc.googleusercontent ...
show more
(nginx_404) Dot directory Honeypot Trap 34.88.171.219 (FI/Finland/219.171.88.34.bc.googleusercontent.com): 2 in the last 3600 secs; IP: 34.88.171.219; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.88.171.219 - - [12/Sep/2026:05:44:27 +0200] "GET /.git/config HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.88.171.219 - - [12/Sep/2026:05:44:27 +0200] "GET /.env HTTP/1.1" 404 2992 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Brute-Force
🇫🇷
Lino Project
2026-09-12 03:43:57
(21 hours ago)
34.88.171.219 - - [12/Sep/2026:05:43:54 +0200] "GET /.git/config HTTP/1.1" 404 458 "-" "Mozilla/5.0 ...
show more
34.88.171.219 - - [12/Sep/2026:05:43:54 +0200] "GET /.git/config HTTP/1.1" 404 458 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.171.219 - - [12/Sep/2026:05:43:55 +0200] "GET /.env HTTP/1.1" 404 458 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack