🇷🇴
iulianh
2026-10-26 08:24:11
(4 days ago)
80,443
Brute-Force
SSH
🇳🇱
Alt255
2026-10-25 13:13:25
(5 days ago)
[ti-12al] Web exploit scanning: 3 suspicious requests detected by fail2ban jail <name>. Example: 34.64.224.133 - - \[22/Oct/2026:13:26:06 +0200\] "GET /.git/config HTTP/1.1" 301 620 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, ...
show more
[ti-12al] Web exploit scanning: 3 suspicious requests detected by fail2ban jail <name>. Example: 34.64.224.133 - - \[22/Oct/2026:13:26:06 +0200\] "GET /.git/config HTTP/1.1" 301 620 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.64.224.133 - - \[22/Oct/2026:13:26:06 +0200\] "GET /.env HTTP/1.1" 301 606 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.64.224.133 - - \[22/Oct/2026:13:26:06 +0200\] "GET /.env.local HTTP/1.1" 301 618 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
ruusvuu
2026-10-23 12:45:26
(1 week ago)
Automated abuse report: 15 attack/probe requests from Google LLC / KR.
Targeted paths: /.git/config, /.env, /.env.local, /.env.production, /.env.staging.
Sample log lines:
[signerauthority] 34.64.224.133 - - [23/Oct/2026:05:45:25 -0700] "GET /.env.sa ...
show more
Automated abuse report: 15 attack/probe requests from Google LLC / KR.
Targeted paths: /.git/config, /.env, /.env.local, /.env.production, /.env.staging.
Sample log lines:
[signerauthority] 34.64.224.133 - - [23/Oct/2026:05:45:25 -0700] "GET /.env.sample HTTP/1.1" 404 2228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.…
[signerauthority] 34.64.224.133 - - [23/Oct/2026:05:45:25 -0700] "GET /.env.example HTTP/1.1" 404 2229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131…
[signerauthority] 34.64.224.133 - - [23/Oct/2026:05:45:26 -0700] "GET /.env.dev HTTP/1.1" 404 2227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0…
Detected by an automated web-server log monitor.
show less
Web App Attack
🇺🇸
purpleit
2026-10-23 00:44:39
(1 week ago)
NexShield: banned for requests blocked by the web application firewall.
Web App Attack
🇳🇱
Site.eu
2026-10-22 18:55:39
(1 week ago)
Excessive 404/403 errors
Brute-Force
🇸🇪
vaia.cloud
2026-10-22 18:30:02
(1 week ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇫🇮
paissangroup
2026-10-22 15:46:32
(1 week ago)
Multiple WAF Violations
Web App Attack
🇳🇱
debestelapp
2026-10-22 15:15:11
(1 week ago)
Web App Attack
🇩🇪
LRob
2026-10-22 14:17:02
(1 week ago)
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local (+3 more) | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Hacking
Web App Attack
🇳🇱
Alt255
2026-10-22 11:26:07
(1 week ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.64.224.133 - - \[22/Oct/2026:13:26:06 +0200\] "GET /.git/config HTTP/1.1" 301 620 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.64.224.133 - - \[22/Oct/2026:13:26:06 +0200\] "GET /.git/config HTTP/1.1" 301 620 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 09:20:25
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.64.224.133 (133.224.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:20:20.445736 2026] [security2:error] [pid 18526:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.224.133 (133.224.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:20:20.445736 2026] [security2:error] [pid 18526:tid 18526] [client 34.64.224.133:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sahinozalit.com"] [uri "/.git/config"] [unique_id "atnVVGw3R8cSUIHBZoSiDwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
dot.mg
2026-10-22 08:52:37
(1 week ago)
Scan of vulnerable files
Web App Attack
🇳🇱
Alt255
2026-10-22 08:51:06
(1 week ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.64.224.133 - - [22/Oct/2026:10:50:50 +0200] "GET /.git/config HTTP/1.1" 404 44004 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHT ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.64.224.133 - - [22/Oct/2026:10:50:50 +0200] "GET /.git/config HTTP/1.1" 404 44004 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-10-22 08:29:03
(1 week ago)
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.64.224.133 (KR/South Korea/133.224.64.34.bc.googleusercontent.com)
Hacking
🇩🇪
sternwart
2026-10-22 07:47:37
(1 week ago)
Automatisch erkannt: Zugriff auf /.git/config (ict-fachassessment.ch)
Web App Attack
Bad Web Bot
