π΅π±
bmino.pl
2026-10-02 06:31:57
(3 weeks ago)
Autoban IP(2): 34.178.72.215 - Hostname: Google LLC - City: Groningen - Country: Netherlands - Organization: Google Cloud (europe-west4) - Reason: GET /.git/config HTTP/1.1
Web App Attack
π΅π±
bmino.pl
2026-09-23 05:31:43
(1 month ago)
Autoban IP(2): 34.178.72.215 - Hostname: Google LLC - City: Groningen - Country: Netherlands - Organization: Google Cloud (europe-west4) - Reason: GET /.git/config HTTP/1.1
Web App Attack
π³π±
homeshowdomain.nl
2026-09-20 22:00:08
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-19.
Web App Attack
SSH
Hacking
πΊπΈ
alecj.com
2026-09-19 11:40:22
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch
Web App Attack
π³π±
ReyhZhao
2026-09-18 04:34:07
(1 month ago)
BunkerWeb alert: A request for a sensitive path (/.env) was detected and served with a 301 redirect, indicating a potential attempt to access environment configuration files.
Brute-Force
π³π±
Webhoster
2026-09-18 04:22:42
(1 month ago)
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 34.178.72.215. Evidence: 4 matching request(s).
UTC: 2026-09-18 04:22:41 to 2026-09-18 04:22:41.
Observed requests (query strings omitted):
GET /.git/config -> HTTP 403 (1x)
GET ...
show more
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 34.178.72.215. Evidence: 4 matching request(s).
UTC: 2026-09-18 04:22:41 to 2026-09-18 04:22:41.
Observed requests (query strings omitted):
GET /.git/config -> HTTP 403 (1x)
GET /.env -> HTTP 403 (1x)
GET /.env.local -> HTTP 404 (1x)
GET /.env.production -> HTTP 429 (1x)
show less
Web App Attack
π³π±
thedreamer.nl
2026-09-18 04:19:03
(1 month ago)
34.178.72.215 - - [18/Sep/2026:06:17:09 +0200] "GET /.git/config HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "NL" "Groningen" "53.22220" "6.56640"
34.178.72.21 ...
show more
34.178.72.215 - - [18/Sep/2026:06:17:09 +0200] "GET /.git/config HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "NL" "Groningen" "53.22220" "6.56640"
34.178.72.215 - - [18/Sep/2026:06:17:09 +0200] "GET /.env HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "NL" "Groningen" "53.22220" "6.56640"
34.178.72.215 - - [18/Sep/2026:06:17:09 +0200] "GET /.env.local HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "NL" "Groningen" "53.22220" "6.56640"
34.178.72.215 - - [18/Sep/2026:06:17:09 +0200] "GET /.env.production HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "NL" "Groningen" "53.22220" "6.56640"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
π©π°
Leif Neland
2026-09-18 04:00:02
(1 month ago)
Detected by CrowdSec on slim
Brute-Force
π«π·
Nop Nop
2026-09-18 03:02:50
(1 month ago)
CrowdSec ban: crowdsecurity/http-sensitive-files
Port Scan
π©πͺ
mravb
2026-09-18 02:54:01
(1 month ago)
34.178.72.215 - - [18/Sep/2026:05:54:00 +0300] "GET /.git/config HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Web App Attack
Hacking
πͺπΈ
yvoictra
2026-09-18 02:51:20
(1 month ago)
34.178.72.215 - - [18/Sep/2026:04:51:19 +0200] "GET /.git/config HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.178.72.215 - - [18/Sep/2026:04:51:19 +020 ...
show more
34.178.72.215 - - [18/Sep/2026:04:51:19 +0200] "GET /.git/config HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.178.72.215 - - [18/Sep/2026:04:51:19 +0200] "GET /.env HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.178.72.215 - - [18/Sep/2026:04:51:19 +0200] "GET /.env.local HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.178.72.215 - - [18/Sep/2026:04:51:19 +0200] "GET /.env.production HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.178.72.215 - - [18/Sep/2026:04:51:19 +0200] "GET /.env.staging HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrom
...
show less
Brute-Force
Web App Attack
π¦πΊ
Klaverstyn
2026-09-18 02:23:17
(1 month ago)
Cross-vhost secrets/RCE probing campaign
Web App Attack
Hacking
π΅π±
itsvic.dev
2026-09-18 02:06:26
(1 month ago)
34.178.72.215 - - [18/Sep/2026:02:06:25 +0000] "ha.itsvic.dev" "GET /.git/config HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.178.72.215 - - [18/Sep/20 ...
show more
34.178.72.215 - - [18/Sep/2026:02:06:25 +0000] "ha.itsvic.dev" "GET /.git/config HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.178.72.215 - - [18/Sep/2026:02:06:26 +0000] "ha.itsvic.dev" "GET /.env HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.178.72.215 - - [18/Sep/2026:02:06:26 +0000] "ha.itsvic.dev" "GET /.env.local HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
π©πͺ
pscriptos
2026-09-18 01:55:29
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
π΅π±
bmino.pl
2026-09-18 00:33:50
(1 month ago)
Autoban IP(2): 34.178.72.215 - Hostname: Google LLC - City: Groningen - Country: Netherlands - Organization: Google Cloud (europe-west4) - Reason: GET /.git/config HTTP/1.1
Web App Attack