This IP address has been reported a total of
80
times from
55 distinct
sources.
34.20.133.224 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 17
reports;
Germany
with 14
reports;
United States of America
with 14
reports.
The most common categories in these recent reports were:
Web App Attack
58
times;
Bad Web Bot
26
times;
Brute-Force
22
times;
Hacking
12
times;
Web Spam
4
times;
Other
18
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Log Sentinel automated defense: blocked HIGH threat (Unauthorized reconnaissance scan probing for ex ...
show moreLog Sentinel automated defense: blocked HIGH threat (Unauthorized reconnaissance scan probing for exposed sensitive files or configuration). Attack vector / Path: GET /.git/config. [Target server IP, domain names, and internal infrastructure redacted for privacy]
show less
(nginxENVSCAN) nginx environment-file scanner detected from 34.20.133.224 (US/United States/Californ ...
show more(nginxENVSCAN) nginx environment-file scanner detected from 34.20.133.224 (US/United States/California/Los Angeles/224.133.20.34.bc.googleusercontent.com)
show less
Hacking
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
[SatOct2413:02:21.4949672026][security2:error][pid3228509:tid3228641][client34.20.133.224:0]ModSecur ...
show more[SatOct2413:02:21.4949672026][security2:error][pid3228509:tid3228641][client34.20.133.224:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"mdd-network.ch\"][uri\"/\"][unique_id\"atyQPR-W0F5qA0LJFvQQgwAAAIc\"]
show less
[24/Oct/2026:13:06:42 +0300] -- 34.20.133.224 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git ...
show more[24/Oct/2026:13:06:42 +0300] -- 34.20.133.224 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
