๐บ๐ธ
ruusvuu
2026-10-20 23:45:47
(11 hours ago)
Automated abuse report: 1295 attack/probe requests from Google LLC / US.
Targeted paths: /v1/.env, / ...
show more
Automated abuse report: 1295 attack/probe requests from Google LLC / US.
Targeted paths: /v1/.env, /.env~, /.env1, /.env2, /.env_copy.
Sample log lines:
[mirresolve] 2026-10-20 15:29:22: 34.22.46.12 - GET /.config/gcloud/application_default_credentials.json HTTP/1.1 404 21 - 0.591 ms
[mirresolve] 2026-10-20 15:29:23: 34.22.46.12 - GET /application_default_credentials.json HTTP/1.1 404 21 - 0.575 ms
[mirassertions] 2026-10-20 16:45:47: 10/20/2026 16:45:47 34.22.46.12 GET /.env~ 404 - 0.995 ms -
Detected by an automated web-server log monitor.
show less
Web App Attack
Anonymous
2026-10-20 21:15:15
(13 hours ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
๐ซ๐ท
masterguru
2026-10-20 19:14:36
(15 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-20 18:51:02
(16 hours ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.22.46.12 - - [20/Oct/2026:20:50:57 +0200] "GET /.git/config HTTP/1.1" 301 536 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-20 17:49:28
(17 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐ฉ๐ช
webanyone
2026-10-20 17:38:44
(17 hours ago)
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ...
show more
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
๐บ๐ธ
ruusvuu
2026-10-20 17:23:04
(17 hours ago)
Automated abuse report: 15 attack/probe requests from Google LLC / US.
Targeted paths: /v1/.env, /.e ...
show more
Automated abuse report: 15 attack/probe requests from Google LLC / US.
Targeted paths: /v1/.env, /.env~, /.env1, /.env2, /.env_copy.
Sample log lines:
[mircapture] 2026-10-20 10:23:04: 34.22.46.12 GET /.env.production 404 - - 1.346 ms
[mircapture] 2026-10-20 10:23:04: 34.22.46.12 GET /.env.staging 404 - - 1.072 ms
[mircapture] 2026-10-20 10:23:04: 34.22.46.12 GET /.env.development 404 - - 1.098 ms
Detected by an automated web-server log monitor.
show less
Web App Attack
Anonymous
2026-10-20 17:21:52
(17 hours ago)
PAD: ModSec_Critical detected
Hacking
Anonymous
2026-10-20 17:05:25
(17 hours ago)
Requested unexistent endpoint (Wordpress login, etc.)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 16:16:08
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.46.12 (12.46.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.46.12 (12.46.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 12:16:04.321815 2026] [security2:error] [pid 18887:tid 18887] [client 34.22.46.12:50410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mirandaracewalks.com"] [uri "/.git/config"] [unique_id "ateTxBQwDOcpACyVjWjDlgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 15:59:55
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.46.12 (12.46.22.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.46.12 (12.46.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 11:59:49.657752 2026] [security2:error] [pid 1407:tid 1407] [client 34.22.46.12:50710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miranda-race-walks.com"] [uri "/.git/config"] [unique_id "ateP9Z1mP-GdU225x5QTGgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
radardatelecom
2026-10-20 14:18:03
(20 hours ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-10-20 14:05:28
(20 hours ago)
Too many Status 40X (11)
Scanning/Probing (11)
Brute-Force
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-10-20 11:58:45
(22 hours ago)
[20/Oct/2026:14:58:45 +0300] -- 34.22.46.12 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/c ...
show more
[20/Oct/2026:14:58:45 +0300] -- 34.22.46.12 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
COMAITE
2026-10-20 10:28:31
(1 day ago)
Suspicious URL access.
Web App Attack