๐บ๐ธ
ruusvuu
2026-10-23 12:45:26
(2 days ago)
Automated abuse report: 15 attack/probe requests from Google LLC / KR.
Targeted paths: /.git/config, ...
show more
Automated abuse report: 15 attack/probe requests from Google LLC / KR.
Targeted paths: /.git/config, /.env, /.env.local, /.env.production, /.env.staging.
Sample log lines:
[signerauthority] 34.64.224.133 - - [23/Oct/2026:05:45:25 -0700] "GET /.env.sample HTTP/1.1" 404 2228 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.โฆ
[signerauthority] 34.64.224.133 - - [23/Oct/2026:05:45:25 -0700] "GET /.env.example HTTP/1.1" 404 2229 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131โฆ
[signerauthority] 34.64.224.133 - - [23/Oct/2026:05:45:26 -0700] "GET /.env.dev HTTP/1.1" 404 2227 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0โฆ
Detected by an automated web-server log monitor.
show less
Web App Attack
๐บ๐ธ
purpleit
2026-10-23 00:44:39
(2 days ago)
NexShield: banned for requests blocked by the web application firewall.
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-22 18:55:39
(2 days ago)
Excessive 404/403 errors
Brute-Force
๐ธ๐ช
vaia.cloud
2026-10-22 18:30:02
(2 days ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐ซ๐ฎ
paissangroup
2026-10-22 15:46:32
(2 days ago)
Multiple WAF Violations
Web App Attack
๐ณ๐ฑ
debestelapp
2026-10-22 15:15:11
(2 days ago)
Web App Attack
๐ฉ๐ช
LRob
2026-10-22 14:17:02
(2 days ago)
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local (+3 more) | ua: Mozilla/5.0 ...
show more
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local (+3 more) | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-22 11:26:07
(3 days ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.64.224.133 - - \[22/Oct/2026:13:26:06 +0200\] "GET /.git/config HTTP/1.1" 301 620 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-22 09:20:25
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.64.224.133 (133.224.64.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.224.133 (133.224.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:20:20.445736 2026] [security2:error] [pid 18526:tid 18526] [client 34.64.224.133:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sahinozalit.com"] [uri "/.git/config"] [unique_id "atnVVGw3R8cSUIHBZoSiDwAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
dot.mg
2026-10-22 08:52:37
(3 days ago)
Scan of vulnerable files
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-22 08:51:06
(3 days ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.64.224.133 - - [22/Oct/2026:10:50:50 +0200] "GET /.git/config HTTP/1.1" 404 44004 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
rh24
2026-10-22 08:29:03
(3 days ago)
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.64.224.133 (KR/South Korea/133.224.64. ...
show more
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.64.224.133 (KR/South Korea/133.224.64.34.bc.googleusercontent.com)
show less
Hacking
๐ฉ๐ช
sternwart
2026-10-22 07:47:37
(3 days ago)
Automatisch erkannt: Zugriff auf /.git/config (ict-fachassessment.ch)
Web App Attack
Bad Web Bot
Anonymous
2026-10-21 12:26:17
(4 days ago)
34.64.224.133 - - [21/Oct/2026:14:26:11 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh ...
show more
34.64.224.133 - - [21/Oct/2026:14:26:11 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.64.224.133 - - [21/Oct/2026:14:26:11 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.64.224.133 - - [21/Oct/2026:14:26:11 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.64.224.133 - - [21/Oct/2026:14:26:12 +0200] "GET /.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.64.224.133 - - [21/Oct/2026:14:26:12 +0200] "GET /.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
Starburst SysOp Team
2026-10-21 05:27:58
(4 days ago)
Malware host detected by rbl.malware.expert. RBL lookup of 133.224.64.34.rbl.malware.expert succeede ...
show more
Malware host detected by rbl.malware.expert. RBL lookup of 133.224.64.34.rbl.malware.expert succeeded at REMOTE_ADDR. (400010-stl2-14)
show less
Hacking