This IP address has been reported a total of
4
times from
3 distinct
sources.
34.64.48.137 was first reported on
October 13th 2026 , and the most recent report was
9 hours ago Brazil
with 2
reports;
France
with 1
report;
United States of America
with 1
report.
The most common categories in these recent reports were:
Web App Attack
4
times;
Bad Web Bot
2
times;
Hacking
1
time;
DDoS Attack
1
time;
Brute-Force
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇧🇷
dermatovirtual
2026-10-14 16:28:02
(9 hours ago)
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ...
show more
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 201 unauthorized requests recorded between 2026-10-13 16:23:45 UTC and 2026-10-13 16:24:48 UTC (rate: ~191,4 req/min). Edge perimeter firewall drop active.
Log sample:
[2026-10-13 16:24:47 UTC] IP: 34.64.48.137 - W3C IIS (Port 443): GET /preview/.env -> HTTP 404 [CLIENT: 34.64.48.137]
[2026-10-13 16:24:47 UTC] IP: 34.64.48.137 - W3C IIS (Port 443): GET /stage/.env -> HTTP 404 [CLIENT: 34.64.48.137]
[2026-10-13 16:24:48 UTC] IP: 34.64.48.137 - W3C IIS (Port 443): GET /production/.env -> HTTP 404 [CLIENT: 34.64.48.137]
show less
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-10-14 08:45:35
(17 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇧🇷
dermatovirtual
2026-10-13 16:26:46
(1 day ago)
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ...
show more
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 201 unauthorized requests recorded between 2026-10-13 16:23:45 UTC and 2026-10-13 16:24:48 UTC (rate: ~191,4 req/min). Edge perimeter firewall drop active.
Log sample:
[2026-10-13 16:24:47 UTC] IP: 34.64.48.137 - W3C IIS (Port 443): GET /preview/.env -> HTTP 404 [CLIENT: 34.64.48.137]
[2026-10-13 16:24:47 UTC] IP: 34.64.48.137 - W3C IIS (Port 443): GET /stage/.env -> HTTP 404 [CLIENT: 34.64.48.137]
[2026-10-13 16:24:48 UTC] IP: 34.64.48.137 - W3C IIS (Port 443): GET /production/.env -> HTTP 404 [CLIENT: 34.64.48.137]
show less
Bad Web Bot
Web App Attack
🇺🇸
Shouddy Tarano
2026-10-13 16:01:34
(1 day ago)
[Tue Oct 13 10:01:32.916693 2026] [authz_core:error] [pid 705843:tid 139792452937472] [client 34.64. ...
show more
[Tue Oct 13 10:01:32.916693 2026] [authz_core:error] [pid 705843:tid 139792452937472] [client 34.64.48.137:38790] AH01630: client denied by server configuration: /var/www/ccmApi-dev/public/
[Tue Oct 13 10:01:32.919718 2026] [authz_core:error] [pid 705843:tid 139792452937472] [client 34.64.48.137:38790] AH01630: client denied by server configuration: /usr/share/httpd/noindex/index.html
[Tue Oct 13 10:01:33.067365 2026] [authz_core:error] [pid 705843:tid 139792327112448] [client 34.64.48.137:38790] AH01630: client denied by server configuration: /var/www/ccmApi-dev/public/
[Tue Oct 13 10:01:33.070218 2026] [authz_core:error] [pid 705843:tid 139792327112448] [client 34.64.48.137:38790] AH01630: client denied by server configuration: /usr/share/httpd/noindex/index.html
[Tue Oct 13 10:01:33.217693 2026] [authz_core:error] [pid 705843:tid 139791312054016] [client 34.64.48.137:38790] AH01630: client denied by server configuration: /var/www/ccmApi-dev/public/
...
show less
DDoS Attack
Web Spam
Brute-Force
Web App Attack
Showing 1 to
4
of 4 reports
