34.237.176.214

Listed Scanner Regular

Publicly listed on this board, but not currently blocked on any of our hosts.

Record

Score
28/100each request counts half as much after 30 days
Worst level
Scanner
Attack-shaped requests
8all time
Active days
2UTC days
First seen
Last seen
Servers hit
1
Targets
5sites
Times blocked
0by the evidence rules

First seen on UTC, most recently active on UTC.

Recorded 8 attack-shaped requests across 2 separate days.

Its traffic probed for an exposed .git directory to download the site's source history and config (5 requests); it also requested the .git directory itself, hoping it is exposed and browsable (3).

Seen by our web sensor, against 5 of the sites we watch: motoristi.eu, neutralizatori.com, obdebug.com, odor-ex.com and pribabadanche.com.

Scored into the "Scanner" level, its highest so far. Badge: Regular.

Routed via AS14618 (Amazon.com, Inc.), a cloud network.

Surfaces: web-app. Attack types: hunting for secrets. Seen by: web.

Activity, last 90 days

Active on 2 of the last 90 UTC days.

Daily counts
Attack requests per UTC day, days with activity only
Day (UTC)Requests
5
3
  • At least 2 requests a minute at its peak ( UTC; identical requests in the same second are stored once).
  • Methods: GET 5.
  • The servers we watch answered: 403 9 (totals only, from our web servers).

Evidence

Newest first, the latest 50 stored requests grouped into runs. Times are UTC. The user agent is shown as its family only.

Evidence, newest first, grouped by UTC day
TimeSiteWhat happenedRequestUser agentSeen by
motoristi.euprobed for an exposed .git directory to download the site's source history and configGET /.git/configbrowser claimweb
obdebug.comrequested the .git directory itself, hoping it is exposed and browsable/.gitnoneweb
obdebug.comprobed for an exposed .git directory to download the site's source history and configGET /.git/configbrowser claimweb
pribabadanche.comrequested the .git directory itself, hoping it is exposed and browsable/.gitnoneweb
pribabadanche.comprobed for an exposed .git directory to download the site's source history and configGET /.git/configdeclared botweb
neutralizatori.comrequested the .git directory itself, hoping it is exposed and browsable/.gitnoneweb
neutralizatori.comprobed for an exposed .git directory to download the site's source history and configGET /.git/configbrowser claimweb
odor-ex.commade a request that matched no known pattern/odor-ex.com/.gitnoneweb
odor-ex.comprobed for an exposed .git directory to download the site's source history and configGET /.git/configbrowser claimweb

Network

ASN
AS14618 Amazon.com, Inc.
Network type
cloud
Reverse DNS
ec2-34-237-176-214.compute-1.amazonaws.com
Country
United States US
City
Ashburn (registry location of a hosting network)
Flags
cloud range (AWS)
Abuse contact
found in the registry
Checked

Elsewhere: GreyNoise, Shodan, AbuseIPDB.