This IP address has been reported a total of
208
times from
102 distinct
sources.
34.50.72.25 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 50
reports;
Germany
with 49
reports;
Netherlands
with 20
reports.
The most common categories in these recent reports were:
Web App Attack
171
times;
Bad Web Bot
72
times;
Brute-Force
61
times;
Hacking
35
times;
Port Scan
14
times;
Other
16
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"level":"info","ts":1792058926.9837136,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1792058926.9837136,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.50.72.25","remote_port":"57548","client_ip":"34.50.72.25","proto":"HTTP/1.1","method":"GET","host":"status.bkper.app","uri":"/.env","headers":{"User-Agent":["Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"]}},"bytes_read":0,"user_id":"","duration":0.000095193,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://status.bkper.app/.env"],"Content-Type":[]}}
{"level":"info","ts":1792058929.449016,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.50.72.25","remote_port":"57558","client_ip":"34.50.72.25","proto":"HTTP/1.1","method":"GET","host":"status.bkper.app","uri":"/.env.local","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0"]}},"bytes_read":0,"user_id":"","dur
...
show less
Web app attack: 7 requests for known vulnerable paths (.env, xmlrpc.php, web shells, config backups) ...
show moreWeb app attack: 7 requests for known vulnerable paths (.env, xmlrpc.php, web shells, config backups) within one hour. Reported automatically by BotZoom.
show less
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.50.72.25 - - [14/Oct/2026:02:21:57 +0200] "GET /.env HTTP/1.1" 404 36757 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15"
...
show less