This IP address has been reported a total of
23
times from
18 distinct
sources.
34.154.248.24 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 7
reports;
United States of America
with 3
reports;
Czechia
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
17
times;
Brute-Force
12
times;
Bad Web Bot
7
times;
Hacking
3
times;
Port Scan
2
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
34.154.248.24 - - [18/Oct/2026:08:38:01 +0200] "GET /.git/config HTTP/1.1" 403 6276 "-" "Mozilla/5.0 ...
show more34.154.248.24 - - [18/Oct/2026:08:38:01 +0200] "GET /.git/config HTTP/1.1" 403 6276 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.154.248.24 - - [18/Oct/2026:08:38:01 +0200] "GET /.env HTTP/1.1" 403 6276 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.154.248.24 - - [18/Oct/2026:08:38:01 +0200] "GET /.env.local HTTP/1.1" 403 6276 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.154.248.24 - - [18/Oct/2026:08:38:01 +0200] "GET /.env.production HTTP/1.1" 403 6276 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Anonymous
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, Bad ...
show moreFlagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, BadPath=25, Rate=20, Diversity=10, CanaryOverride=90.
show less
11.095 requests with url.path *.env
2.006 requests with url.path *phpinfo.php
365 requests with u ...
show more11.095 requests with url.path *.env
2.006 requests with url.path *phpinfo.php
365 requests with url.path *credentials.json
157 requests with url.path *.php.bak
show less
Bot / scanning and/or hacking attempts: GET /.env_copy HTTP/1.1, GET /.env.live HTTP/1.1, GET /.env2 ...
show moreBot / scanning and/or hacking attempts: GET /.env_copy HTTP/1.1, GET /.env.live HTTP/1.1, GET /.env2 HTTP/1.1, GET /.env.docker HTTP/1.1, GET /.env.preprod HTTP/1.1, GET /.env.uat HTTP/1.1, GET /.env1 HTTP/1.1, GET /.env.swp HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.txt HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.sample HTTP/1.1, GET /.env~ HTTP/1.1, GET /.env.dist HTTP/1.1
show less
(modsec_attack) srv103 ModSecurity attack 34.154.248.24 (IT/Italy/24.248.154.34.bc.googleusercontent ...
show more(modsec_attack) srv103 ModSecurity attack 34.154.248.24 (IT/Italy/24.248.154.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
(modsecurity) srv102 ModSecurity 34.154.248.24 (IT/Italy/24.248.154.34.bc.googleusercontent.com): 30 ...
show more(modsecurity) srv102 ModSecurity 34.154.248.24 (IT/Italy/24.248.154.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.154.248.24 - - [16/Sep/2026:03:49:45 +0200] "GET /.git/config HTTP/1.1" 404 66397 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less