This IP address has been reported a total of
46
times from
33 distinct
sources.
34.175.12.197 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[19/Sep/2026:08:50:41 +0300] -- 34.175.12.197 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git ...
show more[19/Sep/2026:08:50:41 +0300] -- 34.175.12.197 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
[cb-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more[cb-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.175.12.197 - - [19/Sep/2026:03:43:27 +0200] "GET /.git/config HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET / HTTP/1.1, GET /administrator/phpinfo.php HTTP/1.1, GET ...
show moreBot / scanning and/or hacking attempts: GET / HTTP/1.1, GET /administrator/phpinfo.php HTTP/1.1, GET /wp-admin/phpinfo.php HTTP/1.1, GET /gcp-key.json HTTP/1.1, GET /public_html/phpinfo.php HTTP/1.1, GET /includes/phpinfo.php HTTP/1.1, GET /firebase-adminsdk.json HTTP/1.1, GET /service-account.json HTTP/1.1, GET /firebase-key.json HTTP/1.1, GET /site/phpinfo.php HTTP/1.1, GET /sa.json HTTP/1.1, GET /google-credentials.json HTTP/1.1, GET /htdocs/phpinfo.php HTTP/1.1, GET /google-key.json HTTP/1.1, GET /core/phpinfo.php HTTP/1.1, GET /credentials.json HTTP/1.1, GET /phpinfo.php.bak HTTP/1.1, GET /gcp-sa.json HTTP/1.1, GET /webmail/phpinfo.php HTTP/1.1, GET /.config/gcloud/application_default_credentials.json HTTP/1, GET /gcp-credentials.json HTTP/1.1, GET /application_default_credentials.json HTTP/1.1, GET /key.json HTTP/1.1, GET /keyfile.json HTTP/1.1, GET /tmp/phpinfo.php HTTP/1.1
show less
Hacking
Web App Attack
Anonymous
34.175.12.197 - - [19/Sep/2026:00:49:55 +0200] "GET /.git/config HTTP/1.1" 403 616 "-" "Mozilla/5.0 ...
show more34.175.12.197 - - [19/Sep/2026:00:49:55 +0200] "GET /.git/config HTTP/1.1" 403 616 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.175.12.197 - - [19/Sep/2026:00:49:55 +0200] "GET /.env HTTP/1.1" 403 616 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.175.12.197 - - [19/Sep/2026:00:49:55 +0200] "GET /.env.local HTTP/1.1" 403 616 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.175.12.197 - - [19/Sep/2026:00:49:55 +0200] "GET /.env.production HTTP/1.1" 403 616 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.175.12.197 - - [19/Sep/2026:00:49:55 +0200] "GET /.env.staging HTTP/1.1" 403 616 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.175.12.197 - - [19/Sep/2026:00:49:55 +0200] "
...
show less
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-17.
show less
Web App Attack
SSH
Hacking
Anonymous
[Fri Sep 18 23:00:35.737828 2026] [php:error] [pid 1137738] [client 34.175.12.197:54162] script '/va ...
show more[Fri Sep 18 23:00:35.737828 2026] [php:error] [pid 1137738] [client 34.175.12.197:54162] script '/var/www/html/pinfo.php' not found or unable to stat
[Fri Sep 18 23:00:35.862302 2026] [php:error] [pid 1137738] [client 34.175.12.197:54162] script '/var/www/html/test.php' not found or unable to stat
[Fri Sep 18 23:48:13.050313 2026] [php:error] [pid 1173559] [client 34.175.12.197:38946] script '/var/www/html/phpinfo.php' not found or unable to stat
[Fri Sep 18 23:48:13.050313 2026] [php:error] [pid 1173559] [client 34.175.12.197:38946] script '/var/www/html/phpinfo.php' not found or unable to stat
[Fri Sep 18 23:48:13.119675 2026] [php:error] [pid 1173559] [client 34.175.12.197:38946] script '/var/www/html/info.php' not found or unable to stat
...
show less
Bad Web Bot
Anonymous
[Fri Sep 18 23:00:35.184038 2026] [php:error] [pid 1137738] [client 34.175.12.197:54162] script '/va ...
show more[Fri Sep 18 23:00:35.184038 2026] [php:error] [pid 1137738] [client 34.175.12.197:54162] script '/var/www/html/phpinfo.php' not found or unable to stat
[Fri Sep 18 23:00:35.303480 2026] [php:error] [pid 1137738] [client 34.175.12.197:54162] script '/var/www/html/info.php' not found or unable to stat
[Fri Sep 18 23:00:35.354963 2026] [php:error] [pid 1137738] [client 34.175.12.197:54162] script '/var/www/html/php.php' not found or unable to stat
[Fri Sep 18 23:00:35.524478 2026] [php:error] [pid 1137738] [client 34.175.12.197:54162] script '/var/www/html/i.php' not found or unable to stat
[Fri Sep 18 23:00:35.653463 2026] [php:error] [pid 1137738] [client 34.175.12.197:54162] script '/var/www/html/pi.php' not found or unable to stat
...
show less