This IP address has been reported a total of
63
times from
47 distinct
sources.
34.175.208.104 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 12
reports;
Germany
with 10
reports;
United States of America
with 9
reports.
The most common categories in these recent reports were:
Web App Attack
54
times;
Brute-Force
23
times;
Bad Web Bot
18
times;
Hacking
9
times;
Exploited Host
2
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
WebApp brute force attack detected. Multiple file scanning attempts from 34.175.208.104. Detected by ...
show moreWebApp brute force attack detected. Multiple file scanning attempts from 34.175.208.104. Detected by fail2ban.
show less
Probed for exposed secrets and config files in a cross-vhost campaign, issuing ~16 distinct /.env.* ...
show moreProbed for exposed secrets and config files in a cross-vhost campaign, issuing ~16 distinct /.env.* variants plus /.git/config and three POST bodies — all rejected (403).
Target: HTTPS 443; /.env, /.a host, /.env.production, /.env.staging, /.env.development, /.env.test, /.env.remote, /.env.sample, /.env.save, /.env.old, /.env.example, /.env.dev, /.env.prod, /.env.stage, /.e...
Seen: 2026-10-23 16:24-16:25 EDT
- 16:24:52 GET /.env.backup HTTP/1.1 403 host=a host UA Mozilla/5.0 (X11; Linux x86_64) Chrome/131
- 16:24:50 GET /.env HTTP/1.1 403 host=a host UA Mozilla/5.0 (X11; Linux x86_64) Chrome/131
- 16:24:51 GET /.env.production HTTP/1.1 403 host=a host UA Mozilla/5.0 (X11; Linux x86_64) Chrome/131
- 16:24:50 GET /.git/config HTTP/1.1 403 host=a host UA Mozilla/5.0 (X11; Linux x86_64) Chrome/131
- 16:24:51 GET /.env.staging HTTP/1.1 403 host=a host UA Mozilla/5.0 (X11; Linux x86_64) Chrome/131
- 16:24:50 POST / HTTP/1.1 403 len=381 host=a host UA Mozilla/5.0 (X11; Linux x86_64) Chrome/131
show less
Sensitive file and configuration probing detected against a public web server.
139 suspicious reque ...
show moreSensitive file and configuration probing detected against a public web server.
139 suspicious requests
139 critical requests
Observed requests:
GET /zend/.env
GET /yii/.env
GET /www/.env
GET /wp/.env
Risk level: CRITICAL
Reference: STI-20261023-214430-34-175-208-104
show less
