This IP address has been reported a total of
60
times from
38 distinct
sources.
34.179.244.251 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
10-10-2026:06:14:38UTC [Nginx Web Server] Suspicious web request: path:/.env path:/.aws/ path:/.git ...
show more10-10-2026:06:14:38UTC [Nginx Web Server] Suspicious web request: path:/.env path:/.aws/ path:/.git path:/.well-known/ path:/api/v1/config path:/actuator/ (103 request(s)).
show less
09-10-2026:23:17:00UTC [Nginx Web Server] Suspicious web request: path:/.env path:/.aws/ path:/.git ...
show more09-10-2026:23:17:00UTC [Nginx Web Server] Suspicious web request: path:/.env path:/.aws/ path:/.git path:/api/v1/config path:/actuator/ path:/.well-known/ (103 request(s)).
show less
09-10-2026:20:39:02UTC [Nginx Web Server] Suspicious web request: path:/.env path:/.aws/ path:/.git ...
show more09-10-2026:20:39:02UTC [Nginx Web Server] Suspicious web request: path:/.env path:/.aws/ path:/.git path:/.well-known/ path:/api/v1/config path:/actuator/ (103 request(s)).
show less
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Prot ...
show moreTriggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (POST method)
Endpoint: /exec-py
Timestamp: 2026-10-09T11:48:20Z
Ray ID: a47d27dee97b4d80
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
show less
09-10-2026:09:03:07UTC [Nginx Web Server] Suspicious web request: path:/.env path:/.aws/ path:/api/v ...
show more09-10-2026:09:03:07UTC [Nginx Web Server] Suspicious web request: path:/.env path:/.aws/ path:/api/v1/config path:/.well-known/ path:/actuator/ path:/.git (103 request(s)).
show less
Fired a ~250-request burst against the public HTTPS web app probing for exposed .env/secret/config f ...
show moreFired a ~250-request burst against the public HTTPS web app probing for exposed .env/secret/config files, credential and service-account files, PHP webshells, allow_url_include RFI, VS Code path-traversal, and Flowise/Langflow API endpoints, cycling ~20 AI-research-bot user-agents to disguise aut...
Target: Public HTTPS app (443) a host — /.env family (app/.env, backend/.env, config/.env, server/.env, src/.env, public/.env, admin/.env, api/.env, build/.env, docker/.env, dist/.env, web/.env, .env.prod/...
Seen: 2026-10-09 02:24 EDT
- 2026-10-09 02:24:00-02:24:23 - ~250 POST/GET requests from 34.179.244.251, cycling ~20 AI-research-bot UAs (Googlebot, PerplexityBot, GrokBot, DeepSeekBot, Kimi-SearchBot, OAI-SearchBot, MistralAI-User, Baiduspider, DuckAssistBot, ChatGLM-Spider, Qwenbot, Hunyuan, ChatGPT-User...); all rejected 404/499, no 2xx
- 2026-10-09 02:24:xx - GET /.env family: /app/.env, /backend/.env, /config/.env, /server/.env, /src/.env, /public/.env, /admin/.env, /api/.env, /build/.env, /docker/.env...
show less