This IP address has been reported a total of
14
times from
13 distinct
sources.
34.22.221.204 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
1.999 requests with url.path *.env
441 requests with url.path */@fs/*
163 requests with url.path ...
show more1.999 requests with url.path *.env
441 requests with url.path */@fs/*
163 requests with url.path */proc/*
124 requests with url.path *.ssh/*
103 requests with url.path *config.json
show less
{"level":"info","ts":1792722884.6313875,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1792722884.6313875,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.22.221.204","remote_port":"54312","client_ip":"34.22.221.204","proto":"HTTP/2.0","method":"GET","host":"status.volumio.com","uri":"/assets/manifest.json","headers":{"Sec-Ch-Ua-Mobile":["?0"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Microsoft Edge\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Dest":["script"],"X-Nextjs-Data":["1"],"Sec-Fetch-Mode":["no-cors"],"Sec-Fetch-Site":["same-origin"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"],"Accept":["*/*"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Sec-Ch-Ua-Platform":["\"macOS\""],"Accept-Language":["en-US,en;q=0.9"],"Prior
...
show less
"Path Traversal Attack (/../) - Matched Data: /%2e%2e%2f found within REQUEST_URI_RAW: /uploads/%2e% ...
show more"Path Traversal Attack (/../) - Matched Data: /%2e%2e%2f found within REQUEST_URI_RAW: /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env"
show less
Triggered Cloudflare WAF (firewallManaged) from BE.
Action taken: BLOCK
Protocol: HTTP/2 (POST metho ...
show moreTriggered Cloudflare WAF (firewallManaged) from BE.
Action taken: BLOCK
Protocol: HTTP/2 (POST method)
Endpoint: /settings
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less