This IP address has been reported a total of
85
times from
71 distinct
sources.
34.74.79.239 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show moreFail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Bad Web Bot
Web App Attack
Port Scan
Anonymous
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-path-traversal-probing; Action=ban ...
show moreIncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-path-traversal-probing; Action=ban; Events=4; Hosts=portal.incognet.io; Paths=/@fs/../.env?import&raw??,/@fs/../.env?raw??,/@fs/proc/self/cwd/.env?raw??,/__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc; Country=US; ASN=396982 GOOGLE-CLOUD-PLATFORM
show less
Port Scan
Web App Attack
Anonymous
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Event ...
show moreIncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Events=5; Hosts=portal.incognet.io; Paths=/.bashrc,/.env.config,/.env.development.local,/.env?import&raw,/.envrc; Country=US; ASN=396982 GOOGLE-CLOUD-PLATFORM
show less
Hacking
Web App Attack
Anonymous
Banned by Fail2Ban on server
Web App Attack
Anonymous
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; E ...
show moreIncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/nginx-req-limit-exceeded; Action=ban; Events=6; Hosts=portal.incognet.io; Paths=/.env?import&raw,/.env?raw,/@fs/proc/self/cmdline?raw??,/__vite_rsc_findSourceMapURL?filename=file:///app/.env&environmentName=rsc,/__vite_rsc_findSourceMapURL?filename=file:///proc/self/environ&environmentName=rsc,/__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc; Country=US; ASN=396982 GOOGLE-CLOUD-PLATFORM
show less
crowdsecurity/http-sensitive-files - Ip 34.74.79.239 performed 'crowdsecurity/http-sensitive-files' ...
show morecrowdsecurity/http-sensitive-files - Ip 34.74.79.239 performed 'crowdsecurity/http-sensitive-files' (5 events over 36.926832ms) at 2026-10-16 18:25:25.464945994 +0000 UTC
show less
Port Scan
Hacking
Brute-Force
Web App Attack
Anonymous
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-cve-2021-41773; Action=ban; Events ...
show moreIncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-cve-2021-41773; Action=ban; Events=1; Hosts=portal.incognet.io; Paths=/cache/original/%2e%2e/%2e%2e/.env; Country=US; ASN=396982 GOOGLE-CLOUD-PLATFORM
show less
Hacking
Web App Attack
Anonymous
Automated abuse report (scan_404). Observed GET /63751vjvu531i3tjw7oz hits=1 at 2026-10-16T15:47:26Z ...
show moreAutomated abuse report (scan_404). Observed GET /63751vjvu531i3tjw7oz hits=1 at 2026-10-16T15:47:26Z UTC.
show less
{"level":"info","ts":1792161944.1062987,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1792161944.1062987,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.74.79.239","remote_port":"39488","client_ip":"34.74.79.239","proto":"HTTP/2.0","method":"GET","host":"status.bohr.io","uri":"/server/.env","headers":{"Accept":["*/*"],"Cookie":["REDACTED"],"Accept-Encoding":["gzip"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["CCBot/2.0 (https://commoncrawl.org/faq/)"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.bohr.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000797281,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1792161944.1073658,"logger":"http.log.access.log1","msg":"handled request","request":{
...
show less
(mod_security) mod_security (id:210492) triggered by 34.74.79.239 (US/United States/239.79.74.34.bc. ...
show more(mod_security) mod_security (id:210492) triggered by 34.74.79.239 (US/United States/239.79.74.34.bc.googleusercontent.com): 10 in the last 3600 secs
show less
2026-10-16 11:13:12 GET /.env [301] && 2026-10-16 11:13:12 GET /@fs/proc/self/environ?import&raw?? [ ...
show more2026-10-16 11:13:12 GET /.env [301] && 2026-10-16 11:13:12 GET /@fs/proc/self/environ?import&raw?? [301] && 2026-10-16 11:13:13 GET /_image?href=/../../../.env [301] && 197 more within 20 minutes
show less
Web App Attack
Showing 1 to
15
of 85 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩