This IP address has been reported a total of
23
times from
19 distinct
sources.
34.84.225.41 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 3
reports;
Netherlands
with 3
reports;
United States of America
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
22
times;
Brute-Force
8
times;
Bad Web Bot
7
times;
Hacking
5
times;
Port Scan
2
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Web app scan: 13 requests in 1 s across 2 domains (301). Paths: /.git/config, /.env, /.env.local (+2 ...
show moreWeb app scan: 13 requests in 1 s across 2 domains (301). Paths: /.git/config, /.env, /.env.local (+2 more). Sample: 2026-10-20T19:21:57Z "GET /.git/config" 301
show less
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, Bad ...
show moreFlagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, BadPath=25, Diversity=16, CanaryOverride=90.
show less
(mod_security) mod_security (id:210492) triggered by 34.84.225.41 (41.225.84.34.bc.googleusercontent ...
show more(mod_security) mod_security (id:210492) triggered by 34.84.225.41 (41.225.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 09:55:14.872452 2026] [security2:error] [pid 9598:tid 9630] [client 34.84.225.41:44080] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "viasatsales.com"] [uri "/.git/config"] [unique_id "atdywiNYNbIJh2JjceLS2gAAAUU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /test.php HTTP/1.1, GET /uat/.env HTTP/1.1, GET /admin/p ...
show moreBot / scanning and/or hacking attempts: GET /test.php HTTP/1.1, GET /uat/.env HTTP/1.1, GET /admin/phpinfo.php HTTP/1.1, GET /info.php HTTP/1.1, GET /phpinfo HTTP/1.1, GET /preview/.env HTTP/1.1, GET /php.php HTTP/1.1, GET /job/.env HTTP/1.1, GET /development/.env HTTP/1.1, GET /pi.php HTTP/1.1, GET /debug.php HTTP/1.1, GET /stage/.env HTTP/1.1, GET /phpinfo.php HTTP/1.1, GET /config/app/.env HTTP/1.1, GET /dev/phpinfo.php HTTP/1.1, GET /pinfo.php HTTP/1.1, GET /test/phpinfo.php HTTP/1.1, GET /old/phpinfo.php HTTP/1.1, GET /qa/.env HTTP/1.1, GET /p.php HTTP/1.1, GET /test/.env HTTP/1.1, GET /production/.env HTTP/1.1, GET /i.php HTTP/1.1, GET /beta/.env HTTP/1.1, GET /circleci/.env HTTP/1.1, GET /elasticsearch/.env HTTP/1.1
show less
[ti-03tr] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more[ti-03tr] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.84.225.41 - - [20/Oct/2026:14:20:01 +0200] "GET /.git/config HTTP/1.1" 404 3240 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
