This IP address has been reported a total of
15
times from
14 distinct
sources.
34.97.76.117 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 4
reports;
Germany
with 3
reports;
United States of America
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
14
times;
Bad Web Bot
5
times;
Brute-Force
4
times;
Hacking
2
times;
SSH
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-26.
show less
Observed GET /.git/config on TCP/443 at 2026-10-26T22:39:44+01:00; WAF returned HTTP 403 and Fail2Ba ...
show moreObserved GET /.git/config on TCP/443 at 2026-10-26T22:39:44+01:00; WAF returned HTTP 403 and Fail2Ban banned this source. Correlated 1 audit transaction(s) to the source address.
show less
Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /. ...
show moreProbing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development | Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.git/config, GET /.env, GET /.env.local, GET /.env.production, GET /.env.staging (+5 more) [16 events, 2026-10-27T16:00:29Z; auto-reported by CrowdSec]
show less
Web App Attack: 26 attempts in 48h, e.g. GET /.env.docker; GET /.env.live; GET /.env.dev; GET /.env. ...
show moreWeb App Attack: 26 attempts in 48h, e.g. GET /.env.docker; GET /.env.live; GET /.env.dev; GET /.env.prod; GET /.env.stage. Detected by CrowdSec/Traefik/Pangolin logs.
show less
