Connecting

Address

34.50.170.132

Medium 30d list only

Requests for files that exist only to be stolen - .env, .git internals, configuration and database backups. A web sensor reports this after several distinct such paths from one address, never after a single 404.

Triage

Risk score

how this score is made up
Risk score34/100
Detection volume+24Sensor corroboration+10Signal class+0Recency+0
Enrichment

Address intelligence

cached
CountryUnited StatesUS
City / regionLas Vegas, Nevada, United StatesAmerica/Los_Angeles
NetworkGoogle LLCgoogle.com
ASNAS396982
Reverse DNS132.170.50.34.bc.googleusercontent.com
Detections6total observations
Reporting sensors2distinct collectors
First seen2026-09-11 05:59 GMT+828 days ago
Last seen2026-09-13 14:06 GMT+826 days ago
Blocklist window30d list only
Attribution

Reporting sensors

which collectors observed this address
  • Web Sensor 013 observations · last 2026-09-13 14:06 GMT+8Web
  • Web Sensor 023 observations · last 2026-09-11 05:59 GMT+8Web
Sensor names are anonymised. Collector hostnames and log contents are never published.
Signals

Observation history

1 signal record
  • Sensitive file probing over HTTPMediumWeb attack
    6 detections from 2 sensors · first seen 2026-09-11 05:59 GMT+8 · last seen 2026-09-13 14:06 GMT+8 (26 days ago) · active

    Requests for files that exist only to be stolen - .env, .git internals, configuration and database backups. A web sensor reports this after several distinct such paths from one address, never after a single 404.

Abuse Radar publishes sanitized indicators only. Severity is a triage hint computed from detection volume, sensor corroboration, signal class and recency — it is not an attribution claim. See methodology.