ECHO// threat intelligence
OverviewTacticsWordlistsMethodologyDevAPI keys
// feed

probe.traversal

// generated 2026-08-25 15:58:30 UTC
Total IPs
15
Top country
NL
4 IPs
Top actor events
2,231
34.187.103.117
Refresh cadence
15m
per Sentinel cache

IPs (15)

0134.187.103.117NLAS396982 Google LLC2,231events02136.108.80.95USAS396982 Google LLC506events0334.125.117.42USAS396982 Google LLC503events0434.104.241.79JPAS396982 Google LLC430events0534.62.177.116BEAS396982 Google LLC371events0634.81.109.45TWAS396982 Google LLC350events07137.220.49.63USAS20473 The Constant Company, LLC247events08195.178.110.211ADAS48090 TECHOFF SRV LIMITED147events09144.172.114.51USAS14956 RouterHosting LLC70events10216.57.110.81NLAS210976 Timeweb, LLP63events1141.63.63.211ZMAS37532 Zambia Research and Education Network (ZAMREN)47events1231.132.90.3KZAS197556 Kar-Tel LLC46events13101.36.104.242JPAS135377 UCLOUD INFORMATION TECHNOLOGY (HK) LIMITED45events14130.12.180.126NLAS202412 Omegatech LTD44events15204.76.203.43NLAS51396 Pfcloud UG2events

By country

  • NL4
  • US4
  • JP2
  • BE1
  • TW1
  • AD1
  • ZM1
  • KZ1

Get the feed

.json with metadata →.txt plain IPs →

Cached 15min upstream. Use either format with your own tooling. No auth. No throttling.

Co-occurring tactics

// % of probe.traversal IPs that also have this tag
  • probe.404flood76%
  • probe.admin76%
  • protocol.no-language71%
  • probe.dotgit71%
  • probe.config71%
  • probe.dotenv65%
  • probe.backup59%
  • probe.actuator59%
all tactics →
// Echo is a public face on sentinel — observability for the ironcat fleet
/api/echoironcatlabs.com