This IP address has been reported a total of
56
times from
53 distinct
sources.
161.118.229.234 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show moreFail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show moreFail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Bad Web Bot
Web App Attack
Port Scan
Anonymous
CrowdSec blocked IP for crowdsecurity/http-sensitive-files on vps_agent
Ip 161.118.229.234 performed 'crowdsecurity/http-sensitive-files' (5 events over 1.112711014s) at 20 ...
show moreIp 161.118.229.234 performed 'crowdsecurity/http-sensitive-files' (5 events over 1.112711014s) at 2026-09-14 11:04:25.678893478 +0000 UTC
show less
Automated: 15 requests with error status in 120s window from 161.118.229.234.
Evidence: /.git/config ...
show moreAutomated: 15 requests with error status in 120s window from 161.118.229.234.
Evidence: /.git/config:404,/phpinfo.php:404,/runtime-config.js:404,/config.php.bak:404,/config.php:404,/config.yaml:404,/config.yml:404,/env.js:404,/config.js:404,/config.json:404,/.env.production:404,/.env.production.local:404,/.env.local:404,/.env:404,/.env.bak:404
show less
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show moreFail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Automated report from an IoT honeypot. 52 malicious events across 51 connections between 2026-09-14 ...
show moreAutomated report from an IoT honeypot. 52 malicious events across 51 connections between 2026-09-14 09:47:36 and 2026-09-14 09:47:44 UTC. Services targeted: http. Destination ports: 80. Attack techniques observed: exploit-attempt. Sample HTTP targets: /v3/api-docs, /v2/api-docs, /telescope, /swagger/v1/swagger.json, /swagger.json. Connection flooding observed: 52 completed TCP connections in 1 minutes (52/min). Traffic is automated (botnet or scanning tool).
show less
DDoS Attack
Hacking
Bad Web Bot
Web App Attack
Anonymous
161.118.229.234 - - [14/Sep/2026:09:21:04 +0000] "GET /.env.bak HTTP/1.1" 503 5350 "-" "Mozilla/5.0 ...
show more161.118.229.234 - - [14/Sep/2026:09:21:04 +0000] "GET /.env.bak HTTP/1.1" 503 5350 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less