This IP address has been reported a total of
42
times from
36 distinct
sources.
34.104.219.171 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 20
reports;
Germany
with 6
reports;
Netherlands
with 6
reports.
The most common categories in these recent reports were:
Web App Attack
30
times;
Bad Web Bot
13
times;
Brute-Force
9
times;
Hacking
8
times;
Port Scan
6
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"level":"info","ts":1791689358.737911,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more{"level":"info","ts":1791689358.737911,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.104.219.171","remote_port":"51640","client_ip":"34.104.219.171","proto":"HTTP/2.0","method":"GET","host":"status.oneheart.la","uri":"/push_config.json","headers":{"Cookie":["REDACTED"],"Accept-Encoding":["gzip"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.oneheart.la","ech":false}},"bytes_read":0,"user_id":"","duration":0.001144654,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1791689358.969959,"logger":"http.log.access.lo
...
show less
DDoS Attack
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2. ...
show moreBot / scanning and/or hacking attempts: GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0, GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env HTTP, GET /api/fs/read?allowOutsideWorkspace=true&path=/proc/self/env, GET /config/gcp-credentials.json HTTP/2.0, GET /firebase.json HTTP/2.0, GET /cache/original/%2e%2e/%2e%2e/.env HTTP/2.0, GET /.env HTTP/2.0, GET /google-service-account.json HTTP/2.0, GET /appearance/../../proc/self/environ HTTP/2.0, GET /gcp-key.json HTTP/2.0, GET /proc/self/cgroup HTTP/2.0, GET /api/system/fileView?file=/proc/self/environ HTTP/2.0, GET /sa.json HTTP/2.0, GET /google-services.json HTTP/2.0, GET /firebase-admin.json HTTP/2.0, GET /.env.example HTTP/2.0, GET /firebase-credentials.json HTTP/2.0, GET /push_config.json HTTP/2.0, GET /gcp-service.json HTTP/2.0, GET /gcp-credentials.json HTTP/2.0, GET /gc-service.json HTTP/2.0, GET /api/system/fileView?file=/app/.env HTTP/2.0, GET /cache/original/%2e%2e/.env HTTP/2.0, GET /llm/.env HTTP/2.0
show less
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Other, ruleset: bad-browser. Requested ...
show moreBlocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Other, ruleset: bad-browser. Requested honeypot path: /. User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36
show less
18 x HTTP 403/404 responses within 60 seconds. Likely vulnerability scanner or brute-force attack on ...
show more18 x HTTP 403/404 responses within 60 seconds. Likely vulnerability scanner or brute-force attack on web application paths.
show less
