This IP address has been reported a total of
74
times from
54 distinct
sources.
34.125.144.163 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
CrowdSec detected Sensitive file or backup discovery attempt. Scenario: local/apache-sensitive-paths ...
show moreCrowdSec detected Sensitive file or backup discovery attempt. Scenario: local/apache-sensitive-paths. Automatic ban triggered. Detection time (UTC): 2026-08-30T16:02:03.628435766Z. Context: http_status=500
show less
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.125.144.163 (US/United States/163 ...
show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.125.144.163 (US/United States/163.144.125.34.bc.googleusercontent.com): 2 in the last 3600 secs
show less
2026-08-30 13:25:24 GET /@fs/root/.env?raw?? [301] && 2026-08-30 13:25:24 GET /@fs/etc/passwd?raw?? ...
show more2026-08-30 13:25:24 GET /@fs/root/.env?raw?? [301] && 2026-08-30 13:25:24 GET /@fs/etc/passwd?raw?? [301] && 2026-08-30 13:25:24 GET /@fs/.env?raw?? [301] && 124 more within 20 minutes
show less
{"level":"info","ts":1788081236.6367998,"logger":"http.log.access.log0","msg":"handled request","req ...
show more{"level":"info","ts":1788081236.6367998,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.125.144.163","remote_port":"51466","client_ip":"34.125.144.163","proto":"HTTP/1.1","method":"GET","host":"aji1.status.updown.io","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"],"Accept":["*/*"],"Accept-Encoding":["gzip"]}},"bytes_read":0,"user_id":"","duration":0.000103908,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://aji1.status.updown.io/"],"Content-Type":[]}}
{"level":"info","ts":1788081237.799835,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.125.144.163","remote_port":"13984","client_ip":"34.125.144.163","proto":"HTTP/1.1","method":"GET","host":"aji1.status.updown.io","uri":"/@fs/home/node/.aws/credentials?raw??","headers":{"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"],"Ac
...
show less
[ISILIA Protection v2.1] Tentative d'accès: /@fs/.env.production | Pays: US | UA: Mozilla/5.0 (Macin ...
show more[ISILIA Protection v2.1] Tentative d'accès: /@fs/.env.production | Pays: US | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 S
show less
[2026-08-30 06:20:17] User-Agent Spoofing (6 unique User-Agent strings from the same IP address with ...
show more[2026-08-30 06:20:17] User-Agent Spoofing (6 unique User-Agent strings from the same IP address within 5 seconds)
show less
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-path-traversal-probing; Action=ban ...
show moreIncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-path-traversal-probing; Action=ban; Events=5; Hosts=admin.incogvps.com; Paths=/@fs/proc/self/cwd/.env?raw??,/_nuxt/../.env,/assets../.env,/images../.env; Country=US; ASN=396982 GOOGLE-CLOUD-PLATFORM
show less
Port Scan
Web App Attack
Showing 1 to
15
of 74 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩