This IP address has been reported a total of
31
times from
28 distinct
sources.
34.145.171.165 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 7
reports;
United States of America
with 7
reports;
Germany
with 5
reports.
The most common categories in these recent reports were:
Web App Attack
23
times;
Bad Web Bot
11
times;
Brute-Force
10
times;
Hacking
6
times;
Port Scan
2
times;
Other
4
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
IM360 WAF: Direct access to sensitive file or dotfile||MV:/.env||RSV:8.75||T:APACHE||
Sensor:
mods ...
show moreIM360 WAF: Direct access to sensitive file or dotfile||MV:/.env||RSV:8.75||T:APACHE||
Sensor:
modsec
Rule:
77045402
Abuser:
34.145.171.165
show less
(badbots) Bad bot user-agent [redacted] from 34.145.171.165 (US/United States/165.171.145.34.bc.goog ...
show more(badbots) Bad bot user-agent [redacted] from 34.145.171.165 (US/United States/165.171.145.34.bc.googleusercontent.com)
show less
{"level":"info","ts":1791815584.9650538,"logger":"http.log.access.log0","msg":"handled request","req ...
show more{"level":"info","ts":1791815584.9650538,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.145.171.165","remote_port":"55136","client_ip":"34.145.171.165","proto":"HTTP/2.0","method":"GET","host":"pqob.status.updown.io","uri":"/.//.env","headers":{"Accept-Encoding":["gzip"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])"],"Accept":["*/*"],"Cookie":["REDACTED"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"pqob.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000135919,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1791815
...
show less
10.762 requests with url.path *.env
2.415 requests with url.path */@fs/*
1.043 requests with url. ...
show more10.762 requests with url.path *.env
2.415 requests with url.path */@fs/*
1.043 requests with url.path */proc/*
737 requests with url.path *.ssh/*
588 requests with url.path *credentials.json
464 requests with url.path *.aws/*
432 requests with url.path *config.json
251 requests with url.path *compose.yml
225 requests with url.path *compose.yaml
203 requests with url.path *config.toml
191 requests with url.path *.config/*
190 requests with url.path *.docker/*
189 requests with url.path *secrets.json
124 requests with url.path *vercel.json
124 requests with url.path *netlify.toml
113 requests with url.path *Dockerfile
108 requests with url.path *.gitconfig
107 requests with url.path *secrets.yml
107 requests with url.path *.git/*
106 requests with url.path *.s3cfg
104 requests with url.path *.bashrc
103 requests with url.path *.zshrc
102 requests with url.path *.pgpass
102 requests with url.path *.svn/*
102 requests with url.path *.envrc
101 requests with url.path *.profile
show less
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show moreWeb scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
http-probing - IP: 34.145.171.165 - time="2026-10-12T08:15:57+02:00" level=info msg="(555f66b4f6a74 ...
show morehttp-probing - IP: 34.145.171.165 - time="2026-10-12T08:15:57+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.145.171.165 (US/396982) : 4h ban on Ip 34.145.171.165" module=db
show less
