This IP address has been reported a total of
24
times from
18 distinct
sources.
34.156.1.148 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Brazil
with 15
reports;
United States of America
with 3
reports;
Canada
with 1
report.
The most common categories in these recent reports were:
Web App Attack
15
times;
Bad Web Bot
10
times;
Port Scan
4
times;
Brute-Force
3
times;
Exploited Host
2
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web s ...
show moreFail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
show less
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ...
show moreDermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 81 unauthorized requests recorded between 2026-10-11 02:52:02 UTC and 2026-10-11 02:52:12 UTC (rate: ~81 req/min). Edge perimeter firewall drop active.
Log sample:
[2026-10-11 02:52:12 UTC] IP: 34.156.1.148 - W3C IIS (Port 443): GET /.env.stage -> HTTP 404 [CLIENT: 34.156.1.148]
[2026-10-11 02:52:12 UTC] IP: 34.156.1.148 - W3C IIS (Port 443): GET /tmp/.env -> HTTP 404 [CLIENT: 34.156.1.148]
[2026-10-11 02:52:12 UTC] IP: 34.156.1.148 - W3C IIS (Port 443): GET /var/.env -> HTTP 404 [CLIENT: 34.156.1.148]
show less
Bad Web Bot
Web App Attack
Anonymous
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
Anonymous
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web s ...
show moreFail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
show less
