This IP address has been reported a total of
60
times from
44 distinct
sources.
34.158.154.132 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 14
reports;
Netherlands
with 12
reports;
France
with 7
reports.
The most common categories in these recent reports were:
Web App Attack
54
times;
Brute-Force
20
times;
Bad Web Bot
15
times;
Hacking
9
times;
SSH
2
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[MonOct2609:16:40.1001072026][security2:error][pid2226613:tid2226635][client34.158.154.132:0]ModSecu ...
show more[MonOct2609:16:40.1001072026][security2:error][pid2226613:tid2226635][client34.158.154.132:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcontacts.simireinigung.ch\"][uri\"/.env.bak\"][unique_id\"at8MaL-e8bvy1uFTnq5rYQAAAAc\"]
show less
WebApp brute force attack detected. Multiple file scanning attempts from 34.158.154.132. Detected by ...
show moreWebApp brute force attack detected. Multiple file scanning attempts from 34.158.154.132. Detected by fail2ban.
show less
XORP (haproxy): 275x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_i ...
show moreXORP (haproxy): 275x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Probed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.e ...
show moreProbed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.env/wp-login/xmlrpc/phpmyadmin/.git).
jail=nginx-canary proto=tcp port=80,443 failures>=2 class=web-app-probe
these paths are not real apps on this host; hit is hostile recon
when=2026-10-25T10:09:25Z sensor=fail2ban role=web-canary
src=34.158.154.132
show less