This IP address has been reported a total of
43
times from
39 distinct
sources.
34.159.23.72 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 10
reports;
Netherlands
with 9
reports;
United States of America
with 9
reports.
The most common categories in these recent reports were:
Web App Attack
31
times;
Bad Web Bot
12
times;
Brute-Force
9
times;
Hacking
6
times;
SQL Injection
4
times;
Other
6
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Web vulnerability scanning / probing from 34.159.23.72: automated requests for CMS admin paths, logi ...
show moreWeb vulnerability scanning / probing from 34.159.23.72: automated requests for CMS admin paths, login endpoints, xmlrpc, and common scanner fingerprints over HTTPS. 14 hits; paths: /.docker/config.json, /__nuxt_config.json, /admin, /ai/.env, /api/auth.
show less
HTTP application-layer DoS / botnet traffic from 34.159.23.72: repeated high-cost dynamic page and f ...
show moreHTTP application-layer DoS / botnet traffic from 34.159.23.72: repeated high-cost dynamic page and feed requests (profile/tag views, forums, tracker, RSS) at abusive rates via completed TCP/HTTPS. Likely compromised end-user host.
show less
DDoS Attack
Bad Web Bot
Exploited Host
Anonymous
Web probing (590 hits in 24h) on analytics.1valkenburg.nl,default-vhost: sensitive-path scans and/or ...
show moreWeb probing (590 hits in 24h) on analytics.1valkenburg.nl,default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show moreHTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-201)
show less
2026-10-02 03:49:36 GET /__/firebase/init.json [301] && 2026-10-02 03:49:36 GET /build../.env [301] ...
show more2026-10-02 03:49:36 GET /__/firebase/init.json [301] && 2026-10-02 03:49:36 GET /build../.env [301] && 2026-10-02 03:49:36 GET /config.json [301] && 238 more within 20 minutes
show less
(mod_security) mod_security triggered on hostname [redacted] 34.159.23.72 (DE/Germany/Hesse/Frankfur ...
show more(mod_security) mod_security triggered on hostname [redacted] 34.159.23.72 (DE/Germany/Hesse/Frankfurt am Main/72.23.159.34.bc.googleusercontent.com)
show less
(mod_security) mod_security triggered on hostname [redacted] 34.159.23.72 (DE/Germany/72.23.159.34.b ...
show more(mod_security) mod_security triggered on hostname [redacted] 34.159.23.72 (DE/Germany/72.23.159.34.bc.googleusercontent.com)
show less
(mod_security) mod_security triggered on hostname [redacted] 34.159.23.72 (DE/Germany/72.23.159.34.b ...
show more(mod_security) mod_security triggered on hostname [redacted] 34.159.23.72 (DE/Germany/72.23.159.34.bc.googleusercontent.com)
show less
