This IP address has been reported a total of
30
times from
25 distinct
sources.
34.159.56.158 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 6
reports;
Netherlands
with 6
reports;
France
with 5
reports.
The most common categories in these recent reports were:
Web App Attack
23
times;
Brute-Force
11
times;
Bad Web Bot
8
times;
Hacking
6
times;
Exploited Host
4
times;
Other
6
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 34.159.56.158, Reason: ...
show moreCluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 34.159.56.158, Reason:[(mod_security) mod_security (id:210832) triggered by 34.159.56.158 (DE/Germany/158.56.159.34.bc.googleusercontent.com): 3 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs:
show less
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /config/firebase-admin.j ...
show more[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /config/firebase-admin.json via rule: /config
show less
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show moreHTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-mnz6-1)
show less
Bad Web Bot
Anonymous
Web probing (245 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by ...
show moreWeb probing (245 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
{"level":"info","ts":1791898207.550923,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more{"level":"info","ts":1791898207.550923,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.159.56.158","remote_port":"40878","client_ip":"34.159.56.158","proto":"HTTP/2.0","method":"GET","host":"status.nikkis.info","uri":"/__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc","headers":{"Accept":["*/*"],"Cookie":["REDACTED"],"Accept-Encoding":["gzip"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.nikkis.info","ech":false}},"bytes_read":0,"user_id":"","duration":0.001154001,"size":0,"status":
...
show less
