This IP address has been reported a total of
104
times from
79 distinct
sources.
34.178.149.167 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
209 attacks on site downloads, directory traversals, deployment descriptor URLs, password grabbing U ...
show more209 attacks on site downloads, directory traversals, deployment descriptor URLs, password grabbing URLs, env grabbing URLs, PHP URLs, config grabbing URLs (type 2), VC URLs:
GET /db.sql HTTP/1.1
GET /..%252F..%252F..%252F..%252F..%252Fproc/self/environ HTTP/1.1
GET /WEB-INF/web.xml HTTP/1.1
GET /.vscode/sftp.json HTTP/1.1
GET /aws/.env.production HTTP/1.1
GET /info.php HTTP/1.1
GET /appsettings.Development.json HTTP/1.1
GET /.git/config HTTP/1.1
show less
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: ...
show moreMalicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /media../etc/passwd (+3 more)
show less
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-18.
show less
{"level":"info","ts":1787169829.5166872,"logger":"http.log.access.log0","msg":"handled request","req ...
show more{"level":"info","ts":1787169829.5166872,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.178.149.167","remote_port":"58090","client_ip":"34.178.149.167","proto":"HTTP/1.1","method":"GET","host":"ptoo.status.updown.io","uri":"/static../.env","headers":{"Accept-Language":["en-US,en;q=0.9"],"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"ptoo.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000155547,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1787169829.5263255,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.178.149.167","remote_port":"58058","client_ip":"34
...
show less
Possible Remote File Inclusion (RFI) Attack: URL Parameter using IP Address. Pattern match "(?i)^(f( ...
show morePossible Remote File Inclusion (RFI) Attack: URL Parameter using IP Address. Pattern match "(?i)^(f(?:ile|tps?)|https?|ssh)://(?:\\\\ (931100-193)
show less