This IP address has been reported a total of
17
times from
15 distinct
sources.
34.39.143.176 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 4
reports;
United States of America
with 4
reports;
Spain
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
13
times;
Bad Web Bot
5
times;
Brute-Force
3
times;
Port Scan
2
times;
SQL Injection
2
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"level":"info","ts":1792831087.0252528,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1792831087.0252528,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.39.143.176","remote_port":"35842","client_ip":"34.39.143.176","proto":"HTTP/2.0","method":"GET","host":"status.wsearch.com","uri":"/credentials.json","headers":{"Accept-Encoding":["gzip"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"],"Accept":["*/*"],"Cookie":["REDACTED"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.wsearch.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000804467,"size":0,"status":429,"resp_headers":{"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"],"Server":["Caddy"]}}
{"level":"info","ts":1792831087.0277884,"log
...
show less
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show moreHTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197)
show less
http-crawl-non_statics - IP: 34.39.143.176 - time="2026-10-22T16:51:47+02:00" level=info msg="(555f ...
show morehttp-crawl-non_statics - IP: 34.39.143.176 - time="2026-10-22T16:51:47+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-crawl-non_statics by ip 34.39.143.176 (BR/396982) : 4h ban on Ip 34.39.143.176" module=db
show less
Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-22 14:32 UTC. Samples: ...
show moreExploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-22 14:32 UTC. Samples: GET /.vite/manifest.json 444; GET /credentials 444. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like. Detected by fail2ban.
show less
