This IP address has been reported a total of
25
times from
23 distinct
sources.
34.76.158.36 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 4
reports;
Netherlands
with 4
reports;
United States of America
with 4
reports.
The most common categories in these recent reports were:
Web App Attack
17
times;
Brute-Force
10
times;
Bad Web Bot
6
times;
Hacking
3
times;
SSH
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated scan for common CMS/admin/secrets-exposure paths (WordPress/Joomla/phpMyAdmin/.env/.git/cg ...
show moreAutomated scan for common CMS/admin/secrets-exposure paths (WordPress/Joomla/phpMyAdmin/.env/.git/cgi-bin and similar) that do not exist on this server - all requests 404'd, volume stayed below any automatic ban threshold.
show less
{"level":"info","ts":1791537159.4270067,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1791537159.4270067,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.76.158.36","remote_port":"54848","client_ip":"34.76.158.36","proto":"HTTP/1.1","method":"GET","host":"stat.climatelive.org","uri":"/","headers":{"Keep-Alive":["300"],"Connection":["keep-alive"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36"],"Accept-Language":["en-US,en;q=0.5"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"]}},"bytes_read":0,"user_id":"","duration":0.000070645,"size":0,"status":308,"resp_headers":{"Location":["https://stat.climatelive.org/"],"Content-Type":[],"Server":["Caddy"],"Connection":["close"]}}
{"level":"info","ts":1791537159.4819915,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.76.158.36","remote_port":"53415","client_ip":"34.76.158.36","proto":"HTTP/1.1","method":"GET","host":"stat.climateli
...
show less
Automated web scanning detected by CrowdSec - 11 matching requests, consistent with opportunistic in ...
show moreAutomated web scanning detected by CrowdSec - 11 matching requests, consistent with opportunistic internet reconnaissance. Classified as automated probing for exposed files / admin panels (scenario "http-probing", in our own server logs). Behavioural detection, auto-banned at the firewall.
show less
