This IP address has been reported a total of
39
times from
34 distinct
sources.
34.91.0.142 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-20.
show less
Web App Attack
SSH
Hacking
Anonymous
Bot / scanning and/or hacking attempts: POST /app HTTP/2.0, GET /@fs/../.env?raw?? HTTP/2.0, GET /.e ...
show moreBot / scanning and/or hacking attempts: POST /app HTTP/2.0, GET /@fs/../.env?raw?? HTTP/2.0, GET /.env.config HTTP/2.0, POST /api HTTP/2.0, POST /api/auth HTTP/2.0, POST /api/route HTTP/2.0, POST /_next/server HTTP/2.0, POST /admin HTTP/2.0, POST /login HTTP/2.0, POST / HTTP/2.0, POST /dashboard HTTP/2.0, [428/428] read: stream 0, , POST /actions HTTP/2.0, GET /.bashrc HTTP/2.0, POST /settings HTTP/2.0, GET /__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_, GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/2.0, GET /.dockercfg HTTP/2.0
show less
Hacking
Web App Attack
Anonymous
34.91.0.142 - - [21/Oct/2026:13:46:59 +0200] "GET /. HTTP/2.0" 301 169 "-" "Mozilla/5.0 AppleWebKit/ ...
show more34.91.0.142 - - [21/Oct/2026:13:46:59 +0200] "GET /. HTTP/2.0" 301 169 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@)"
show less
[2026-10-21 08:00:45] User-Agent Spoofing (6 unique User-Agent strings from the same IP address with ...
show more[2026-10-21 08:00:45] User-Agent Spoofing (6 unique User-Agent strings from the same IP address within 1 seconds)
show less
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 248
Exploited Host
Web App Attack
Anonymous
Attempted access to sensitive endpoint (/.env.supabase) detected. Automated scan or unauthorized pro ...
show moreAttempted access to sensitive endpoint (/.env.supabase) detected. Automated scan or unauthorized probing.
show less
{"level":"info","ts":1792551118.9899902,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1792551118.9899902,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.91.0.142","remote_port":"51280","client_ip":"34.91.0.142","proto":"HTTP/2.0","method":"GET","host":"status.nikkis.info","uri":"/static//app/.env","headers":{"Accept-Encoding":["gzip"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"],"Accept":["*/*"],"Cookie":["REDACTED"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.nikkis.info","ech":false}},"bytes_read":0,"user_id":"","duration":0.001189951,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1792551118
...
show less