This IP address has been reported a total of
13
times from
12 distinct
sources.
34.141.43.54 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 4
reports;
Czechia
with 3
reports;
Germany
with 3
reports.
The most common categories in these recent reports were:
Web App Attack
10
times;
Hacking
5
times;
Brute-Force
5
times;
Bad Web Bot
2
times;
SSH
2
times;
Other
3
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
(mod_security) mod_security triggered on hostname [redacted] 34.141.43.54 (DE/Germany/54.43.141.34.b ...
show more(mod_security) mod_security triggered on hostname [redacted] 34.141.43.54 (DE/Germany/54.43.141.34.bc.googleusercontent.com)
show less
2026-09-27 17:22:41 GET /.git/config [301] && 2026-09-27 17:22:41 GET /.env [301] && 2026-09-27 17:2 ...
show more2026-09-27 17:22:41 GET /.git/config [301] && 2026-09-27 17:22:41 GET /.env [301] && 2026-09-27 17:22:44 GET /.env.bak [301] && 151 more within 20 minutes
show less
Web App Attack
Anonymous
34.141.43.54 - - [27/Sep/2026:17:09:42 +0200] "GET /.git/config HTTP/1.1" 200 3264 "-" "Mozilla/5.0 ...
show more34.141.43.54 - - [27/Sep/2026:17:09:42 +0200] "GET /.git/config HTTP/1.1" 200 3264 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Port Scan
Hacking
Brute-Force
Bad Web Bot
Web App Attack
SSH
This address is looking for secret files on our sites: .git directories, .env files, credential and ...
show moreThis address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please check the machine behind it for an attack tool or malware. | method: GET | path: /.git/config (+10 more) | 2026-09-26 09:24 UTC
show less
Hacking
Web App Attack
Anonymous
IP matched detection query 20 more in short time bad rqs.
ModSecurity OWASP CRS (Anomaly Score: 50): Attempt to access a backup or working file;JavaScript Pro ...
show moreModSecurity OWASP CRS (Anomaly Score: 50): Attempt to access a backup or working file;JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;PHP Injection Attack: Variable Access Found;Remote Command Execution: Direct Unix Command Execution;Remote Command Execution: Unix Shell Expression Found;Restricted File Access Attempt;SQL Injection Attack: SQL function name detected;URL file extension is restricted by policy;
show less
Web App Attack
Anonymous
[ns27.kdns.gr] httpd-config-scan: sites=www.foraofakous.gr; logs=/var/log/httpd/domains/foraofakous. ...
show more[ns27.kdns.gr] httpd-config-scan: sites=www.foraofakous.gr; logs=/var/log/httpd/domains/foraofakous.gr.log; samples=/.git/config | /.env | /.env.local
show less
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-22.
show less
Web App Attack
SSH
Hacking
Anonymous
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
Showing 1 to
13
of 13 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
