This IP address has been reported a total of
62
times from
43 distinct
sources.
34.146.38.42 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 16
reports;
Netherlands
with 9
reports;
Czechia
with 7
reports.
The most common categories in these recent reports were:
Web App Attack
51
times;
Brute-Force
27
times;
Bad Web Bot
26
times;
Hacking
20
times;
Port Scan
4
times;
Other
11
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-08.
show less
Fake Claudebot fetcher UA from non-Claude IP. Match of "ipMatchFromFile /etc/modsecurity/crs/plugins ...
show moreFake Claudebot fetcher UA from non-Claude IP. Match of "ipMatchFromFile /etc/modsecurity/crs/plugins/claudebot_fetchers.txt" against "REMOTE_ADDR" required. (200112-185)
show less
(mod_security) mod_security triggered on hostname [redacted] 34.146.38.42 (JP/Japan/42.38.146.34.bc. ...
show more(mod_security) mod_security triggered on hostname [redacted] 34.146.38.42 (JP/Japan/42.38.146.34.bc.googleusercontent.com)
show less
Honeypot caught: /.env via saec.me. UA: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.a ...
show moreHoneypot caught: /.env via saec.me. UA: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/).
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
IoT Targeted
09-10-2026:03:31:00UTC [Nginx Web Server] Suspicious web request: path:/.env path:/.aws/ path:/.well ...
show more09-10-2026:03:31:00UTC [Nginx Web Server] Suspicious web request: path:/.env path:/.aws/ path:/.well-known/ path:/api/v1/config path:/actuator/ (43 request(s)).
show less
{"ClientAddr":"34.146.38.42:56222","ClientHost":"34.146.38.42","ClientPort":"56222","ClientUsername" ...
show more{"ClientAddr":"34.146.38.42:56222","ClientHost":"34.146.38.42","ClientPort":"56222","ClientUsername":"-","DownstreamContentSize":1488,"DownstreamStatus":404,"Duration":109191155,"OriginContentSize":1488,"OriginDuration":109046578,"OriginStatus":404,"Overhead":144577,"RequestAddr":"vdkln.com","RequestContentSize":0,"RequestCount":153542,"RequestHost":"vdkln.com","RequestMethod":"GET","RequestPath":"/userfiles?path=../../../.env","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"vdkln-shlink-shortlinks@file","ServiceAddr":"shlink:8080","ServiceName":"shlink-svc@file","ServiceURL":"http://shlink:8080","StartLocal":"2026-10-09T02:30:32.369911412Z","StartUTC":"2026-10-09T02:30:32.369911412Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-10-09T02:30:32Z"}
{"ClientAddr":"34.146.38.42:56222","ClientHost":"34.146.38.42","ClientPort":"56222","ClientUsername":"-","Downs
...
show less
