This IP address has been reported a total of
9
times from
9 distinct
sources.
34.154.112.2 was first reported on
October 15th 2026 , and the most recent report was
1 hour ago Germany
with 6
reports;
United States of America
with 2
reports;
Poland
with 1
report.
The most common categories in these recent reports were:
Web App Attack
7
times;
Brute-Force
3
times;
Hacking
3
times;
Bad Web Bot
1
time;
SSH
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-10-16 00:59:37
(1 hour ago)
CrowdSec blocked IP for crowdsecurity/http-sensitive-files on vps_agent
Web App Attack
🇩🇪
Marco711
2026-10-16 00:48:04
(1 hour ago)
port/URL scanning
Port Scan
Web App Attack
2026-10-16 00:33:01
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇵🇱
strefapi_com
2026-10-16 00:32:33
(1 hour ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
🇩🇪
seal
2026-10-16 00:32:10
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
SSH
Brute-Force
🇩🇪
TheDjRider
2026-10-16 00:26:33
(1 hour ago)
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban tri ...
show more
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-10-16T00:26:27.440904677Z. Context: http_status=404
show less
Web App Attack
🇺🇸
iwle
2026-10-15 23:57:26
(2 hours ago)
[Thu Oct 15 19:57:23.439571 2026] [:error] [pid 12299:tid 12329] [client 34.154.112.2:0] [client 34. ...
show more
[Thu Oct 15 19:57:23.439571 2026] [:error] [pid 12299:tid 12329] [client 34.154.112.2:0] [client 34.154.112.2] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "autoconfig.iwle.com"] [uri "/.git/config"] [unique_id "atFoY7XiIlMz4L54gRUn6wAAAMI"]
[Thu Oct 15 19:57:25.145450 2026] [:error] [pid 1586:tid 1747] [client 34.154.112.2:0] [client 34.154.112.2] ModSecurity: Warning. Matched phrase "/.env" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [l
...
show less
Web App Attack
Brute-Force
🇩🇪
0x44
2026-10-15 23:44:40
(2 hours ago)
Abusive host detected - Attempt to access sensitive files
Web App Attack
Hacking
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-10-15 23:18:49
(3 hours ago)
[Thu Oct 15 17:18:46.248910 2026] [authz_core:error] [pid 39981:tid 139747162650176] [client 34.154. ...
show more
[Thu Oct 15 17:18:46.248910 2026] [authz_core:error] [pid 39981:tid 139747162650176] [client 34.154.112.2:42642] AH01630: client denied by server configuration: /var/www/horde/.env.bak
[Thu Oct 15 17:18:49.320092 2026] [authz_core:error] [pid 39981:tid 139747238184512] [client 34.154.112.2:42642] AH01630: client denied by server configuration: /var/www/horde/.env.dist
[Thu Oct 15 17:18:49.463527 2026] [authz_core:error] [pid 39981:tid 139747506751040] [client 34.154.112.2:42642] AH01630: client denied by server configuration: /var/www/horde/.env.swp
...
show less
Bad Web Bot
Showing 1 to
9
of 9 reports
