This IP address has been reported a total of
18
times from
15 distinct
sources.
34.154.204.53 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 4
reports;
France
with 3
reports;
Canada
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
15
times;
Bad Web Bot
10
times;
Brute-Force
8
times;
Hacking
3
times;
DDoS Attack
2
times;
Other
9
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-14.
show less
Web App Attack
SSH
Hacking
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: Word ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IT, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
XORP (haproxy): 73x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ip ...
show moreXORP (haproxy): 73x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Ip 34.154.204.53 performed 'crowdsecurity/appsec-vpatch' (2 events over 292.862982ms) at 2026-10-15 ...
show moreIp 34.154.204.53 performed 'crowdsecurity/appsec-vpatch' (2 events over 292.862982ms) at 2026-10-15 06:04:07.959900194 +0000 UTC
Ip 34.154.204.53 performed 'crowdsecurity/http-admin-interface-probing' (5 events over 23.99887694s) at 2026-10-15 06:04:36.620893108 +0000 UTC
Ip 34.154.204.53 performed 'crowdsecurity/http-probing' (11 events over 2.172113523s) at 2026-10-15 06:04:09.042865621 +0000 UTC
Ip 34.154.204.53 performed 'crowdsecurity/http-sensitive-files' (5 events over 820.831006ms) at 2026-10-15 06:04:08.781564782 +0000 UTC
Ip 34.154.204.53 performed 'crowdsecurity/http-technology-probing' (1 events over 0s) at 2026-10-15 06:04:35.988548009 +0000 UTC
WAF block: crowdsecurity/vpatch-env-access from 34.154.204.53 ([REDACTED]) (174 alerts)
WAF block: crowdsecurity/vpatch-git-config from 34.154.204.53 ([REDACTED])
WAF block: crowdsecurity/vpatch-symfony-profiler from 34.154.204.53 ([REDACTED])
show less
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show moreRemote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less
http-sensitive-files - IP: 34.154.204.53 - time="2026-10-15T03:58:55+02:00" level=info msg="(555f66 ...
show morehttp-sensitive-files - IP: 34.154.204.53 - time="2026-10-15T03:58:55+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.154.204.53 (IT/396982) : 4h ban on Ip 34.154.204.53" module=db
show less
Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla ...
show moreRepeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36")
show less
Web App Attack
Anonymous
Flagged as abuse by IisGuard automated detection (tier L3, score 65/100). Reasons: Reputation=1, Bad ...
show moreFlagged as abuse by IisGuard automated detection (tier L3, score 65/100). Reasons: Reputation=1, BadPath=24,9, Rate=19,4, Diversity=20.
show less
