This IP address has been reported a total of
32
times from
29 distinct
sources.
34.23.44.142 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /config/firebase-admin.j ...
show more[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /config/firebase-admin.json via rule: /config
show less
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of ...
show moreAutomated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-10-14 16:31 UTC.
show less
Bad Web Bot
Web App Attack
Anonymous
34.23.44.142 - - [14/Oct/2026:17:33:02 +0200] "GET /.env HTTP/2.0" 403 272 "-" "Mozilla/5.0 AppleWeb ...
show more34.23.44.142 - - [14/Oct/2026:17:33:02 +0200] "GET /.env HTTP/2.0" 403 272 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0;
show less
{"level":"info","ts":1791991624.061158,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more{"level":"info","ts":1791991624.061158,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.23.44.142","remote_port":"43612","client_ip":"34.23.44.142","proto":"HTTP/2.0","method":"GET","host":"status.cdl.fi","uri":"/xyrhhkn1i4g4rlnn6cte","headers":{"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"],"Accept":["*/*"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.cdl.fi","ech":false}},"bytes_read":0,"user_id":"","duration":0.000162259,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1791991624.063499,"logger":"http.
...
show less
Repeated exploit attempts, for example: /graphql {x22queryx22:x22{ __schema { types { name fields { ...
show moreRepeated exploit attempts, for example: /graphql {x22queryx22:x22{ __schema { types { name fields { name args { name defaultValue } } } } }x22} (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36")
show less
Repeated exploit attempts, for example: /public../.env /.env (HTTP/2.0 port 443, user agent: "Mozill ...
show moreRepeated exploit attempts, for example: /public../.env /.env (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)")
show less
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of ...
show moreAutomated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-10-14 14:04 UTC.
show less
Mass vulnerability scanning (LFI / path traversal probes with query parameters such as lokasie=/proc ...
show moreMass vulnerability scanning (LFI / path traversal probes with query parameters such as lokasie=/proc/...) against a production server. Observed on 1 day(s) between 2026-10-14 and 2026-10-14 (UTC). Sample request: GET /dist/manifest.json HTTP/2.0
show less
(mod_security) mod_security (id:949110) triggered by 34.23.44.142 (US/United States/142.44.23.34.bc. ...
show more(mod_security) mod_security (id:949110) triggered by 34.23.44.142 (US/United States/142.44.23.34.bc.googleusercontent.com): N in the last X secs
show less