This IP address has been reported a total of
12
times from
9 distinct
sources.
34.24.54.83 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (c ...
show moreScanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)]
show less
Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (c ...
show moreScanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)]
show less
buscaempresas.co 34.24.54.83 - - [19/Oct/2026:09:15:47 -0500] "GET /userfiles?path=../../.env HTTP/2 ...
show morebuscaempresas.co 34.24.54.83 - - [19/Oct/2026:09:15:47 -0500] "GET /userfiles?path=../../.env HTTP/2.0" 403 6707 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" MISS
buscaempresas.co 34.24.54.83 - - [19/Oct/2026:09:15:47 -0500] "GET /userfiles?path=../../../.env HTTP/2.0" 403 6707 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" MISS
buscaempresas.co 34.24.54.83 - - [19/Oct/2026:09:15:48 -0500] "GET /userfiles/x?path=../../.env HTTP/2.0" 403 6707 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" MISS
...
show less
Hacking
Web App Attack
Anonymous
Multiple HTTP GET requests using various User-Agent strings associated with web crawlers and artific ...
show moreMultiple HTTP GET requests using various User-Agent strings associated with web crawlers and artificial intelligence bots. The requests targeted potentially sensitive configuration files, such as variants of .env files, SVN repository files, and API documentation.
show less
{"level":"info","ts":1792412202.60816,"logger":"http.log.access.log1","msg":"handled request","reque ...
show more{"level":"info","ts":1792412202.60816,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.24.54.83","remote_port":"48504","client_ip":"34.24.54.83","proto":"HTTP/2.0","method":"GET","host":"status.ludu.co","uri":"/.config/gcloud/credentials.db","headers":{"Cookie":["REDACTED"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept-Encoding":["gzip"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.ludu.co","ech":false}},"bytes_read":0,"user_id":"","duration":0.000144536,"size":0,"status":429,"resp_headers":{"Retry-After":["1"],"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"]}}
{"level":"info","ts":
...
show less
DDoS Attack
Web App Attack
Showing 1 to
12
of 12 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩