This IP address has been reported a total of
29
times from
27 distinct
sources.
34.62.216.114 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Attack detected by Fortinet - misc: Java.Debug.Wire.Protocol.Insecure.Configuration - 2026-10-22 02: ...
show moreAttack detected by Fortinet - misc: Java.Debug.Wire.Protocol.Insecure.Configuration - 2026-10-22 02:44:54 - Source Port 40854
show less
{"level":"info","ts":1792671632.1630244,"logger":"http.log.access.log15","msg":"handled request","re ...
show more{"level":"info","ts":1792671632.1630244,"logger":"http.log.access.log15","msg":"handled request","request":{"remote_ip":"34.62.216.114","remote_port":"37178","client_ip":"34.62.216.114","proto":"HTTP/1.1","method":"GET","uri":"/favicon.ico","headers":{"Connection":["close"],"User-Agent":["Mozilla/5.0 (compatible)"]}},"bytes_read":0,"user_id":"","duration":0.000350325,"size":1245,"status":404,"resp_headers":{"Last-Modified":["Sun, 02 Aug 2026 16:45:14 GMT"],"Content-Length":["1245"],"Server":["Microsoft-IIS/10.0"],"X-Powered-By":["ASP.NET"],"Accept-Ranges":["bytes"],"Vary":["Accept-Encoding"],"Etag":["\"dkelymhcxix0yl\""],"Content-Type":["text/html; charset=utf-8"]}}
...
show less
Level: (LOW): Reputation Unknown via CitrixHoneypot IOC Country: Belgium 5x -> Target Country: Finnl ...
show moreLevel: (LOW): Reputation Unknown via CitrixHoneypot IOC Country: Belgium 5x -> Target Country: Finnland HTTPS
show less
Hacking
Web App Attack
Anonymous
Reported from Nginx log analysis 16. Log: 34.62.216.114 - - [22/Oct/2026:xx:xx:xx 0200] "GET / HTTP ...
show moreReported from Nginx log analysis 16. Log: 34.62.216.114 - - [22/Oct/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" "BE Belgium Brussels" "AS396982" "Google LLC" | 34.62.216.114 - - [22/Oct/2026:xx:xx:xx 0200] "GET / HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-" "BE Belgium Brussels" "AS396982" "Google LLC"
show less
Detected via HAProxyScanner at 2026-10-22 09:47:01 UTC on destination port WEB (80/443). Repeated sc ...
show moreDetected via HAProxyScanner at 2026-10-22 09:47:01 UTC on destination port WEB (80/443). Repeated scan / connection.
show less
Direct IP Access | Host header was a raw IP address instead of a hostname (193.159.125.156) | 10+ bl ...
show moreDirect IP Access | Host header was a raw IP address instead of a hostname (193.159.125.156) | 10+ blocked requests within 300s | last path: / | Mozilla/5.0 (compatible)
show less
Blocked by Scantide Guard on custom:ce9a4bb4dda8493eb1dcc4b93e3487ab. Rule: 5 event(s) in correlatio ...
show moreBlocked by Scantide Guard on custom:ce9a4bb4dda8493eb1dcc4b93e3487ab. Rule: 5 event(s) in correlation window.
show less
Direct ip access to website TCP 80/443 [Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ...
show moreDirect ip access to website TCP 80/443 [Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH].
show less
2026/10/22 06:52:24 [error] 1488316#1488316: *2231 FastCGI sent in stderr: "PHP message: BOT WARNING ...
show more2026/10/22 06:52:24 [error] 1488316#1488316: *2231 FastCGI sent in stderr: "PHP message: BOT WARNING: visitor used the honeypot: 34.62.216.114, you should ban it for long time (honeypot form function-abuseipdb)" while reading upstream, client: 34.62.216.114, server: www.elivecd.org, request: "GET / HTTP/1.1", upstream: "fastcgi://unix:/run/php/php8.4-fpm-elivewp.sock:", host: "192.248.152.121:443"
...
show less