This IP address has been reported a total of
29
times from
24 distinct
sources.
34.84.53.147 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Czechia
with 5
reports;
Germany
with 5
reports;
Finland
with 3
reports.
The most common categories in these recent reports were:
SSH
14
times;
Brute-Force
13
times;
Web App Attack
9
times;
Port Scan
5
times;
Hacking
4
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Detectado por Wazuh SIEM en api-ux.com | Alertas: 19 | Nivel max: 10 | Agentes: web-apiux-2025 | Web ...
show moreDetectado por Wazuh SIEM en api-ux.com | Alertas: 19 | Nivel max: 10 | Agentes: web-apiux-2025 | Web server 400 error code.; PHP CGI-bin vulnerability attempt.; Multiple web server 400 error codes from same source ip.
show less
Detectado por Wazuh SIEM en api-ux.com | Alertas: 19 | Nivel max: 10 | Agentes: web-apiux-2025 | Web ...
show moreDetectado por Wazuh SIEM en api-ux.com | Alertas: 19 | Nivel max: 10 | Agentes: web-apiux-2025 | Web server 400 error code.; Multiple web server 400 error codes from same source ip.; PHP CGI-bin vulnerability attempt.
show less
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
Anonymous
2026-10-16T10:16:05.750024+00:00 arrow-fi2 sshd-session[86866]: pam_unix(sshd:auth): authentication ...
show more2026-10-16T10:16:05.750024+00:00 arrow-fi2 sshd-session[86866]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.84.53.147
2026-10-16T10:16:08.220722+00:00 arrow-fi2 sshd-session[86866]: Failed password for invalid user admin from 34.84.53.147 port 39700 ssh2
2026-10-16T10:19:50.236077+00:00 arrow-fi2 sshd-session[86876]: Invalid user user from 34.84.53.147 port 47042
...
show less
SSH Brute force: 23 attempts were recorded from 34.84.53.147
2026-10-16T00:50:24+02:00 Connection cl ...
show moreSSH Brute force: 23 attempts were recorded from 34.84.53.147
2026-10-16T00:50:24+02:00 Connection closed by authenticating user root 34.84.53.147 port 48596 [preauth]
2026-10-16T00:53:24+02:00 Invalid user frappe from 34.84.53.147 port 38784
2026-10-16T00:56:32+02:00 Invalid user admin from 34.84.53.147 port 54716
2026-10-16T00:59:57+02:00 Invalid user ftpuser from 34.84.53.147 port 43182
2026-10-16T01:02:53+02:00 Invalid user admin from 34.84.53.147 port 40168
2026-10-16T01:05:50+02:00 Invalid user openhabian from 34.84.53.147 port 37446
2026-10-16T01:09:32+02:00 Connection closed by authenticating user root 34.84.53.147 port 57780 [preauth]
2026-10-16T01:12:22+02:00 Connection closed by authenticating user root 34.84.53.147 port 39768 [preauth]
2026-10-16T01:15:06+02:00 Connection closed by authenticating user root 34.84.53.147 port 44254 [preauth]
2026-10-16T01:18:13+02:00 Connection
show less
[34.84.53.147] triggered by honeypot on port [80], Timestamp [2026-10-15T23:54:01Z]METHOD=POST PATH= ...
show more[34.84.53.147] triggered by honeypot on port [80], Timestamp [2026-10-15T23:54:01Z]METHOD=POST PATH=/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP=HTTP/1.1 UA="libredtail-http"
show less
Port Scan
Hacking
Anonymous
Web scanning: repeated requests for files and exploit paths this site does not serve (.env, .git, ph ...
show moreWeb scanning: repeated requests for files and exploit paths this site does not serve (.env, .git, phpunit, cgi-bin). Reported by fail2ban.
show less
