Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-02 13:23:48 GET /wp/.env [301] && 2026-11-02 13:23:48 GET /wp-config.old [301] && 2026-11-02 13:23:48 GET /config.php.bak [301] && 203 more within 20 minutes
Web App Attack
Anonymous
| Multiple common web attacks from same source ip. (multiple servers)
{"level":"info","ts":1793608777.4016998,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.11.75.244","remote_port":"37126","client_ip":"34.11.75.244","proto":"HTTP/2.0","method":"GET","host":"status.flocksocial.io","u ...
show more{"level":"info","ts":1793608777.4016998,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.11.75.244","remote_port":"37126","client_ip":"34.11.75.244","proto":"HTTP/2.0","method":"GET","host":"status.flocksocial.io","uri":"/js../.env","headers":{"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"],"Accept":["*/*"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.flocksocial.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.00016816,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"
...
show less
Web application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake com ...
show moreWeb application attack / vulnerability scanning against our public nginx web server (TCP 80/443). Source matched a blocked-path security rule (jail nginx-444); server returned HTTP 444 (connection closed without response). TCP three-way handshake completed (full HTTP request received).
show less
