This IP address has been reported a total of
23
times from
20 distinct
sources.
34.12.142.66 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
34.12.142.66 - - [11/Jun/2026:22:14:30 +0200] "GET /wp-json/gravitysmtp/v1/settings HTTP/1.1" 401 32 ...
show more34.12.142.66 - - [11/Jun/2026:22:14:30 +0200] "GET /wp-json/gravitysmtp/v1/settings HTTP/1.1" 401 3277 "-" "Mozilla/5.0 (Linux; Android 8.1.0; Redmi 5 Plus) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
...
show less
Phishing
Brute-Force
Web App Attack
Anonymous
Exploit scanner detected on NON existing URI:/wp-json/gravitysmtp/v1/config | User Agent:Mozilla/5.0 ...
show moreExploit scanner detected on NON existing URI:/wp-json/gravitysmtp/v1/config | User Agent:Mozilla/5.0 (X11; Linux 3.8-6.dmz.1-liquorix-686) KHTML/4.8.4 (like Gecko) Konqueror/4.8 pt
show less
urls tried are "/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings", "/wp-json/gravit ...
show moreurls tried are "/wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings", "/wp-json/gravitysmtp/v1/settings", "/wp-json/gravitysmtp/v1/config"
show less
[ThuJun1100:06:43.6158432026][security2:error][pid1011668:tid1011764][client34.12.142.66:0]ModSecuri ...
show more[ThuJun1100:06:43.6158432026][security2:error][pid1011668:tid1011764][client34.12.142.66:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"traslocarealugano.ch\"][uri\"/wp-json/gravitysmtp/v1/settings\"][unique_id\"ainf852CDLgF1bPdKEciFwAAAME\"]
show less
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.12.142.66 (66.142.12.34.bc.google ...
show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.12.142.66 (66.142.12.34.bc.googleusercontent.com): 1 in the last 3600 secs
show less
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.12.142.66 (NL/The Netherlands/66.1 ...
show more(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.12.142.66 (NL/The Netherlands/66.142.12.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
[WedJun1015:30:54.9205032026][security2:error][pid2308598:tid2308816][client34.12.142.66:0]ModSecuri ...
show more[WedJun1015:30:54.9205032026][security2:error][pid2308598:tid2308816][client34.12.142.66:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"walter-worndli.ch\"][uri\"/wp-json/gravitysmtp/v1/tests/mock-data\"][unique_id\"ailnDmxCqUzREkgiqrER3AAAARc\"]
show less
Vulnerability probe of page /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings, not f ...
show moreVulnerability probe of page /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings, not found on server.
show less
Brute-Force
Web App Attack
Showing 1 to
15
of 23 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩