This IP address has been reported a total of
35
times from
25 distinct
sources.
34.60.143.66 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09.
show less
{"level":"info","ts":1781097318.6362998,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1781097318.6362998,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.60.143.66","remote_port":"57826","client_ip":"34.60.143.66","proto":"HTTP/1.1","method":"GET","host":"update.vutsrqpojihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/.env.txt","headers":{"User-Agent":["Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.00018333,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://update.vutsrqpojihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/.env.txt"],"Content-Type":[]}}
{"level":"info","ts":1781097318.6395195,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.60.143.66","remote_port":"57814","client_ip":"34.60.143.66","proto":"HTTP/1.1","method":"GET","hos
...
show less
[WedJun1014:09:49.1352492026][security2:error][pid2016139:tid2016833][client34.60.143.66:0]ModSecuri ...
show more[WedJun1014:09:49.1352492026][security2:error][pid2016139:tid2016833][client34.60.143.66:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"webmail.fondazionemontgrand.ch\"][uri\"/.env.local\"][unique_id\"ailUDQUhOoMhlQrpsme4pgAAABY\"]
show less
TCP SYN flood detected by MikroTik RouterOS filter (sustained half-open connection rate from single ...
show moreTCP SYN flood detected by MikroTik RouterOS filter (sustained half-open connection rate from single source). Source automatically blacklisted.
show less