Detected via HAProxyScanner at 2026-05-21 13:11:01 UTC on destination port WEB (80/443). Repeated sc ...
show moreDetected via HAProxyScanner at 2026-05-21 13:11:01 UTC on destination port WEB (80/443). Repeated scan / connection.
show less
Port Scan
Hacking
Brute-Force
Anonymous
34.60.61.146 - - [21/May/2026:12:21:19 +0000] "GET /.env HTTP/2.0" 404 4059 "-" "Mozilla/5.0 (Window ...
show more34.60.61.146 - - [21/May/2026:12:21:19 +0000] "GET /.env HTTP/2.0" 404 4059 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" "-"
34.60.61.146 - - [21/May/2026:12:21:19 +0000] "GET /.env.local HTTP/2.0" 404 4064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" "-"
34.60.61.146 - - [21/May/2026:12:21:19 +0000] "GET /.env.production HTTP/2.0" 404 4066 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" "-"
34.60.61.146 - - [21/May/2026:12:21:19 +0000] "GET /.env.backup HTTP/2.0" 404 4065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" "-"
34.60.61.146 - - [21/May/2026:12:21:19 +0000] "GET /.env.bak HTTP/2.0" 404 4064 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 S
...
show less
Multiple (24) times attack on https port 443: searching for Cobalt Strike server beacon (GET /head) ...
show moreMultiple (24) times attack on https port 443: searching for Cobalt Strike server beacon (GET /head)
12:13:49 searching for Cobalt Strike server beacon (GET /path)
12:13:50 searching for Cobalt Strike server beacon (GET /span)
12:13:50 Hacking attempt (GET /li)
12:13:50 Hacking attempt (GET /ul)
12:13:50 unauthorized access to Visual Studio Code - SFTP Extension (GET /src/config.json)
12:13:50 searching for Cobalt Strike server beacon (GET /form)
12:13:50 Configuration snooping in .env file (GET /.env.local)
12:13:50 Configuration snooping in .env file (GET /.env.production)
show less
Blocked by UFW (TCP on port 8008).
Source port: 54721
TTL: 250
Packet length: 40
TOS: 0x00
This rep ...
show moreBlocked by UFW (TCP on port 8008).
Source port: 54721
TTL: 250
Packet length: 40
TOS: 0x00
This report (for 34.60.61.146) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less