This IP address has been reported a total of
46
times from
35 distinct
sources.
34.64.93.66 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
Anonymous
(mod_security) mod_security triggered on hostname [redacted] 34.64.93.66 (KR/South Korea/66.93.64.34 ...
show more(mod_security) mod_security triggered on hostname [redacted] 34.64.93.66 (KR/South Korea/66.93.64.34.bc.googleusercontent.com)
show less
SQL Injection
Anonymous
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.64.93.66 (KR/South Korea/66.93.64.34.bc.g ...
show more(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.64.93.66 (KR/South Korea/66.93.64.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.64.93.66 - - [14/Sep/2026:18:09:51 +0200] "GET /.env HTTP/1.1" 406 518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.64.93.66 - - [14/Sep/2026:18:09:51 +0200] "GET /.env.local HTTP/1.1" 406 4887 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.64.93.66 - - [14/Sep/2026:18:09:52 +0200] "GET /.env.production HTTP/1.1" 406 4886 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.64.93.66 (KR/South Korea/66.93.64 ...
show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.64.93.66 (KR/South Korea/66.93.64.34.bc.googleusercontent.com): 2 in the last 3600 secs
show less
Triggered Cloudflare WAF (linkMaze) from KR.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/1.1 (GE ...
show moreTriggered Cloudflare WAF (linkMaze) from KR.
Action taken: LINK_MAZE_INJECTED
Protocol: HTTP/1.1 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show moreRemote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less