Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Busted by the WatchPost edge sentinel: this host was hammering login endpoints with failed credentials (brute force). Blocked at the edge, logged, and shared with the community. Last seen 2026-11-06 10:32 UTC.
{"level":"info","ts":1793957540.5656712,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.73.142.85","remote_port":"33492","client_ip":"34.73.142.85","proto":"HTTP/2.0","method":"GET","host":"jca1.status.updown.io","u ...
show more{"level":"info","ts":1793957540.5656712,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.73.142.85","remote_port":"33492","client_ip":"34.73.142.85","proto":"HTTP/2.0","method":"GET","host":"jca1.status.updown.io","uri":"/uploads../.env","headers":{"X-Remote-Addr":["172.29.227.79"],"X-Proxyuser-Ip":["172.29.227.79"],"X-Real-Ip":["172.29.227.79"],"True-Client-Ip":["172.29.227.79"],"Accept-Encoding":["gzip"],"X-Nextjs-Data":["1"],"X-Custom-Ip-Authorization":["172.29.227.79"],"Cluster-Client-Ip":["172.29.227.79"],"Forwarded":["for=172.29.227.79"],"User-Agent":["Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"],"X-Client-Ip":["172.29.227.79"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Forwarded-For":["172.29.227.79"],"Accept":["*/*"],"X-Originating-Ip":["172.29.227.79"],"Cookie":["REDACTED"],"X-R
...
show less
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 40. Unique request paths counted internally: 40. Cloudflare acti ...
show moreDetected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 40. Unique request paths counted internally: 40. Cloudflare action: block. Cloudflare source: firewallCustom.
show less