This IP address has been reported a total of
32
times from
28 distinct
sources.
34.78.78.69 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 10
reports;
Germany
with 5
reports;
Czechia
with 4
reports.
The most common categories in these recent reports were:
Web App Attack
22
times;
Hacking
11
times;
Brute-Force
10
times;
Bad Web Bot
7
times;
SQL Injection
2
times;
Other
5
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-20.
show less
Blocked by UFW (TCP on 8080)
Source port: 42680
TTL: 60
Packet length: 60
TOS: 0x00
This report (fo ...
show moreBlocked by UFW (TCP on 8080)
Source port: 42680
TTL: 60
Packet length: 60
TOS: 0x00
This report (for 34.78.78.69) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
845 requests with url.path */@fs/*
333 requests with url.path */proc/*
236 requests with url.path ...
show more845 requests with url.path */@fs/*
333 requests with url.path */proc/*
236 requests with url.path *.ssh/*
191 requests with url.path *credentials.json
177 requests with url.path *.aws/*
145 requests with url.path *config.json
show less
Brute-Force
Bad Web Bot
Anonymous
Bot / scanning and/or hacking attempts: POST /flowise/api/v1/node-load-method/customMCP HTTP/2.0, PO ...
show moreBot / scanning and/or hacking attempts: POST /flowise/api/v1/node-load-method/customMCP HTTP/2.0, POST /api/v1/validate/code HTTP/2.0, GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?r, POST /app HTTP/2.0, POST /api/v1/build_public_tmp/00000000-0000-0000-0000-000000000, POST /api/v1/node-load-method/customMCP HTTP/2.0, GET /uploads../.env HTTP/2.0, GET /.env.dev.local HTTP/2.0, POST /api/v1/node-custom-function HTTP/2.0, POST /langflow/api/v1/validate/code HTTP/2.0, POST /icecoder/lib/terminal-xhr.php HTTP/2.0, POST /lib/terminal-xhr.php HTTP/2.0
show less
{"level":"info","ts":1792548956.6043005,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1792548956.6043005,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.78.78.69","remote_port":"45140","client_ip":"34.78.78.69","proto":"HTTP/2.0","method":"GET","host":"status.veba.co","uri":"/build/.env","headers":{"Accept":["*/*"],"Accept-Encoding":["gzip"],"Cookie":["REDACTED"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.veba.co","ech":false}},"bytes_read":0,"user_id":"","duration":0.000123275,"size":0,"status":429,"resp_headers":{"Retry-After":["1"],"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"]}}
{"level":"info","ts":1792548956.6046057,"logger":"http.log.access.log1","msg":"handled request
...
show less
JKweb Security: Severe and dangerous web attack detected. Vulnerability Wordpress Scanning, Director ...
show moreJKweb Security: Severe and dangerous web attack detected. Vulnerability Wordpress Scanning, Directory Brute-Forcing / Content Discovery, Predictable Resource Location / Forced Browsing, Scan for administration and debugging interfaces of modern frameworks, Scan for Spring Boot Actuator Leaks, Scan for Cloud & Infrastructure Credentials, Scan for Database & Backup Dumps, Scan for IDE- und Editor-Configurations, Scan for CI/CD Pipelines & GitHub Workflows etc. The Attacker is permanently banned by Fail2Ban, configurate by JKweb Security a brand of JKweb Service.
show less
