This IP address has been reported a total of
10
times from
9 distinct
sources.
34.116.95.214 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Brazil
with 2
reports;
Spain
with 2
reports;
Italy
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
9
times;
Brute-Force
3
times;
Bad Web Bot
3
times;
Hacking
1
time;
Port Scan
1
time;
Other
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ...
show moreDermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 131 unauthorized requests recorded between 2026-09-15 02:32:22 UTC and 2026-09-15 02:33:01 UTC (rate: ~131 req/min). Edge perimeter firewall drop active.
Log sample:
[2026-09-15 02:33:00 UTC] IP: 34.116.95.214 - W3C IIS (Port 443): GET /mandrill/.env -> HTTP 404 [CLIENT: 34.116.95.214]
[2026-09-15 02:33:00 UTC] IP: 34.116.95.214 - W3C IIS (Port 443): GET /mailjet/.env -> HTTP 404 [CLIENT: 34.116.95.214]
[2026-09-15 02:33:00 UTC] IP: 34.116.95.214 - W3C IIS (Port 443): GET /brevo/.env -> HTTP 404 [CLIENT: 34.116.95.214]
show less
Bad Web Bot
Web App Attack
Anonymous
(mod_security) mod_security triggered on hostname [redacted] 34.116.95.214 (AU/Australia/214.95.116. ...
show more(mod_security) mod_security triggered on hostname [redacted] 34.116.95.214 (AU/Australia/214.95.116.34.bc.googleusercontent.com)
show less
Automated probing for exposed secrets and version-control internals: 3 requests for non-existent sen ...
show moreAutomated probing for exposed secrets and version-control internals: 3 requests for non-existent sensitive paths, e.g. /.git/config /.env /.env.local. Observed by an nginx reputation gate; no credentials or user data involved.
show less
Suricata Alert [SID:2066027] ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight ...
show moreSuricata Alert [SID:2066027] ET WEB_SPECIFIC_APPS React Server Components React2Shell Unsafe Flight Protocol Property Access (CVE-2025-55182)
show less
