This IP address has been reported a total of
23
times from
17 distinct
sources.
34.6.18.19 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 7
reports;
Denmark
with 5
reports;
United Kingdom of Great Britain and Northern Ireland
with 5
reports.
The most common categories in these recent reports were:
Web App Attack
19
times;
Brute-Force
11
times;
Bad Web Bot
9
times;
Hacking
4
times;
SSH
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
4237 attacks on password/key grabbing URLs, directory traversals, PHP URLs, VC URLs, env grabbing UR ...
show more4237 attacks on password/key grabbing URLs, directory traversals, PHP URLs, VC URLs, env grabbing URLs (type 2), config grabbing URLs (type 2), env grabbing URLs:
GET /id_ed25519 HTTP/1.1
GET /..%2f..%2f.env HTTP/1.1
POST /icecoder/lib/file-control.php HTTP/1.1
GET /.git/config HTTP/1.1
GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/1.1
GET /config/database.json HTTP/1.1
GET /build/.env HTTP/1.1
show less
429 requests with url.path */@fs/*
184 requests with url.path */proc/*
131 requests with url.path ...
show more429 requests with url.path */@fs/*
184 requests with url.path */proc/*
131 requests with url.path *.ssh/*
show less
(mod_security) mod_security (id:949110) triggered by 34.6.18.19 (19.18.6.34.bc.googleusercontent.com ...
show more(mod_security) mod_security (id:949110) triggered by 34.6.18.19 (19.18.6.34.bc.googleusercontent.com): N in the last X secs
show less
Probing for sensitive files: GET /.htpasswd, GET /.env.production.local, GET /.envrc, GET /.env.deve ...
show moreProbing for sensitive files: GET /.htpasswd, GET /.env.production.local, GET /.envrc, GET /.env.development.local, GET /@fs/root/.aws/credentials | Path traversal attempts: GET /build../.env, GET /@fs/../.env, GET /js../.env, GET /css../.env | Exploit attempt for CVE-2021-41773: GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ | Exploit attempt for CVE-2021-43798: GET /public/plugins/alertlist/../../../../../../../../proc/self~ | Probing for admin interfaces: GET /api/w/admins/jobs_u/get_log_file/../../../../proc/self/env~, GET /admin%2F.env, GET /public/admin.json [14 events, 2026-10-20T04:57:46Z; auto-reported by CrowdSec]
show less
Hacking
Web App Attack
Anonymous
Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; We ...
show moreWeb application attack: http cve 2021 41773; Web application attack: http path traversal probing; Web application attack: http sensitive files; Web application attack: grafana cve 2021 43798; Probing for exposed secret / credential files
show less
{"level":"info","ts":1792451043.2905684,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1792451043.2905684,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.6.18.19","remote_port":"41866","client_ip":"34.6.18.19","proto":"HTTP/2.0","method":"GET","host":"status.radioplay.dk","uri":"/static/manifest.json","headers":{"Sec-Fetch-Mode":["navigate"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Dest":["document"],"Sec-Fetch-User":["?1"],"Priority":["u=0, i"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-Site":["none"],"Accept-Language":["en-US,en;q=0.9"],"User-Agent":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"Sec-Ch-Ua-Platform":["\"Linux\""],"X-Nextjs-Data":["1"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middlewa
...
show less
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show moreAutomated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 9. First blocked: 2026-10-19.
show less
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show moreAutomated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 1. First blocked: 2026-10-19.
show less
