Anonymous
2026-05-19 12:42:38
UTC ·
(5 months ago)
34.81.95.134 - - [19/May/2026:12:42:37 +0000] "GET /backup.zip HTTP/1.1" 404 566 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/124.0 Safari/537.36"
...
Bad Web Bot
Web App Attack
Anonymous
2026-05-16 02:03:36
UTC ·
(5 months ago)
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack
🇺🇸
Lee Daniel
2026-05-15 08:09:43
UTC ·
(5 months ago)
34.81.95.134 - - [15/May/2026:04:09:42 -0400] "GET /.env HTTP/1.0" 403 4397 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36"
...
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-05-15 05:38:43
UTC ·
(6 months ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
octageeks.com
2026-05-15 04:09:16
UTC ·
(6 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇫🇷
Baking333
2026-05-15 03:26:46
UTC ·
(6 months ago)
[redacted] 34.81.95.134 - - [15/May/2026:04:26:45 +0100] "GET /app/.env HTTP/1.1" 302 5283 0/45260 "-" "Mozilla/5.0 (Linux; U; Android 1.5; en-us; sdk Build/CUPCAKE) AppleWebkit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1" [redacte ...
show more
[redacted] 34.81.95.134 - - [15/May/2026:04:26:45 +0100] "GET /app/.env HTTP/1.1" 302 5283 0/45260 "-" "Mozilla/5.0 (Linux; U; Android 1.5; en-us; sdk Build/CUPCAKE) AppleWebkit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1" [redacted] 34.81.95.134 - - [15/May/2026:04:26:45 +0100] "GET /.[redacted] HTTP/1.1" 302 5283 0/42286 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-us) AppleWebKit/534.35 (KHTML, like Gecko) Chrome/11.0.696.65 Safari/534.35 Puffin/2.9174AT"
show less
Bad Web Bot
Web App Attack
Anonymous
2026-05-15 02:02:31
UTC ·
(6 months ago)
(caddyscan) Scanner path probe from 34.81.95.134 (TW/Taiwan/134.95.81.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.81.95.134 - - [15/May/2026:02:02:28 +0000 ...
show more
(caddyscan) Scanner path probe from 34.81.95.134 (TW/Taiwan/134.95.81.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.81.95.134 - - [15/May/2026:02:02:28 +0000] "GET /.env HTTP/1.1"
[REDACTED] 200 2627 34.81.95.134 - - [15/May/2026:02:02:28 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 34.81.95.134 - - [15/May/2026:02:02:28 +0000] "GET /.env.docker HTTP/1.1"
[REDACTED] 200 2627 34.81.95.134 - - [15/May/2026:02:02:28 +0000] "GET /.env.dev HTTP/1.1"
[REDACTED] 200 2627 34.81.95.134 - - [15/May/2026:02:02:28 +0000] "GET /admin/.env HTTP/1.1"
show less
Port Scan
Anonymous
2026-05-15 01:28:13
UTC ·
(6 months ago)
(caddyscan) Scanner path probe from 34.81.95.134 (TW/Taiwan/134.95.81.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.81.95.134 - - [15/May/2026:01:28:07 +0000 ...
show more
(caddyscan) Scanner path probe from 34.81.95.134 (TW/Taiwan/134.95.81.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.81.95.134 - - [15/May/2026:01:28:07 +0000] "GET /admin/.env HTTP/1.1"
[REDACTED] 200 2627 34.81.95.134 - - [15/May/2026:01:28:07 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 34.81.95.134 - - [15/May/2026:01:28:07 +0000] "GET /app/.env HTTP/1.1"
[REDACTED] 200 2627 34.81.95.134 - - [15/May/2026:01:28:07 +0000] "GET /.env.docker HTTP/1.1"
[REDACTED] 200 2627 34.81.95.134 - - [15/May/2026:01:28:07 +0000] "GET /app/.env.local HTTP/1.1"
show less
Port Scan
🇳🇱
wlt-blocker
2026-05-15 00:59:20
UTC ·
(6 months ago)
Unauthorized access to webpage admin
Web App Attack
🇳🇱
e.fierstra
2026-05-14 20:08:26
UTC ·
(6 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-14 19:19:56
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.81.95.134 (134.95.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 15:19:51.075798 2026] [security2:error] [pid 16939:tid 16 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.81.95.134 (134.95.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 15:19:51.075798 2026] [security2:error] [pid 16939:tid 16956] [client 34.81.95.134:48108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.earthlingtechnology.geoception.com"] [uri "/.env.development.local"] [unique_id "agYgV9vyR9vlqNxnc3pQ-wAAAQ0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-14 16:38:30
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.81.95.134 (134.95.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 12:38:23.992147 2026] [security2:error] [pid 4966:tid 496 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.81.95.134 (134.95.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 12:38:23.992147 2026] [security2:error] [pid 4966:tid 4966] [client 34.81.95.134:35144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "speakertrainerconsultantpatdavis.org"] [uri "/.env.local"] [unique_id "agX6f9ZTOcH-Yco-A6vrLgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-05-14 11:25:36
UTC ·
(6 months ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.81.95.134 (TW/Taiwan/134.95.81.34.bc.googleusercontent.com): 2 in the last 3600 secs (0-193)
Hacking
🇮🇹
clamehost.it
2026-05-14 08:50:36
UTC ·
(6 months ago)
Automatic report - Brute Force attack using this IP address
Brute-Force
🇩🇪
Gwyneth Llewelyn
2026-05-14 08:12:17
UTC ·
(6 months ago)
2026/05/14 09:12:16 [error] 2342191#2342191: *2212156 access forbidden by rule, client: 34.81.95.134, server: video.betatechnologies.info, request: "GET /.env HTTP/1.1", host: "video.betatechnologies.info"
34.81.95.134 - - [14/May/2026:09:12:16 +0100 ...
show more
2026/05/14 09:12:16 [error] 2342191#2342191: *2212156 access forbidden by rule, client: 34.81.95.134, server: video.betatechnologies.info, request: "GET /.env HTTP/1.1", host: "video.betatechnologies.info"
34.81.95.134 - - [14/May/2026:09:12:16 +0100] "GET /.env HTTP/1.1" 403 1178 "-" "Mozilla/5.0 (Linux; Android 8.1.0; Infinix X624B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Mobile Safari/537.36"
2026/05/14 09:12:16 [error] 2342189#2342189: *2212163 access forbidden by rule, client: 34.81.95.134, server: video.betatechnologies.info, request: "GET /admin/.env HTTP/1.1", host: "video.betatechnologies.info"
show less
Brute-Force
Web App Attack