This IP address has been reported a total of
22
times from
16 distinct
sources.
34.97.14.114 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensiti ...
show moreDetected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 19. Unique request paths counted internally: 19. Cloudflare action: block. Cloudflare source: firewallCustom.
show less
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show moreAuto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-16.
show less
[Thu Sep 17 23:58:54.303015 2026] [php:error] [pid 1895754] [client 34.97.14.114:41110] script '/var ...
show more[Thu Sep 17 23:58:54.303015 2026] [php:error] [pid 1895754] [client 34.97.14.114:41110] script '/var/www/html/wme-response-type.brume.org/phpinfo.php' not found or unable to stat
[Thu Sep 17 23:58:54.571400 2026] [php:error] [pid 1895754] [client 34.97.14.114:41110] script '/var/www/html/wme-response-type.brume.org/info.php' not found or unable to stat
[Thu Sep 17 23:58:54.843968 2026] [php:error] [pid 1895754] [client 34.97.14.114:41110] script '/var/www/html/wme-response-type.brume.org/php.php' not found or unable to stat
[Thu Sep 17 23:58:55.145843 2026] [php:error] [pid 1895754] [client 34.97.14.114:41110] script '/var/www/html/wme-response-type.brume.org/i.php' not found or unable to stat
[Thu Sep 17 23:58:55.442693 2026] [php:error] [pid 1895754] [client 34.97.14.114:41110] script '/var/www/html/wme-response-type.brume.org/pi.php' not found or unable to stat
...
show less
CrowdSec: Ip 34.97.14.114 performed 'crowdsecurity/http-sensitive-files' (5 events over 632.531743ms ...
show moreCrowdSec: Ip 34.97.14.114 performed 'crowdsecurity/http-sensitive-files' (5 events over 632.531743ms) at 2026-09-17 10:57:32.066668067 +0000 UTC (scenario: crowdsecurity/http-sensitive-files)
show less
Probed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.e ...
show moreProbed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.env/wp-login/xmlrpc/phpmyadmin/.git).
jail=nginx-canary proto=tcp port=80,443 failures>=2 class=web-app-probe
these paths are not real apps on this host; hit is hostile recon
when=2026-09-16T04:55:15Z sensor=fail2ban role=web-canary
src=34.97.14.114
show less