34.94.139.212 — observed request history

← Back to my full IP blocklist

I blocked 34.94.139.212. Here are the request paths I found in my retained logs.

166 distinct paths · 171 matching log entries

First retained entry: 2026-10-24T03:23:09.720Z. Last retained entry: 2026-10-24T03:23:29.050Z. All timestamps are UTC.

Where it showed up

• doomo / me — 171 log entries

Observed endpoints

Each line shows the path, HTTP method, recorded status codes, and log-entry count. Counts may include duplicate logging and are not necessarily unique requests. “Unknown” means the status was not captured in the normalized entry.

/ | GET,POST | 200,404,499 | 6
/.config/gcloud/application_default_credentials.json | GET | 404 | 1
/.env | GET | 404 | 1
/.env.backup | GET | 404 | 1
/.env.backup2 | GET | 404 | 1
/.env.bak | GET | 404 | 1
/.env.ci | GET | 404 | 1
/.env.dev | GET | 404 | 1
/.env.development | GET | 404 | 1
/.env.dist | GET | 404 | 1
/.env.docker | GET | 404 | 1
/.env.example | GET | 404 | 1
/.env.json | GET | 404 | 1
/.env.live | GET | 404 | 1
/.env.local | GET | 404 | 1
/.env.old | GET | 404 | 1
/.env.preprod | GET | 404 | 1
/.env.prod | GET | 404 | 1
/.env.production | GET | 404 | 1
/.env.remote | GET | 404 | 1
/.env.sample | GET | 404 | 1
/.env.save | GET | 404 | 1
/.env.stage | GET | 404 | 1
/.env.staging | GET | 404 | 1
/.env.swp | GET | 404 | 1
/.env.test | GET | 404 | 1
/.env.uat | GET | 404 | 1
/.env.yml | GET | 404 | 1
/.env1 | GET | 404 | 1
/.env2 | GET | 404 | 1
/.env_copy | GET | 404 | 1
/.env~ | GET | 404 | 1
/.git/config | GET | 404 | 1
/_environment | GET | 404 | 1
/admin-panel/.env | GET | 404 | 1
/admin/.env | GET | 404 | 1
/ansible/.env | GET | 404 | 1
/api/dev/.env | GET | 404 | 1
/api/v1/.env | GET | 404 | 1
/api/v3/.env | GET | 404 | 1
/application/.env | GET | 404 | 1
/apps/.env | GET | 404 | 1
/assets/.env | GET | 404 | 1
/azure/.env | GET | 404 | 1
/backups/.env | GET | 404 | 1
/bulk/.env | GET | 404 | 1
/cakephp/.env | GET | 404 | 1
/ci/.env | GET | 404 | 1
/client/.env | GET | 404 | 1
/cms/.env | GET | 404 | 1
/codeigniter/.env | GET | 404 | 1
/config/.env | GET | 404 | 1
/config/app/.env | GET | 404 | 1
/control-panel/.env | GET | 404 | 1
/core/app/.env | GET | 404 | 1
/core/phpinfo.php | GET | 404 | 1
/cpanel/phpinfo.php | GET | 404 | 1
/credentials.json | GET | 404 | 1
/crm/.env | GET | 404 | 1
/cron/.env | GET | 404 | 1
/dashboard/.env | GET | 404 | 1
/database/.env | GET | 404 | 1
/debug.php | GET | 404 | 1
/deploy/.env | GET | 404 | 1
/dev/.env | GET | 404 | 1
/development/.env | GET | 404 | 1
/docs/phpinfo.php | GET | 404 | 1
/en/.env | GET | 404 | 1
/exapi/.env | GET | 404 | 1
/firebase-adminsdk.json | GET | 404 | 1
/frontend/.env | GET | 404 | 1
/gcp-credentials.json | GET | 404 | 1
/gcp/.env | GET | 404 | 1
/github/.env | GET | 404 | 1
/google-key.json | GET | 404 | 1
/graphql/.env | GET | 404 | 1
/html/.env | GET | 404 | 1
/i.php | GET | 404 | 1
/includes/phpinfo.php | GET | 404 | 1
/info | GET | 404 | 1
/info.php | GET | 404 | 1
/info.php.bak | GET | 404 | 1
/infrastructure/.env | GET | 404 | 1
/jenkins/.env | GET | 404 | 1
/job/.env | GET | 404 | 1
/joomla/.env | GET | 404 | 1
/k8s/.env | GET | 404 | 1
/key.json | GET | 404 | 1
/keyfile.json | GET | 404 | 1
/kubernetes/.env | GET | 404 | 1
/lab/.env | GET | 404 | 1
/logs/.env | GET | 404 | 1
/magento/.env | GET | 404 | 1
/mail/.env | GET | 404 | 1
/mail/phpinfo.php | GET | 404 | 1
/mailer/.env | GET | 404 | 1
/mailjet/.env | GET | 404 | 1
/microservice/.env | GET | 404 | 1
/mongodb/.env | GET | 404 | 1
/nest/.env | GET | 404 | 1
/newsletter/.env | GET | 404 | 1
/node/.env | GET | 404 | 1
/notifications/.env | GET | 404 | 1
/nuxt/.env | GET | 404 | 1
/old/phpinfo.php | GET | 404 | 1
/old_phpinfo.php | GET | 404 | 1
/p.php | GET | 404 | 1
/phpinfo | GET | 404 | 1
/phpinfo.php.bak | GET | 404 | 1
/phpversion.php | GET | 404 | 1
/pinfo.php | GET | 404 | 1
/postgres/.env | GET | 404 | 1
/postmark/.env | GET | 404 | 1
/prestashop/.env | GET | 404 | 1
/preview/.env | GET | 404 | 1
/preview/phpinfo.php | GET | 404 | 1
/prod/.env | GET | 404 | 1
/public/phpinfo.php | GET | 404 | 1
/public_html/.env | GET | 404 | 1
/public_html/phpinfo.php | GET | 404 | 1
/queue/.env | GET | 404 | 1
/rabbitmq/.env | GET | 404 | 1
/redis/.env | GET | 404 | 1
/release/.env | GET | 404 | 1
/resources/.env | GET | 404 | 1
/rest/.env | GET | 404 | 1
/sa.json | GET | 404 | 1
/saas/.env | GET | 404 | 1
/sbin/.env | GET | 404 | 1
/scripts/.env | GET | 404 | 1
/sender/.env | GET | 404 | 1
/server-info.php | GET | 404 | 1
/server-status.php | GET | 404 | 1
/ses/.env | GET | 404 | 1
/shop/.env | GET | 404 | 1
/site/phpinfo.php | GET | 404 | 1
/sitemaps/.env | GET | 404 | 1
/smtp/.env | GET | 404 | 1
/smtp/phpinfo.php | GET | 404 | 1
/sparkpost/.env | GET | 404 | 1
/staging/.env | GET | 404 | 1
/staging/phpinfo.php | GET | 404 | 1
/storage/.env | GET | 404 | 1
/svelte/.env | GET | 404 | 1
/symfony/.env | GET | 404 | 1
/test/.env | GET | 404 | 1
/test/phpinfo.php | GET | 404 | 1
/tmp/.env | GET | 404 | 1
/tools/.env | GET | 404 | 1
/transactional/.env | GET | 404 | 1
/travis/.env | GET | 404 | 1
/uat/.env | GET | 404 | 1
/uat/phpinfo.php | GET | 404 | 1
/uploads/.env | GET | 404 | 1
/v1/.env | GET | 404 | 1
/v3/.env | GET | 404 | 1
/var/www/html/.env | GET | 404 | 1
/vendor/.env | GET | 404 | 1
/vite/.env | GET | 404 | 1
/vue/.env | GET | 404 | 1
/web/.env | GET | 404 | 1
/webmail/phpinfo.php | GET | 404 | 1
/wordpress/.env | GET | 404 | 1
/worker/.env | GET | 404 | 1
/www/phpinfo.php | GET | 404 | 1
/yii/.env | GET | 404 | 1

About this record

I pulled this list from retained Vitals logs on October 25, 2026 (UTC), with coverage back to October 22. This is the history I can still verify, not a complete lifetime history. Query strings and fragments are omitted. A response code alone does not prove that credentials were exposed.

Source attribution recorded by Vitals: reported_unverified. Reported or forwarded addresses are not independently verified identities. An IP can be shared or reassigned.

Back to my full IP blocklist. I’ll keep this updated as I find more.