This IP address has been reported a total of
40
times from
29 distinct
sources.
34.35.85.221 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Netherlands
with 11
reports;
Germany
with 7
reports;
United States of America
with 7
reports.
The most common categories in these recent reports were:
Web App Attack
34
times;
Brute-Force
19
times;
Bad Web Bot
17
times;
Hacking
7
times;
DDoS Attack
2
times;
Other
4
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026/10/21 16:09:30 [error] 2414#2414: *829082 access forbidden by rule, client: 34.35.85.221, serve ...
show more2026/10/21 16:09:30 [error] 2414#2414: *829082 access forbidden by rule, client: 34.35.85.221, server: centroestudostibetanos.org, request: "GET /.env HTTP/1.1", host: "programanalanda.centroestudostibetanos.org"
34.35.85.221 - - [21/Oct/2026:16:09:30 +0100] "GET /.env HTTP/1.1" 403 1057 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
2026/10/21 16:09:43 [error] 2414#2414: *829082 access forbidden by rule, client: 34.35.85.221, server: centroestudostibetanos.org, request: "GET /app/.env HTTP/1.1", host: "programanalanda.centroestudostibetanos.org"
show less
Brute-Force
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /circleci/.env HTTP/1.1, GET /ansible/.env HTTP/1.1, GET ...
show moreBot / scanning and/or hacking attempts: GET /circleci/.env HTTP/1.1, GET /ansible/.env HTTP/1.1, GET /actions/.env HTTP/1.1, GET /cloud/.env HTTP/1.1, GET /jenkins/.env HTTP/1.1, GET /gitlab/.env HTTP/1.1, GET /cd/.env HTTP/1.1, GET /travis/.env HTTP/1.1, GET /docker/.env HTTP/1.1, GET /gcp/.env HTTP/1.1, GET /mysql/.env HTTP/1.1, GET /kubernetes/.env HTTP/1.1, GET /buildkite/.env HTTP/1.1, GET /postgres/.env HTTP/1.1, GET /github/.env HTTP/1.1, GET /.env.backup2 HTTP/1.1
show less
(mod_security) mod_security triggered on hostname [redacted] 34.35.85.221 (221.85.35.34.bc.googleuse ...
show more(mod_security) mod_security triggered on hostname [redacted] 34.35.85.221 (221.85.35.34.bc.googleusercontent.com)
show less
GENERAL: parametres: [url:git=] UA:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like G ...
show moreGENERAL: parametres: [url:git=] UA:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 URL:/.git/config
show less
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.35.85.221 - - [21/Oct/2026:09:12:15 +0200] "GET /.git/config HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
