This IP address has been reported a total of
12
times from
11 distinct
sources.
34.50.85.99 was first reported on
September 20th 2026 , and the most recent report was
14 hours ago Belgium
with 2
reports;
Czechia
with 2
reports;
Netherlands
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
9
times;
Brute-Force
5
times;
Bad Web Bot
4
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
2026-09-22 16:31:14
(14 hours ago)
34.50.85.99 - - [22/Sep/2026:18:31:09 +0200] "GET /.git/config HTTP/1.1" 404 184 "-" "Mozilla/5.0 (W ...
show more
34.50.85.99 - - [22/Sep/2026:18:31:09 +0200] "GET /.git/config HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.85.99 - - [22/Sep/2026:18:31:09 +0200] "GET /.env HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.85.99 - - [22/Sep/2026:18:31:09 +0200] "GET /.env.local HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.85.99 - - [22/Sep/2026:18:31:10 +0200] "GET /.env.production HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.85.99 - - [22/Sep/2026:18:31:10 +0200] "GET /.env.staging HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.85
...
show less
Bad Web Bot
Web App Attack
2026-09-22 14:00:02
(17 hours ago)
IP matched detection query many 3xx errors.
Brute-Force
🇧🇪
cmbplf
2026-09-22 01:22:09
(1 day ago)
14.291 requests in 1 hour (1mo2w3d)
Brute-Force
Bad Web Bot
🇧🇪
madeit
2026-09-22 00:43:36
(1 day ago)
Web App Attack
2026-09-21 23:50:37
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
dot.mg
2026-09-21 22:24:02
(1 day ago)
Bruteforce
Bad Web Bot
🇳🇱
WeCloudit-Anti-Abuse
2026-09-21 21:30:34
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-21 18:09:36
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.50.85.99 (99.85.50.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.85.99 (99.85.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 14:09:30.626162 2026] [security2:error] [pid 5263:tid 5406] [client 34.50.85.99:40556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.plasticsurgeonbrazil.aafm.us"] [uri "/.git/config"] [unique_id "arFy2inkqmeNQsm3yytTuAAAAc0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-21 16:55:03
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇳🇱
debestelapp
2026-09-20 18:35:11
(2 days ago)
Web App Attack
🇫🇷
Octopuce
2026-09-20 17:41:38
(2 days ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
🇩🇪
marten_o
2026-09-20 15:54:48
(2 days ago)
34.50.85.99 - - [20/Sep/2026:17:54:47 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 403 239 "-" "Mozilla/5. ...
show more
34.50.85.99 - - [20/Sep/2026:17:54:47 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 403 239 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 577 461
...
show less
Web App Attack
Showing 1 to
12
of 12 reports
