Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"level":"info","ts":1793983449.0191107,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.85.113.50","remote_port":"36570","client_ip":"34.85.113.50","proto":"HTTP/2.0","method":"GET","host":"status.dosupply.com","uri ...
show more{"level":"info","ts":1793983449.0191107,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.85.113.50","remote_port":"36570","client_ip":"34.85.113.50","proto":"HTTP/2.0","method":"GET","host":"status.dosupply.com","uri":"/railway.toml","headers":{"X-Remote-Ip":["172.24.124.114"],"True-Client-Ip":["172.24.124.114"],"Cluster-Client-Ip":["172.24.124.114"],"X-Remote-Addr":["172.24.124.114"],"X-Real-Ip":["172.24.124.114"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"],"X-Proxyuser-Ip":["172.24.124.114"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept":["*/*"],"X-Custom-Ip-Authorization":["172.24.124.114"],"X-Nextjs-Data":["1"],"X-Client-Ip":["172.24.124.114"],"X-Forwarded-For":["172.24.124.114"],"X-Originating-Ip":["172.24.
...
show less
[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 34.85.113.50 generated 9 local hits spanning reconnaissance requests like /robots.txt and /sitemap.xml, custom debug paths, GraphQL endpoints, and a critical attempt at /api/fs/read whic ...
show more[AI Threat Score: 100/100 via Gemini] [AbuseIPDB Score: 100] IP 34.85.113.50 generated 9 local hits spanning reconnaissance requests like /robots.txt and /sitemap.xml, custom debug paths, GraphQL endpoints, and a critical attempt at /api/fs/read which triggered the proc-environ rule. This traffic is corroborated by an AbuseIPDB confidence score of 100 percent with 26 external reports, as well as CrowdSec classifying the IP as malicious with behaviors including http:scan, http:crawl, and http:exploit. Likely motive: Reconnaissance and exploitation of sensitive application endpoints.
show less
Web App Attack
Bad Web Bot
Hacking
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
