This IP address has been reported a total of
115
times from
86 distinct
sources.
34.85.117.47 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 46
reports;
Netherlands
with 17
reports;
United States of America
with 15
reports.
The most common categories in these recent reports were:
Web App Attack
74
times;
Bad Web Bot
35
times;
Hacking
30
times;
Brute-Force
26
times;
Port Scan
9
times;
Other
25
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Web application attack: grafana cve 2021 43798; Web application attack: http sensitive files; Web ap ...
show moreWeb application attack: grafana cve 2021 43798; Web application attack: http sensitive files; Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; Probing for exposed secret / credential files
show less
Hacking
Web App Attack
Anonymous
Attempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing ...
show moreAttempted access to sensitive endpoint (/.git/HEAD) detected. Automated scan or unauthorized probing.
show less
{"level":"info","ts":1792533803.1518984,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1792533803.1518984,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.85.117.47","remote_port":"52800","client_ip":"34.85.117.47","proto":"HTTP/2.0","method":"GET","host":"status.dryckeskonsult.se","uri":"/.git-credentials","headers":{"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"],"Accept":["*/*"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.dryckeskonsult.se","ech":false}},"bytes_read":0,"user_id":"","duration":0.000184953,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1792533803.153790
...
show less
Automated requests against a hosted website: 270 requests between 16:00 and 16:59 UTC; 130 probes fo ...
show moreAutomated requests against a hosted website: 270 requests between 16:00 and 16:59 UTC; 130 probes for exposed secrets/config files (/_image, /userfiles, /userfiles/x). Reported automatically.
show less
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (Linux; Andr ...
show moreNot following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36
show less
Mass vulnerability scanning (LFI / path traversal probes with query parameters such as lokasie=/proc ...
show moreMass vulnerability scanning (LFI / path traversal probes with query parameters such as lokasie=/proc/...) against a production server. Observed on 1 day(s) between 2026-10-20 and 2026-10-20 (UTC). Sample request: GET /.vite/manifest.json HTTP/2.0
show less
