This IP address has been reported a total of
66
times from
51 distinct
sources.
34.85.128.12 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 16
reports;
Netherlands
with 15
reports;
Spain
with 6
reports.
The most common categories in these recent reports were:
Web App Attack
40
times;
Bad Web Bot
15
times;
Hacking
13
times;
Brute-Force
10
times;
SQL Injection
7
times;
Other
10
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated report from web, SSH and FTP server logs: 2128 requests probing for exposed secrets (.env, ...
show moreAutomated report from web, SSH and FTP server logs: 2128 requests probing for exposed secrets (.env, .git, config files). Reported by our automated log scan at 2026-10-15 07:05 UTC; counts cover the current log rotation window.
show less
Malformed or malicious web request
34.85.128.12 - - [14/Oct/2026:20:17:37 +0200] "POST /lib/terminal ...
show moreMalformed or malicious web request
34.85.128.12 - - [14/Oct/2026:20:17:37 +0200] "POST /lib/terminal-xhr.php HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
show less
Hacking
Web App Attack
Anonymous
Web application attack: automated exploitation attempts against known CMS and framework vulnerabilit ...
show moreWeb application attack: automated exploitation attempts against known CMS and framework vulnerabilities. Detected and blocked automatically.
show less
(mod_security) mod_security triggered on hostname [redacted] 34.85.128.12 (US/United States/12.128.8 ...
show more(mod_security) mod_security triggered on hostname [redacted] 34.85.128.12 (US/United States/12.128.85.34.bc.googleusercontent.com)
show less
(mod_security) mod_security triggered on hostname [redacted] 34.85.128.12 (US/United States/12.128.8 ...
show more(mod_security) mod_security triggered on hostname [redacted] 34.85.128.12 (US/United States/12.128.85.34.bc.googleusercontent.com)
show less
SQL Injection
Anonymous
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Clou ...
show moreBlocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Cloud secrets probing, Directory traversal
show less
(mod_security) mod_security (id:210492) triggered by 34.85.128.12 (US/United States/12.128.85.34.bc. ...
show more(mod_security) mod_security (id:210492) triggered by 34.85.128.12 (US/United States/12.128.85.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
(mod_security) mod_security (id:949110) triggered by 34.85.128.12 (US/United States/12.128.85.34.bc. ...
show more(mod_security) mod_security (id:949110) triggered by 34.85.128.12 (US/United States/12.128.85.34.bc.googleusercontent.com): N in the last X secs
show less
