JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.105.58.9

34.105.58.9 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	9.58.105.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.105.58.9

Whois 34.105.58.9

IP Abuse Reports for 34.105.58.9:

This IP address has been reported a total of 32 times from 26 distinct sources. 34.105.58.9 was first reported on July 8th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-07-21 22:00:58 (2 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-20. show less	Web App Attack SSH Hacking
🇧🇬 fennaronaldo	2026-07-21 14:13:31 (9 hours ago)	WAF block action triggered by rule set "Version Control - Information Disclosure" (1 occurrences obs ... show more WAF block action triggered by rule set "Version Control - Information Disclosure" (1 occurrences observed). show less	Web App Attack
🇿🇦 conure	2026-07-21 12:11:23 (11 hours ago)	csagent: score 19.8: secrets grab x2, 404 noise floor x2; 2 domain(s) in 11s	Web App Attack
Anonymous	2026-07-21 03:50:19 (20 hours ago)	Web application attack detected.	Web App Attack
Anonymous	2026-07-20 21:32:51 (1 day ago)	"GET /.git/config HTTP/1.1"	Hacking Web App Attack
🇮🇹 CoreTech srl	2026-07-20 20:04:09 (1 day ago)	cloudlinux2 fail2ban: 2026-07-20 21:58:48,036 fail2ban.filter [1927]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-07-20 21:58:48,036 fail2ban.filter [1927]: INFO [plesk-wordpress] Found 136.144.33.34 - 2026-07-20 21:58:47cloudlinux2 fail2ban: 2026-07-20 21:59:49,784 fail2ban.filter [1927]: INFO [plesk-wordpress] Found 136.144.33.34 - 2026-07-20 21:59:49cloudlinux2 fail2ban: 2026-07-20 22:00:27,105 fail2ban.filter [1927]: INFO [plesk-wordpress] Found 216.24.212.25 - 2026-07-20 22:00:24cloudlinux2 fail2ban: 2026-07-20 22:00:27,091 fail2ban.filter [1927]: INFO [plesk-wordpress] Found 216.24.212.76 - 2026-07-20 22:00:24cloudlinux2 fail2ban: 2026-07-20 22:00:52,552 fail2ban.actions [1927]: NOTICE [plesk-wordpress] Ban 136.144.33.34cloudlinux2 fail2ban: 2026-07-20 22:00:52,559 fail2ban.filter [1927]: INFO [recidive] Found 136.144.33.34 - 2026-07-20 22:00:52cloudlinux2 fail2ban: 2026-07-20 22:00:52,161 fail2ban.filter [1927]: INFO [plesk-wordpress] Found 136.144.33.34 - 2026-07-20 22:00:51cloudlinux2 fail2ban: 2026-07-20 22:01:3 show less	FTP Brute-Force Web App Attack
🇬🇧 consul.to	2026-07-20 20:03:59 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 Rip	2026-07-20 20:03:35 (1 day ago)	Restricted File Access Attempts	Port Scan Web App Attack
🇺🇸 etu brutus	2026-07-20 19:59:33 (1 day ago)	34.105.58.9 has been banned for [WebApp Attack] ...	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 19:53:59 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.105.58.9 (9.58.105.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.105.58.9 (9.58.105.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 15:53:55.638184 2026] [security2:error] [pid 701:tid 701] [client 34.105.58.9:49014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "salightopera.org.holdingfamily.com"] [uri "/.git/config"] [unique_id "al5807ZmmrVcyIPEhHWjmgAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-07-20 19:51:53 (1 day ago)	[MonJul2021:51:48.2932162026][security2:error][pid2910691:tid2910970][client34.105.58.9:0]ModSecurit ... show more [MonJul2021:51:48.2932162026][security2:error][pid2910691:tid2910970][client34.105.58.9:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"rssolution.rs-solution.ch\"][uri\"/.git/config\"][unique_id\"al58VEU2iJ_-N6iPEx1o0gAAARg\"] show less	Hacking Web App Attack
🇳🇱 ipoac.nl	2026-07-20 19:46:02 (1 day ago)	-:443 34.105.58.9 - - [20/Jul/2026:21:46:01 +0200] - "GET /.git/config HTTP/1.1" 404 7452 "-" "Mozil ... show more -:443 34.105.58.9 - - [20/Jul/2026:21:46:01 +0200] - "GET /.git/config HTTP/1.1" 404 7452 "-" "Mozilla/5.0 (X11; Linux x86_64)" show less	Bad Web Bot
🇮🇹 zenmorro	2026-07-20 19:39:44 (1 day ago)	Honeypot hit (proxmox:8006) — scanner-path: /.git/config. Automated report from honeypot infrastruct ... show more Honeypot hit (proxmox:8006) — scanner-path: /.git/config. Automated report from honeypot infrastructure show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 19:35:56 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.105.58.9 (9.58.105.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.105.58.9 (9.58.105.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 15:35:52.130583 2026] [security2:error] [pid 25819:tid 25819] [client 34.105.58.9:52466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hancockcountyfarmersmarket.com"] [uri "/.git/config"] [unique_id "al54mDwuH1PR6FZ3ZJJdYgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇹 René Hickersberger	2026-07-20 19:31:43 (1 day ago)	malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (X11; Linux x86_64)"	Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 203.151.27.181

🇹🇼 198.235.24.11

🇮🇩 182.16.176.106

🇧🇷 177.128.26.142

🇺🇸 162.252.55.165

🇺🇸 156.232.13.218

🇮🇳 148.113.37.53

🇮🇪 52.178.210.92

🇳🇱 45.198.224.244

🇺🇸 45.79.192.252

🇩🇪 45.3.45.12

🇦🇷 38.210.35.21

🇺🇸 199.195.254.215

🇦🇷 186.131.226.43

🇺🇸 185.89.109.85

🇬🇧 178.79.184.176

🇺🇸 162.216.18.177

🇭🇰 150.5.133.140

🇺🇸 135.237.126.203

🇨🇦 135.19.0.20