JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.12.89.133

34.12.89.133 was found in our database!

This IP was reported 23 times. Confidence of Abuse is 91%: ?

91%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	133.89.12.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.12.89.133

Whois 34.12.89.133

IP Abuse Reports for 34.12.89.133:

This IP address has been reported a total of 23 times from 16 distinct sources. 34.12.89.133 was first reported on September 16th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇭🇺 bcsaba	2026-09-16 20:42:39 (3 hours ago)	Probing for .git: 34.12.89.133 - - [16/Sep/2026:22:42:38 +0200] "GET /.git/config HTTP/1.1" 403 146 ... show more Probing for .git: 34.12.89.133 - - [16/Sep/2026:22:42:38 +0200] "GET /.git/config HTTP/1.1" 403 146 "-" "-" show less	Web App Attack
🇫🇷 dynamix	2026-09-16 20:40:49 (3 hours ago)	Multiple WAF Violations	Web App Attack
🇫🇮 paissangroup	2026-09-16 20:38:00 (3 hours ago)	Multiple WAF Violations	Web App Attack
🇦🇺 Bay13	2026-09-16 20:25:30 (3 hours ago)	CrowdSec:custom/http-sensitive-files	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 20:05:42 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.12.89.133 (133.89.12.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.12.89.133 (133.89.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 16:05:37.134139 2026] [security2:error] [pid 329282:tid 329282] [client 34.12.89.133:49260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.volkerjahn.name"] [uri "/.git/config"] [unique_id "aqr2kRU5rfvnqziibmRpvAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-09-16 19:47:52 (4 hours ago)	Try to access /.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 19:35:16 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.12.89.133 (133.89.12.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.12.89.133 (133.89.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 15:35:11.630984 2026] [security2:error] [pid 11065:tid 11065] [client 34.12.89.133:52600] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vmbinc.com"] [uri "/.git/config"] [unique_id "aqrvbzxuSU0-mh8_7KqKfwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 BlueWire Hosting	2026-09-16 19:28:53 (4 hours ago)	High-confidence malicious configuration/VCS probe	Web App Attack
Anonymous	2026-09-16 19:16:10 (5 hours ago)	[osotir.org] httpd-config-scan: sites=www.vivliopoleio-lyxnos.gr; logs=/var/log/httpd/domains/vivlio ... show more [osotir.org] httpd-config-scan: sites=www.vivliopoleio-lyxnos.gr; logs=/var/log/httpd/domains/vivliopoleio-lyxnos.gr.log; samples=/.git/config show less	Hacking Web App Attack
🇬🇧 consul.to	2026-09-16 19:13:35 (5 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 SCHAPPY	2026-09-16 19:04:18 (5 hours ago)	Probing for non-installed web apps or current vulnerabilities.	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 18:49:20 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.12.89.133 (133.89.12.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.12.89.133 (133.89.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 14:49:13.154068 2026] [security2:error] [pid 4735:tid 4735] [client 34.12.89.133:59222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vitality-web.com"] [uri "/.git/config"] [unique_id "aqrkqTzujkl1xBgTJJn43wAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-16 18:32:07 (5 hours ago)	[ti-27al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-27al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.12.89.133 - - [16/Sep/2026:20:31:51 +0200] "GET /.git/config HTTP/1.1" 404 167495 "-" "-" ... show less	Bad Web Bot Web App Attack
🇳🇴 jad-abuse	2026-09-16 18:31:03 (5 hours ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 2 hits. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 18:24:14 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.12.89.133 (133.89.12.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.12.89.133 (133.89.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 14:24:06.971913 2026] [security2:error] [pid 30477:tid 30477] [client 34.12.89.133:49824] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.visitbyblos.com.littlebiglebanon.com"] [uri "/.git/config"] [unique_id "aqrexgnZpugyeVTKN-fJHAAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.21

🇷🇺 212.19.17.100

🇭🇰 223.197.146.174

🇧🇩 203.202.242.45

🇧🇬 109.160.32.42

🇩🇪 104.207.56.161

🇨🇱 91.229.228.16

🇺🇸 87.232.154.75

🇨🇦 85.217.149.37

🇺🇸 64.62.197.150

🇺🇸 43.130.39.153

🇺🇸 162.216.150.58

🇨🇳 124.220.59.171

🇦🇺 106.70.0.181

🇫🇷 91.231.89.39

🇫🇷 91.231.89.31

🇮🇱 79.177.139.138

🇧🇬 79.124.56.142

🇱🇹 77.90.185.17

🇺🇸 40.119.27.158