JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.130.49.149

34.130.49.149 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 58%: ?

58%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	149.49.130.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.130.49.149

Whois 34.130.49.149

IP Abuse Reports for 34.130.49.149:

This IP address has been reported a total of 15 times from 10 distinct sources. 34.130.49.149 was first reported on September 15th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-16 22:00:33 (6 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-15. show less	Web App Attack SSH Hacking
🇳🇱 middelkoopcc	2026-09-16 02:17:06 (1 day ago)	2026-09-16 04:13:20 GET /.git/config [404] && 2026-09-16 04:13:22 GET /.env [404] && 2026-09-16 04:1 ... show more 2026-09-16 04:13:20 GET /.git/config [404] && 2026-09-16 04:13:22 GET /.env [404] && 2026-09-16 04:13:28 GET /.env.bak [404] && 140 more within 20 minutes show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 02:00:07 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.130.49.149 (149.49.130.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.130.49.149 (149.49.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 21:59:58.665535 2026] [security2:error] [pid 26619:tid 26619] [client 34.130.49.149:37316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jpastorphotographics.com"] [uri "/.git/config"] [unique_id "aqn4HtetMuXG7lncbro-4gAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-15 18:40:02 (1 day ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 13:24:03 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.130.49.149 (149.49.130.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.130.49.149 (149.49.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 09:23:59.311633 2026] [security2:error] [pid 21743:tid 21743] [client 34.130.49.149:42104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hannatiferet.com.joyfulservice.com"] [uri "/.git/config"] [unique_id "aqlG79KFAwg5EW7SVZEC7wAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-15 11:50:02 (1 day ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇬🇧 poundawebsiteltd	2026-09-15 10:47:30 (1 day ago)	Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.130.49. ... show more Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.130.49.149 (CA/Canada/[REDACTED_DOMAIN]): 20 in the last 3600 secs \| UA: (apache_probe) Failed Access (403/404) 34.130.49.149 (CA/Canada/149.49.130.34.bc.googleusercontent.com): 20 in the last 3600 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 09:44:13 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.130.49.149 (149.49.130.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.130.49.149 (149.49.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 05:44:09.540424 2026] [security2:error] [pid 10891:tid 10901] [client 34.130.49.149:56594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "handyman8.org.plumberw9.com"] [uri "/.git/config"] [unique_id "aqkTae2ZnbznyXAGpM6i8wAAAMg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-15 09:41:41 (1 day ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-15 08:57:02 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-09-15 08:56:37 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.130.49.149 (149.49.130.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.130.49.149 (149.49.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 04:56:30.450812 2026] [security2:error] [pid 7059:tid 7071] [client 34.130.49.149:32828] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "handsonresearch.com"] [uri "/.git/config"] [unique_id "aqkIPjIINOFhGZbjJo8JAgAAAQY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-15 07:43:08 (1 day ago)	[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.130.49.149 - - [15/Sep/2026:09:43:07 +0200] "GET /.git/config HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-09-15 07:29:33 (1 day ago)	Multiple WAF Violations	Web App Attack
🇫🇷 conseilgouz	2026-09-15 07:22:32 (1 day ago)	hae-6 : Trying access system files=>/phpinfo.php(phpinfo.php)	Hacking
🇺🇸 TPI-Abuse	2026-09-15 06:51:45 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.130.49.149 (149.49.130.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.130.49.149 (149.49.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 02:51:40.485195 2026] [security2:error] [pid 23362:tid 23362] [client 34.130.49.149:49080] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "handcraftedparquet.com"] [uri "/.git/config"] [unique_id "aqjq_G7j3j420EIvxavAGAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 194.180.48.39

🇺🇸 147.182.201.29

🇺🇸 92.114.81.86

🇺🇸 69.115.78.130

🇭🇰 46.247.61.214

🇧🇪 34.22.158.50

🇸🇬 8.219.3.115

🇭🇰 223.197.146.163

🇸🇬 220.255.242.184

🇺🇸 216.180.246.2

🇦🇷 200.59.88.224

🇰🇿 188.0.144.22

🇺🇸 185.226.196.7

🇮🇷 185.145.187.163

🇨🇳 118.196.23.199

🇮🇳 117.253.142.149

🇵🇱 109.205.211.110

🇫🇷 90.28.193.230

🇫🇷 85.217.140.37

🇲🇦 81.192.46.32