JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.141.94.192

Activity Trending Down

Abuse Confidence Score

67% Elevated

19 reports

13 reporters · latest 1 week ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 192.94.141.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

19 from 13 distinct reporters

First reported

November 2nd 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 4 🇺🇸 United States of America 4 🇨🇿 Czechia 3

Most common categories Web App Attack 17 Brute-Force 11 Bad Web Bot 9 Hacking 5 Exploited Host 1

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-11-04 14:36:13 UTC · (1 week ago)	ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-11-04 UTC.	Exploited Host
🇳🇱 homeshowdomain.nl	2026-11-03 23:02:05 UTC · (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-02.	Web App Attack SSH Hacking
🇳🇱 e.fierstra	2026-11-03 21:51:49 UTC · (1 week ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-03 13:34:13 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.141.94.192 (192.94.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 08:34:07.911049 2026] [security2:error] [pid 26628:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.141.94.192 (192.94.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 08:34:07.911049 2026] [security2:error] [pid 26628:tid 26628] [client 34.141.94.192:37792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dscampbell.com"] [uri "/.git/config"] [unique_id "auniz7IlrSmCBPFinTqa1gAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-11-03 12:12:27 UTC · (1 week ago)	IP matched detection query 50 and more bad rqs apache.	Hacking Bad Web Bot Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-11-03 03:04:37 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.141.94.192 (192.94.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:04:30.856938 2026] [security2:error] [pid 29591:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.141.94.192 (192.94.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 22:04:30.856938 2026] [security2:error] [pid 29591:tid 29591] [client 34.141.94.192:43880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "engravedweddingflutes.com"] [uri "/.git/config"] [unique_id "aulPPvohT0bSvS5o8Pic3AAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-11-03 00:50:02 UTC · (1 week ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇩🇪 tall1oN	2026-11-03 00:09:42 UTC · (1 week ago)	34.141.94.192 - - [03/Nov/2026:00:54:01 +0100] "GET /.env.test HTTP/2.0" 200 8268153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "diamondliferp.cc" 34.141.94.192 - - [03/ ... show more 34.141.94.192 - - [03/Nov/2026:00:54:01 +0100] "GET /.env.test HTTP/2.0" 200 8268153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "diamondliferp.cc" 34.141.94.192 - - [03/Nov/2026:01:09:41 +0100] "GET /.env.remote HTTP/2.0" 200 953755 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "diamondliferp.cc" ... show less	Web App Attack Port Scan Hacking
🇺🇸 TPI-Abuse	2026-11-02 18:32:45 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.141.94.192 (192.94.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 13:32:42.628536 2026] [security2:error] [pid 13106:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.141.94.192 (192.94.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 13:32:42.628536 2026] [security2:error] [pid 13106:tid 13106] [client 34.141.94.192:39884] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "englishmagic.us"] [uri "/.git/config"] [unique_id "aujXSn-cEJb3DU8ce5tnJgAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-02 11:54:29 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.141.94.192 (192.94.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:54:23.683521 2026] [security2:error] [pid 9167:tid 9 ... show more (mod_security) mod_security (id:210492) triggered by 34.141.94.192 (192.94.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:54:23.683521 2026] [security2:error] [pid 9167:tid 9167] [client 34.141.94.192:52568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emmavance.com"] [uri "/.git/config"] [unique_id "auh57xWESOggcmRAoX2nZAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-11-02 10:56:39 UTC · (1 week ago)	Scanning for secret files (.env, .git, credentials, config backups)	Bad Web Bot Web App Attack
Anonymous	2026-11-02 09:38:34 UTC · (1 week ago)	Malicious Probing	Bad Web Bot
🇸🇪 vaia.cloud	2026-11-02 09:35:04 UTC · (1 week ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-11-02 09:20:08 UTC · (1 week ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-11-02 08:55:08 UTC · (1 week ago)	34.141.94.192 - - [02/Nov/2026:09:55:05 +0100] "GET /transactional/.env HTTP/1.1" 404 511 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.141.94.192 - - [02/Nov/2026:09:55:05 +0100] "GET ... show more 34.141.94.192 - - [02/Nov/2026:09:55:05 +0100] "GET /transactional/.env HTTP/1.1" 404 511 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.141.94.192 - - [02/Nov/2026:09:55:05 +0100] "GET /bulk/.env HTTP/1.1" 404 511 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.141.94.192 - - [02/Nov/2026:09:55:05 +0100] "GET /phpinfo.php HTTP/1.1" 404 633 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.141.94.192 - - [02/Nov/2026:09:55:05 +0100] "GET /info.php HTTP/1.1" 404 633 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.141.94.192 - - [02/Nov/2026:09:55:05 +0100] "GET /php.php HTTP/1.1" 404 633 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.141.94.192 - - [02/Nov/2026:09:55:05 +0100] show less	Web App Attack Hacking

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 2602:80d:1007::30

🇹🇷 185.231.227.167

🇸🇬 143.198.81.84

🇺🇸 104.165.197.33

🇺🇸 103.196.9.255

🇮🇩 103.50.131.20

🇳🇱 77.239.124.44

🇺🇸 20.118.37.206

🇨🇳 223.167.169.109

🇳🇱 192.42.116.106

🇧🇷 179.184.85.167

🇧🇷 170.78.248.166

🇺🇦 62.122.201.234

🇺🇸 31.105.123.70

🇺🇸 216.180.246.32

🇳🇱 200.138.46.71

🇺🇦 176.122.109.237

🇲🇳 103.11.193.33

🇬🇧 92.41.49.208

🇳🇴 87.120.104.79