JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.150.5.115

34.150.5.115 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	115.5.150.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.150.5.115

Whois 34.150.5.115

IP Abuse Reports for 34.150.5.115:

This IP address has been reported a total of 27 times from 24 distinct sources. 34.150.5.115 was first reported on August 31st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-09-02 05:13:22 (1 day ago)	13 attacks on PHP URLs, env grabbing URLs: GET /wp-config.php~ HTTP/1.1 GET /.env.production HTTP/1. ... show more 13 attacks on PHP URLs, env grabbing URLs: GET /wp-config.php~ HTTP/1.1 GET /.env.production HTTP/1.1 show less	Web App Attack Hacking
🇫🇷 SpaceHost-Server	2026-09-01 22:21:31 (1 day ago)		Brute-Force Web App Attack
Anonymous	2026-09-01 10:20:01 (2 days ago)	suspicious request in access.log	Web App Attack
🇩🇪 Jarda_H	2026-09-01 09:32:50 (2 days ago)	http-sensitive-files	Web App Attack
🇸🇪 vaia.cloud	2026-09-01 07:50:03 (2 days ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-09-01 07:26:16 (2 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇨🇭 4server	2026-09-01 07:23:30 (2 days ago)	[TueSep0109:23:28.5293902026][security2:error][pid2289941:tid2290415][client34.150.5.115:0]ModSecuri ... show more [TueSep0109:23:28.5293902026][security2:error][pid2289941:tid2290415][client34.150.5.115:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\"wp-config\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"minondou-togo.ch\"][uri\"/wp-config.php.swp\"][unique_id\"apZ9cNKMnBMDDxWwpkCf9AAAAcc\"] show less	Hacking Web App Attack
Anonymous	2026-09-01 07:16:40 (2 days ago)	(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.150.5.115 (HK/Hong Kong/115.5.150.34.bc.g ... show more (config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.150.5.115 (HK/Hong Kong/115.5.150.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.150.5.115 - - [01/Sep/2026:09:16:37 +0200] "GET /.env HTTP/1.1" 406 4829 "-" "crusader-worker/1.0" 34.150.5.115 - - [01/Sep/2026:09:16:37 +0200] "GET /.env.old HTTP/1.1" 406 4830 "-" "crusader-worker/1.0" 34.150.5.115 - - [01/Sep/2026:09:16:37 +0200] "GET /.env.save HTTP/1.1" 406 4830 "-" "crusader-worker/1.0" show less	Port Scan
Anonymous	2026-09-01 06:34:05 (2 days ago)	Bot / scanning and/or hacking attempts: GET /crusader-404-probe HTTP/1.1, GET /wp-config.php~ HTTP/1 ... show more Bot / scanning and/or hacking attempts: GET /crusader-404-probe HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /wp-config.php.swp HTTP/1.1, GET /.env.production HTTP/1.1, GET /env HTTP/1.1, GET /wp-config.php.bak HTTP/1.1, GET /actuator/configprops HTTP/1.1, GET /.env HTTP/1.1, GET /.env.local HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 Bedios GmbH	2026-09-01 06:22:16 (2 days ago)	Login credentials theft attempt	Hacking
🇩🇪 MusicLibrary	2026-09-01 06:16:09 (2 days ago)	Probing foreign-stack admin panels / known exploit paths (Joomla, phpMyAdmin, phpunit, OWA, etc.)	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-01 06:08:49 (2 days ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /wp-config.php.bak (+12 more) \| 2026-09-01 06:08 UTC show less	Hacking Web App Attack
🇫🇷 ELYAZ	2026-09-01 05:42:06 (2 days ago)	(y3) Failed access -byebye- from 34.150.5.115 (HK/Hong Kong/115.5.150.34.bc.googleusercontent.com): ... show more (y3) Failed access -byebye- from 34.150.5.115 (HK/Hong Kong/115.5.150.34.bc.googleusercontent.com): (CF_ENABLE) show less	Hacking
Anonymous	2026-09-01 04:25:31 (2 days ago)	WEB attack	Brute-Force
🇺🇸 TPI-Abuse	2026-09-01 03:02:28 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.150.5.115 (115.5.150.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.150.5.115 (115.5.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 23:02:24.013698 2026] [security2:error] [pid 13345:tid 13345] [client 34.150.5.115:45478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jonathan.mathewyoung.com"] [uri "/wp-config.php.swp"] [unique_id "apZAQET3cgA4jiZT445NtwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇳 196.207.215.55

🇺🇦 95.46.104.159

🇸🇾 90.153.206.47

🇫🇷 85.217.140.50

🇮🇶 169.224.8.122

🇮🇳 144.24.159.248

🇷🇴 92.118.39.202

🇺🇸 65.49.1.220

🇫🇮 46.29.26.26

🇬🇧 34.153.182.111

🇺🇸 24.199.121.239

🇮🇳 20.193.140.218

🇧🇷 200.175.61.207

🇲🇽 187.223.101.2

🇫🇷 172.71.130.214

🇭🇰 122.10.17.49

🇫🇷 91.196.152.241

🇫🇷 91.196.152.35

🇬🇧 37.156.64.65

🇬🇧 35.203.211.41