JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.159.85.118

34.159.85.118 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	118.85.159.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.159.85.118

Whois 34.159.85.118

IP Abuse Reports for 34.159.85.118:

This IP address has been reported a total of 51 times from 42 distinct sources. 34.159.85.118 was first reported on October 18th 2026, and the most recent report was 16 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Alt255	2026-10-22 07:11:01 (16 minutes ago)	[cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.159.85.118 - - [22/Oct/2026:09:10:43 +0200] "GET /.git/config HTTP/2.0" 301 139 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-10-22 07:08:11 (19 minutes ago)	Try to access /.git/config	Web App Attack
🇵🇱 Budyn	2026-10-22 05:46:56 (1 hour ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cdn.astropot.online \| URI: /.git/config \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] \| HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"34.159.85.118","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a4e634567d4bdbe7-FRA","Accept-Encoding":"gzip, br","Accept":"\/","Next-Action":"x","X-Nextjs-Request-I show less	Bad Web Bot Web App Attack
🇫🇮 albionfreemarket.com	2026-10-22 04:53:08 (2 hours ago)	34.159.85.118 - - [22/Oct/2026:04:52:43 +0000] "GET /graphql/.env HTTP/2.0" 403 171 "-" "Mozilla/5.0 ... show more 34.159.85.118 - - [22/Oct/2026:04:52:43 +0000] "GET /graphql/.env HTTP/2.0" 403 171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 0.000 "-" "DE" 34.159.85.118 - - [22/Oct/2026:04:53:07 +0000] "GET /phpinfo.php HTTP/2.0" 403 171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 0.000 "-" "DE" ... show less	Bad Web Bot Web App Attack
🇨🇿 SystemAdmin	2026-10-22 04:40:50 (2 hours ago)	Doing bad things...	Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 23:37:32 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.159.85.118 (118.85.159.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.159.85.118 (118.85.159.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 19:37:26.416264 2026] [security2:error] [pid 32298:tid 32298] [client 34.159.85.118:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cdn-0.socialstudiesforkids.com"] [uri "/.git/config"] [unique_id "atlMtr5tNlnNvRV1Dg7VlwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 sojan	2026-10-21 09:42:58 (21 hours ago)	34.159.85.118 - - [21/Oct/2026:11:42:57 +0200] "POST / HTTP/1.1" 405 31 "-" "Mozilla/5.0 (X11; Linux ... show more 34.159.85.118 - - [21/Oct/2026:11:42:57 +0200] "POST / HTTP/1.1" 405 31 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.159.85.118 - - [21/Oct/2026:11:42:57 +0200] "POST / HTTP/1.1" 405 31 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.159.85.118 - - [21/Oct/2026:11:42:57 +0200] "POST / HTTP/1.1" 405 31 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇮🇹 mgarofano80	2026-10-21 08:14:56 (23 hours ago)		Brute-Force Web App Attack
Anonymous	2026-10-21 07:26:55 (1 day ago)	Blocked by ModSec and CSF	Port Scan
🇳🇱 Alt255	2026-10-21 06:57:44 (1 day ago)	[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ... show more [ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.159.85.118 - - \[21/Oct/2026:08:57:38 +0200\] "GET /.git/config HTTP/1.1" 301 652 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇧🇷 dominioz	2026-10-21 06:55:30 (1 day ago)	2026-10-21 06:55:14 GET /.git/config - - 34.159.85.118 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64; ... show more 2026-10-21 06:55:14 GET /.git/config - - 34.159.85.118 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 5135 2026-10-21 06:55:16 GET /.env - - 34.159.85.118 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 5141 2026-10-21 06:55:16 GET /.env - - 34.159.85.118 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 5141 ... show less	Bad Web Bot Web App Attack
🇨🇭 dalslab ltd	2026-10-21 06:08:50 (1 day ago)	[21/Oct/2026:08:08:49 +0200] - 422 422 - POST https converter.dalslab.com "/login" [Client 34.159.85 ... show more [21/Oct/2026:08:08:49 +0200] - 422 422 - POST https converter.dalslab.com "/login" [Client 34.159.85.118] [Length 754] [Gzip -] [Sent-to 10.1.1.229] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [21/Oct/2026:08:08:49 +0200] - 422 422 - POST https converter.dalslab.com "/login" [Client 34.159.85.118] [Length 754] [Gzip -] [Sent-to 10.1.1.229] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [21/Oct/2026:08:08:49 +0200] - 422 422 - POST https converter.dalslab.com "/login" [Client 34.159.85.118] [Length 754] [Gzip -] [Sent-to 10.1.1.229] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" [21/Oct/2026:08:08:49 +0200] - 404 404 - GET https converter.dalslab.com "/.git/config" [Client 34.159.85.118] [Length 9] [Gzip -] [Sent-to 10.1.1.229] "Mozilla/5.0 (Macintosh; Inte ... show less	Web Spam Brute-Force Bad Web Bot Web App Attack
🇩🇪 srtzero	2026-10-21 04:07:06 (1 day ago)	34.159.85.118 - - [21/Oct/2026:06:07:05 +0200] "GET /.git/config HTTP/1.1" 404 1382 "-" "Mozilla/5.0 ... show more 34.159.85.118 - - [21/Oct/2026:06:07:05 +0200] "GET /.git/config HTTP/1.1" 404 1382 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.159.85.118 - - [21/Oct/2026:06:07:05 +0200] "GET /.env.local HTTP/1.1" 404 1382 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.159.85.118 - - [21/Oct/2026:06:07:05 +0200] "GET /.env.production HTTP/1.1" 404 1382 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Port Scan Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-10-21 03:46:49 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇧🇷 dominioz	2026-10-21 01:34:27 (1 day ago)	2026-10-21 01:34:01 GET /.git/config - - 34.159.85.118 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+Appl ... show more 2026-10-21 01:34:01 GET /.git/config - - 34.159.85.118 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245 2026-10-21 01:34:02 GET /.env - - 34.159.85.118 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245 2026-10-21 01:34:02 GET /.env - - 34.159.85.118 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245 2026-10-21 01:34:06 GET /.env.bak - - 34.159.85.118 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245 ... show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 194.50.235.140

🇬🇧 193.163.125.223

🇷🇴 193.46.255.86

🇸🇬 104.233.38.12

🇺🇸 96.44.168.88

🇹🇷 94.121.85.198

🇸🇦 94.98.135.57

🇸🇬 45.78.206.111

🇦🇷 216.28.134.159

🇬🇧 200.138.46.3

🇨🇴 191.110.26.248

🇷🇸 178.221.10.150

🇮🇩 163.7.11.155

🇸🇬 145.223.151.27

🇺🇸 144.172.118.107

🇮🇳 122.168.197.138

🇮🇳 106.51.72.246

🇮🇳 103.44.52.177

🇳🇱 77.239.124.150

🇸🇦 51.39.233.145