JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.175.131.85

34.175.131.85 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 79%: ?

79%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	85.131.175.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇪🇸 Spain
City	Madrid, Madrid

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.175.131.85

Whois 34.175.131.85

IP Abuse Reports for 34.175.131.85:

This IP address has been reported a total of 16 times from 14 distinct sources. 34.175.131.85 was first reported on September 22nd 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 itsvic.dev	2026-09-23 10:24:22 (2 hours ago)	34.175.131.85 - - [23/Sep/2026:10:24:21 +0000] "bazarr.media.itsvic.dev" "GET /app/.git/config HTTP/ ... show more 34.175.131.85 - - [23/Sep/2026:10:24:21 +0000] "bazarr.media.itsvic.dev" "GET /app/.git/config HTTP/1.1" 404 14 "-" "crusader-worker/1.0" 34.175.131.85 - - [23/Sep/2026:10:24:21 +0000] "bazarr.media.itsvic.dev" "GET /.git/config HTTP/1.1" 404 14 "-" "crusader-worker/1.0" 34.175.131.85 - - [23/Sep/2026:10:24:21 +0000] "bazarr.media.itsvic.dev" "GET /api/.git/config HTTP/1.1" 404 14 "-" "crusader-worker/1.0" ... show less	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-09-23 09:46:04 (3 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-23 08:25:18 (4 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
Anonymous	2026-09-23 06:41:48 (6 hours ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇺🇸 TPI-Abuse	2026-09-23 06:23:14 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.175.131.85 (85.131.175.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.175.131.85 (85.131.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 02:23:10.713153 2026] [security2:error] [pid 10250:tid 10250] [client 34.175.131.85:44108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.darkcodedesign.net"] [uri "/var/www/.git/config"] [unique_id "arNwTqUPqQZ7Zn6f_8aE6AAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-23 05:03:29 (8 hours ago)	[23/Sep/2026:08:03:28 +0300] -- 34.175.131.85 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git ... show more [23/Sep/2026:08:03:28 +0300] -- 34.175.131.85 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1 show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-23 04:32:54 (8 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-23 04:06:58 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.175.131.85 (85.131.175.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.175.131.85 (85.131.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 00:06:53.219240 2026] [security2:error] [pid 9801:tid 9801] [client 34.175.131.85:44838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "armorcorp.com"] [uri "/app/.git/config"] [unique_id "arNQXYWFty3BF4vi3LJ39QAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-09-23 02:59:40 (10 hours ago)	csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s	Web App Attack
Anonymous	2026-09-23 01:22:43 (11 hours ago)	wordpress_scan attack on /wordpress/.git/config \| User-Agent: crusader-worker/1.0 \| Detected by Port ... show more wordpress_scan attack on /wordpress/.git/config \| User-Agent: crusader-worker/1.0 \| Detected by PortSense API security system show less	Web App Attack
🇸🇪 vaia.cloud	2026-09-22 23:15:02 (14 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-22 20:32:48 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.175.131.85 (85.131.175.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.175.131.85 (85.131.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 16:32:39.522864 2026] [security2:error] [pid 28569:tid 28572] [client 34.175.131.85:51098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adprosfla.adprospb.com"] [uri "/public/.git/config"] [unique_id "arLl5568ubmIqLgR_mKjbwAAAUE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-09-22 20:12:26 (17 hours ago)	[TueSep2222:12:21.5060972026][security2:error][pid1222230:tid1222277][client34.175.131.85:0]ModSecur ... show more [TueSep2222:12:21.5060972026][security2:error][pid1222230:tid1222277][client34.175.131.85:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"admin-services.ch.136-243-54-122.cpanel.site\"][uri\"/.git/config\"][unique_id\"arLhJZ_mgl2byvz__Ie3zAAAAEs\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-09-22 19:37:18 (17 hours ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇧🇪 voormedia	2026-09-22 18:21:53 (18 hours ago)	Accessed trap at '/.git/config'	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.48

🇧🇷 200.223.196.90

🇸🇬 165.154.200.214

🇨🇳 117.33.238.13

🇵🇱 109.205.211.29

🇵🇱 109.205.211.21

🇺🇸 104.206.128.54

🇹🇷 95.0.32.49

🇧🇬 79.124.62.126

🇺🇸 66.132.172.140

🇱🇹 62.60.130.199

🇳🇱 34.91.209.25

🇬🇧 217.146.80.111

🇻🇳 203.205.37.233

🇺🇸 195.184.76.17

🇻🇪 190.153.117.127

🇧🇷 189.6.251.236

🇬🇧 172.70.86.85

🇧🇷 168.232.247.182

🇮🇩 163.7.4.169