JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.186.212.158

Recent Activity

Abuse Confidence Score

100% Critical

118 reports

77 reporters · latest 1 hour ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 158.212.186.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇨🇦 Canada
City: Montreal, Quebec

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

118 from 77 distinct reporters

First reported

November 1st 2026

Most recent report

1 hour ago

Last 60 days

Top reporter locations 🇩🇪 Germany 24 🇳🇱 Netherlands 22 🇬🇧 United Kingdom of Great Britain and Northern Ireland 18

Most common categories Web App Attack 88 Bad Web Bot 36 Brute-Force 35 Hacking 25 SSH 5

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-07 04:00:38 UTC · (1 hour ago)	"GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/1.1"	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-11-06 20:04:34 UTC · (9 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇩🇪 akasolutions.de	2026-11-06 19:29:29 UTC · (9 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.186.212.158 (CA/Canada/158.212.186.34.bc.googleusercontent.com)	SQL Injection
🇳🇱 Alt255	2026-11-06 18:03:58 UTC · (11 hours ago)	[topuurbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.186.212.158 - - \[06/Nov/2026:19:03:42 +0100\] "GET /static../.env HTTP/1.1" 307 5619 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.goo ... show more [topuurbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.186.212.158 - - \[06/Nov/2026:19:03:42 +0100\] "GET /static../.env HTTP/1.1" 307 5619 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)" ... show less	Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-11-06 17:39:55 UTC · (11 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent	Web App Attack Bad Web Bot
🇺🇸 jormaster3k	2026-11-06 16:48:17 UTC · (12 hours ago)	Attack against Apache (too many 404s)	Web App Attack
🇫🇷 mrcrassi	2026-11-06 16:34:14 UTC · (12 hours ago)	Triggered Cloudflare WAF (firewallManaged) from CA. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /userfiles UA: CCBot/2.0 (https://commoncrawl.org/faq/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseI ... show more Triggered Cloudflare WAF (firewallManaged) from CA. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /userfiles UA: CCBot/2.0 (https://commoncrawl.org/faq/) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇨🇦 CentiDevOps	2026-11-06 16:27:24 UTC · (13 hours ago)	Web app scan: 63 requests in 1 min across 2 domains (301/404). Paths: /.git/HEAD, /.git/config, /fr/.git/config (+24 more). Sample: 2026-11-06T16:27:24Z "GET /core/.env" 301	Hacking Web App Attack
🇺🇸 tworjaga	2026-11-06 16:10:57 UTC · (13 hours ago)	Automated web attack detected: probed 35 sensitive paths (/.env.prod, /.env.www, /.git/config); injection / traversal in 9 URLs; 404 flood: 356 of 390 over 167 paths; 390 requests in 15 min; known attacker: AbuseIPDB 100% (109 reports). Requests: GET ... show more Automated web attack detected: probed 35 sensitive paths (/.env.prod, /.env.www, /.git/config); injection / traversal in 9 URLs; 404 flood: 356 of 390 over 167 paths; 390 requests in 15 min; known attacker: AbuseIPDB 100% (109 reports). Requests: GET /leistungen.html → 307, GET /application/.env → 404, GET /var/.env → 404, GET /.env.prod → 404, GET /.env.www → 404 User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0 show less	Web App Attack SQL Injection DDoS Attack Bad Web Bot
🇩🇪 BlueWire Hosting	2026-11-06 13:03:46 UTC · (16 hours ago)	Modsecurity: probe or injection attempt	SQL Injection Web App Attack
🇫🇷 Murazaki	2026-11-06 12:08:41 UTC · (17 hours ago)	vault.benadel.fr 34.186.212.158 - - [06/Nov/2026:13:08:40 +0100] "-" 500 170 "-" "-" "-" ...	Hacking
🇬🇧 bensmithurst	2026-11-06 11:40:46 UTC · (17 hours ago)	34.186.212.158 - - [06/Nov/2026:11:40:46 +0000] "GET /.env.config HTTP/1.1" 302 138 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 34.186.212.158 - - [06/Nov/2026:11:40:46 +0000] "GET /.env.prod.local HTTP/1.1" 302 138 "-" "Mo ... show more 34.186.212.158 - - [06/Nov/2026:11:40:46 +0000] "GET /.env.config HTTP/1.1" 302 138 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 34.186.212.158 - - [06/Nov/2026:11:40:46 +0000] "GET /.env.prod.local HTTP/1.1" 302 138 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" ... [host=LAN***] show less	Bad Web Bot Web App Attack
🇺🇸 integrantservices.com	2026-11-06 11:34:26 UTC · (17 hours ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.186.212.158 (CA/Canada/158.212.186.34.bc.googleusercontent.com)	Bad Web Bot
🇧🇾 lns.bz	2026-11-06 11:33:22 UTC · (17 hours ago)	Too many 404 requests [BY]	Web App Attack
🇨🇭 4server	2026-11-06 11:27:52 UTC · (18 hours ago)	[FriNov0612:27:47.1719342026][security2:error][pid2322320:tid2322438][client34.186.212.158:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\\|__schema\\\\\\\\\?{\?\(\?:querytype\\|types\?\)\)\?\\\\\\\\{\"atRE ... show more [FriNov0612:27:47.1719342026][security2:error][pid2322320:tid2322438][client34.186.212.158:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\\|__schema\\\\\\\\\?{\?\(\?:querytype\\|types\?\)\)\?\\\\\\\\{\"atREQUEST_BODY.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"234\"][id\"344378\"][rev\"2\"][msg\"Atomicorp.comWAFRules:GraphQLInjectionAttackattempt\"][data\"MatchedData:__schema{types{foundwithinREQUEST_BODY:{\\\\x22query\\\\x22:\\\\x22{__schema{types{namefields{nameargs{namedefaultvalue}}}}}\\\\x22}\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"www.benvenutialfood.org\"][uri\"/graphql\"][unique_id\"au25swkBXpbwnw3P_jq21AAAAM4\"]\,referer:https://www.benvenutialfood.org show less	Hacking Web App Attack

Showing 1 to 15 of 118 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 202.100.146.86

🇨🇴 181.63.82.87

🇺🇸 172.235.41.203

🇺🇸 141.133.44.104

🇳🇱 109.160.32.130

🇨🇳 103.236.80.222

🇷🇺 82.147.85.101

🇳🇱 45.148.10.121

🇺🇸 45.79.172.21

🇧🇪 35.210.238.150

🇧🇪 35.210.204.95

🇬🇧 35.203.211.130

🇨🇳 219.150.93.157

🇧🇪 198.235.24.246

🇳🇱 195.178.110.26

🇲🇽 189.168.34.105

🇺🇸 146.70.127.252

🇺🇸 142.252.84.245

🇨🇳 120.48.90.166

🇯🇵 118.194.228.101