JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.32.121.5

Neutral Activity

Abuse Confidence Score

0% Low Risk

120 reports

59 reporters · latest 5 months ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 5.121.32.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇩🇪 Germany
City: Berlin, State of Berlin

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

34.32.121.5 has been reported 120 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

120 from 59 distinct reporters

First reported

May 10th 2026

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Watto	2026-05-19 01:24:05 UTC · (5 months ago)	Honeypot caught web brute force / scanning from Germany; 62 events recorded by kiosk-watchtower (Cowrie + canary stack). Automated report from honeypot, please do not contact owner.	Bad Web Bot Web App Attack
🇬🇧 andypiper	2026-05-19 01:02:00 UTC · (5 months ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇯🇵 Kinsei Engineering Inc.	2026-05-19 00:14:57 UTC · (5 months ago)	UFW:High-frequency access to unused ports	Port Scan
🇺🇸 ISPLtd	2026-05-19 00:10:56 UTC · (5 months ago)	May 18 21:10:50 34.32.121.5 TCP SPT=49449 DPT=7001 SYN May 18 21:10:55 34.32.121.5 TCP SPT=49449 DPT=8080 SYN May 18 21:10:55 34.32.121.5 TCP SPT=49449 DPT=7000 SYN ...	Port Scan
Anonymous	2026-05-15 09:52:30 UTC · (5 months ago)	Reported from Nginx log analysis 11. Log: 34.32.121.5 - - [15/May/2026:xx:xx:xx 0200] "GET /.git/config HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" ... show more Reported from Nginx log analysis 11. Log: 34.32.121.5 - - [15/May/2026:xx:xx:xx 0200] "GET /.git/config HTTP/1.1" xxx xxx "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" "-" "DE Germany Berlin" "AS396982" "Google LLC" show less	Port Scan Brute-Force SSH
🇨🇭 4server	2026-05-15 08:28:16 UTC · (5 months ago)	[FriMay1510:28:12.0792302026][security2:error][pid3879966:tid3880273][client34.32.121.5:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\ ... show more [FriMay1510:28:12.0792302026][security2:error][pid3879966:tid3880273][client34.32.121.5:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"swiss-web-hosting.ch\"][uri\"/.git/config\"][unique_id\"agbZHJ6PEQJVgaM08oCi5AAAARQ\"] show less	Hacking Web App Attack
🇺🇸 WellSpring	2026-05-15 06:41:12 UTC · (5 months ago)	git exposure on 830.today/.git/config — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack
🇳🇿 Antinson	2026-05-15 06:33:30 UTC · (5 months ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇨🇭 backslash	2026-05-15 06:27:04 UTC · (5 months ago)	block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1	Bad Web Bot
🇩🇪 Roper123	2026-05-15 06:20:58 UTC · (5 months ago)	Web exploits	Web App Attack
🇺🇸 Mundo Bueno	2026-05-15 03:03:00 UTC · (5 months ago)	[ISILIA Protection v2.1] Tentative d'accès: /.git/config \| Pays: DE \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 12_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobi	Hacking Web App Attack
🇬🇧 poundawebsiteltd	2026-05-15 03:02:24 UTC · (5 months ago)	Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 34.32.121.5 - - [15/May/2026:04:02:21 +0100] GET /.git/config HTTP/1.1 403 2821 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/5 ... show more Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:443 34.32.121.5 - - [15/May/2026:04:02:21 +0100] GET /.git/config HTTP/1.1 403 2821 - Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36 show less	Web App Attack
Anonymous	2026-05-15 02:22:11 UTC · (5 months ago)	(caddyscan) Scanner path probe from 34.32.121.5 (DE/Germany/5.121.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:01:51:54 +0000] ... show more (caddyscan) Scanner path probe from 34.32.121.5 (DE/Germany/5.121.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:01:51:54 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:01:52:21 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:02:02:33 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:02:21:17 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:02:22:06 +0000] "GET /.git/config HTTP/1.1" show less	Port Scan
Anonymous	2026-05-15 01:41:14 UTC · (5 months ago)	(caddyscan) Scanner path probe from 34.32.121.5 (DE/Germany/5.121.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:01:21:02 +0000] ... show more (caddyscan) Scanner path probe from 34.32.121.5 (DE/Germany/5.121.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:01:21:02 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:01:21:09 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:01:21:12 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:01:30:52 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:01:41:09 +0000] "GET /.git/config HTTP/1.1" show less	Port Scan
Anonymous	2026-05-15 01:04:44 UTC · (5 months ago)	(caddyscan) Scanner path probe from 34.32.121.5 (DE/Germany/5.121.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:00:52:06 +0000] ... show more (caddyscan) Scanner path probe from 34.32.121.5 (DE/Germany/5.121.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:00:52:06 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:00:52:24 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:00:52:36 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:01:04:30 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 34.32.121.5 - - [15/May/2026:01:04:40 +0000] "GET /.git/config HTTP/1.1" show less	Port Scan

Showing 1 to 15 of 120 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 85.28.39.45

🇻🇳 157.20.201.153

🇧🇬 79.124.58.218

🇺🇸 17.166.154.7

🇨🇦 216.121.171.198

🇦🇷 181.28.101.14

🇫🇷 90.58.81.7

🇺🇸 50.6.193.72

🇸🇬 47.128.125.150

🇳🇱 45.148.10.152

🇰🇷 218.149.228.148

🇳🇱 213.209.159.226

🇲🇽 201.124.247.112

🇺🇸 199.165.159.69

🇳🇱 195.178.110.30

🇺🇸 192.199.236.120

🇹🇷 185.148.243.200

🇺🇸 184.105.247.251

🇨🇳 112.80.175.251

🇬🇧 81.19.219.234