JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.35.44.172

34.35.44.172 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 61%: ?

61%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	172.44.35.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.35.44.172

Whois 34.35.44.172

IP Abuse Reports for 34.35.44.172:

This IP address has been reported a total of 12 times from 9 distinct sources. 34.35.44.172 was first reported on September 1st 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-09-02 04:15:07 (1 hour ago)	[02/Sep/2026:07:15:07 +0300] -- 34.35.44.172 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/ ... show more [02/Sep/2026:07:15:07 +0300] -- 34.35.44.172 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 03:46:07 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.35.44.172 (172.44.35.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.35.44.172 (172.44.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 23:46:00.533140 2026] [security2:error] [pid 25086:tid 25086] [client 34.35.44.172:55594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mi-web.com.mpservice.com.sv"] [uri "/.git/config"] [unique_id "apeb-PGE0mIYswjx1ggVjAAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 01:30:47 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.35.44.172 (172.44.35.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.35.44.172 (172.44.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 21:30:42.512147 2026] [security2:error] [pid 23407:tid 23407] [client 34.35.44.172:52250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mhservice.mayan.abecasis.com"] [uri "/.git/config"] [unique_id "apd8Qj-M-vWMhO_oU0hxfwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-02 00:47:29 (4 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config (+1 more) \| 2026-09-02 00:47 UTC show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-09-02 00:07:45 (5 hours ago)	Excessive 404/403 errors	Brute-Force
🇩🇪 FeG Deutschland	2026-09-01 23:03:20 (6 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 21:46:09 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.35.44.172 (172.44.35.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.35.44.172 (172.44.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 17:46:03.134592 2026] [security2:error] [pid 28654:tid 28654] [client 34.35.44.172:33430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mhext.com"] [uri "/.git/config"] [unique_id "apdHm4tSEFrGxIyxfZodAQAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 21:28:22 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.35.44.172 (172.44.35.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.35.44.172 (172.44.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 17:28:15.428006 2026] [security2:error] [pid 10908:tid 10908] [client 34.35.44.172:55784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mhebert.com"] [uri "/.git/config"] [unique_id "apdDb3oSPGgC277RP7TcAwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-01 21:25:55 (8 hours ago)	Blocked by ModSec and CSF	Port Scan
🇧🇬 HighWay	2026-09-01 21:07:24 (8 hours ago)	34.35.44.172 - - [01/Sep/2026:21:07:11 +0000] "GET /.git/config HTTP/1.1" 403 4407 "-" "Mozilla/5.0 ... show more 34.35.44.172 - - [01/Sep/2026:21:07:11 +0000] "GET /.git/config HTTP/1.1" 403 4407 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.35.44.172 - - [01/Sep/2026:21:07:15 +0000] "GET /.env HTTP/1.1" 403 4409 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.35.44.172 - - [01/Sep/2026:21:07:16 +0000] "GET /.env.local HTTP/1.1" 403 4408 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Port Scan Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-09-01 20:45:20 (8 hours ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Savvii	2026-09-01 19:38:48 (10 hours ago)	20 attempts against mh-misbehave-ban on sky	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2a01:4f8:c17:6820::1

🇬🇧 213.166.84.39

🇺🇸 165.154.182.187

🇸🇬 161.118.199.50

🇳🇱 160.119.71.135

🇺🇸 151.247.52.43

🇮🇳 103.127.170.129

🇺🇸 100.50.17.159

🇷🇴 92.118.39.71

🇺🇸 64.62.156.12

🇺🇸 45.156.129.86

🇺🇸 40.124.81.97

🇹🇼 36.237.247.28

🇫🇮 34.88.29.206

🇮🇷 5.123.82.19

🇧🇷 205.210.31.252

🇺🇸 198.178.119.32

🇧🇷 177.93.153.144

🇺🇸 165.154.135.185

🇩🇪 151.243.11.240