JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.35.5.137

34.35.5.137 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	137.5.35.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.35.5.137

Whois 34.35.5.137

IP Abuse Reports for 34.35.5.137:

This IP address has been reported a total of 32 times from 27 distinct sources. 34.35.5.137 was first reported on September 15th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇺 DZBOT	2026-09-18 07:05:03 (1 hour ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇮🇳 evicky2002	2026-09-18 06:00:02 (2 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇳🇱 e.fierstra	2026-09-18 04:33:13 (4 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
Anonymous	2026-09-17 20:38:01 (11 hours ago)	Bot / scanning and/or hacking attempts: GET /config/.env HTTP/1.1, GET /web/.env HTTP/1.1, GET /publ ... show more Bot / scanning and/or hacking attempts: GET /config/.env HTTP/1.1, GET /web/.env HTTP/1.1, GET /public/.env HTTP/1.1, GET /application/.env HTTP/1.1, GET /core/.env HTTP/1.1, GET /src/.env HTTP/1.1, GET /bootstrap/.env HTTP/1.1, GET /admin/.env HTTP/1.1, GET /api/.env HTTP/1.1, GET /server/.env HTTP/1.1, GET /backend/.env HTTP/1.1, GET /database/.env HTTP/1.1, GET /private/.env HTTP/1.1, GET /frontend/.env HTTP/1.1, GET /core/app/.env HTTP/1.1, GET /site/.env HTTP/1.1 show less	Hacking Web App Attack
🇳🇱 Mangelot Hosting	2026-09-17 20:30:02 (12 hours ago)	(modsecurity) srv102 ModSecurity 34.35.5.137 (ZA/South Africa/137.5.35.34.bc.googleusercontent.com): ... show more (modsecurity) srv102 ModSecurity 34.35.5.137 (ZA/South Africa/137.5.35.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇳🇱 Alt255	2026-09-17 19:48:22 (12 hours ago)	[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.35.5.137 - - [17/Sep/2026:21:48:17 +0200] "GET /.git/config HTTP/1.1" 404 2126 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 15:14:54 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.35.5.137 (137.5.35.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.35.5.137 (137.5.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 11:14:47.463509 2026] [security2:error] [pid 21980:tid 21980] [client 34.35.5.137:46978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oogeothermal.com"] [uri "/.git/config"] [unique_id "aqwD5zEaTHRVcf7dpI_P_AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-17 12:04:49 (20 hours ago)	Aggressive web scan	Web App Attack
🇳🇱 Site.eu	2026-09-17 11:54:05 (20 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-09-17 10:56:53 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.35.5.137 (137.5.35.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.35.5.137 (137.5.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:56:46.511863 2026] [security2:error] [pid 2780:tid 2780] [client 34.35.5.137:33610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "onyxcc.com"] [uri "/.git/config"] [unique_id "aqvHbl8pHZOYUSkXBdiz3gAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 07:45:05 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.35.5.137 (137.5.35.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.35.5.137 (137.5.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 03:44:58.497322 2026] [security2:error] [pid 19944:tid 19944] [client 34.35.5.137:53092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "onward.ws"] [uri "/.git/config"] [unique_id "aquaerA7SoLRv1sOiEHTOAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 slay3r9903	2026-09-16 18:39:21 (1 day ago)	IP address blocked by Cloudflare security rules due to suspicious activity and security violations.	Hacking Bad Web Bot
🇵🇱 Roper123	2026-09-16 18:16:12 (1 day ago)	Web app exploits	Web App Attack
🇺🇸 lnklnx	2026-09-16 17:53:22 (1 day ago)	nextcloud.lnklnx.com:443 34.35.5.137 - - [16/Sep/2026:12:53:19 -0500] "GET /.git/config HTTP/1.1" 40 ... show more nextcloud.lnklnx.com:443 34.35.5.137 - - [16/Sep/2026:12:53:19 -0500] "GET /.git/config HTTP/1.1" 404 6074 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 big-cloud.nl	2026-09-16 17:50:07 (1 day ago)	Try to access /.git/config	Web App Attack

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 141.101.69.98

🇭🇰 165.154.23.220

🇦🇷 149.107.253.187

🇩🇪 86.38.98.84

🇸🇬 43.173.177.2

🇮🇩 41.216.177.55

🇺🇸 35.91.93.41

🇺🇸 20.127.172.23

🇺🇸 3.82.141.143

🇨🇳 1.14.69.226

🇺🇸 216.218.206.67

🇩🇪 193.124.20.243

🇫🇷 172.71.134.190

🇭🇰 116.48.138.69

🇺🇸 104.171.153.14

🇺🇸 91.230.168.191

🇺🇸 47.251.98.79

🇯🇵 47.74.1.222

🇺🇸 34.174.88.54

🇯🇵 34.104.138.189