JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.35.57.194

34.35.57.194 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	194.57.35.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇿🇦 South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.35.57.194

Whois 34.35.57.194

IP Abuse Reports for 34.35.57.194:

This IP address has been reported a total of 30 times from 24 distinct sources. 34.35.57.194 was first reported on September 1st 2026, and the most recent report was 34 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-09-02 21:26:12 (34 minutes ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based ... show more AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based) show less	Hacking Bad Web Bot Web App Attack
🇩🇪 webanyone	2026-09-02 21:17:23 (43 minutes ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 ruusvuu	2026-09-02 20:49:05 (1 hour ago)	Automated abuse report: 15 attack/probe requests from Google LLC / ZA. Targeted paths: /v1/.env, /.e ... show more Automated abuse report: 15 attack/probe requests from Google LLC / ZA. Targeted paths: /v1/.env, /.env~, /.env1, /.env2, /.env_copy. Sample log lines: [mircapture] 2026-09-02 13:49:04: 34.35.57.194 GET /.env.local 404 - - 1.205 ms [mircapture] 2026-09-02 13:49:04: 34.35.57.194 GET /.env.production 404 - - 0.968 ms [mircapture] 2026-09-02 13:49:04: 34.35.57.194 GET /.env.staging 404 - - 6.401 ms Detected by an automated web-server log monitor. show less	Web App Attack
Anonymous	2026-09-02 20:47:51 (1 hour ago)	PAD: No_Ref,Scan_Access_Files!,ModSec_Critical,Bad_Web_Bot_D detected	Hacking
🇺🇸 TPI-Abuse	2026-09-02 20:33:43 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.35.57.194 (194.57.35.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.35.57.194 (194.57.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 16:33:37.240369 2026] [security2:error] [pid 13672:tid 13771] [client 34.35.57.194:38754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mirawaresolutions.michaelrandon.com"] [uri "/.git/config"] [unique_id "apiIIYRwlsHvmgrr1gAaWwAAAMY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-02 19:50:02 (2 hours ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 19:31:21 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.35.57.194 (194.57.35.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.35.57.194 (194.57.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 15:31:16.548344 2026] [security2:error] [pid 26797:tid 26797] [client 34.35.57.194:47446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mirandaracewalks.com"] [uri "/.git/config"] [unique_id "aph5hGyf8C10j6CxlENeygAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 19:12:03 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.35.57.194 (194.57.35.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.35.57.194 (194.57.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 15:11:56.308051 2026] [security2:error] [pid 13994:tid 13994] [client 34.35.57.194:56738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miranda-race-walks.com"] [uri "/.git/config"] [unique_id "aph0_IHfHoBwiX6EJ8kQhAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-02 17:37:02 (4 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config (+1 more) \| 2026-09-02 17:37 UTC show less	Hacking Web App Attack
🇳🇱 Mangelot Hosting	2026-09-02 16:46:43 (5 hours ago)	(modsecurity) srv201 ModSecurity 34.35.57.194 (ZA/South Africa/194.57.35.34.bc.googleusercontent.com ... show more (modsecurity) srv201 ModSecurity 34.35.57.194 (ZA/South Africa/194.57.35.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇮🇹 VHosting	2026-09-02 16:05:03 (5 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-02 14:45:39 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.35.57.194 (194.57.35.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.35.57.194 (194.57.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 10:45:31.576893 2026] [security2:error] [pid 25491:tid 25518] [client 34.35.57.194:43178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miraclearts.com"] [uri "/.git/config"] [unique_id "apg2i9HMxb8yCqGeyXOsCgAAAIw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-02 13:32:03 (8 hours ago)	[02/Sep/2026:16:32:03 +0300] -- 34.35.57.194 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/ ... show more [02/Sep/2026:16:32:03 +0300] -- 34.35.57.194 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1 show less	Bad Web Bot Web App Attack
🇫🇷 COMAITE	2026-09-02 11:12:25 (10 hours ago)	Suspicious URL access.	Web App Attack
🇷🇺 DZBOT	2026-09-02 10:38:01 (11 hours ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇮 186.77.198.35

🇮🇩 172.232.231.4

🇨🇳 125.77.73.145

🇮🇳 122.185.146.178

🇮🇳 117.250.73.123

🇬🇧 89.37.172.149

🇺🇸 34.74.229.8

🇺🇸 34.71.235.228

🇺🇸 34.48.238.47

🇨🇳 1.204.40.162

🇰🇷 221.156.126.1

🇧🇷 170.81.191.167

🇺🇸 146.19.90.91

🇮🇳 117.250.225.11

🇨🇳 117.132.188.205

🇨🇳 113.140.95.250

🇺🇸 104.198.138.151

🇸🇬 68.178.169.26

🇺🇸 66.132.195.109

🇫🇷 51.68.111.202