JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.40.147.85

34.40.147.85 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 94%: ?

94%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	85.147.40.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.40.147.85

Whois 34.40.147.85

IP Abuse Reports for 34.40.147.85:

This IP address has been reported a total of 36 times from 21 distinct sources. 34.40.147.85 was first reported on June 13th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-16 22:02:43 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-15. show less	Web App Attack SSH Hacking
🇳🇱 Site.eu	2026-06-16 06:21:17 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-06-15 10:08:59 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.40.147.85 (85.147.40.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.40.147.85 (85.147.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 06:08:56.729545 2026] [security2:error] [pid 15613:tid 15613] [client 34.40.147.85:33264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cs.cswiki.us"] [uri "/htdocs/.git/config"] [unique_id "ai_POLasHIDiGKvDoYExsAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 08:42:55 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.40.147.85 (85.147.40.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.40.147.85 (85.147.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 04:42:50.892380 2026] [security2:error] [pid 23439:tid 23439] [client 34.40.147.85:40542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hei-tx.com.swhinc.net"] [uri "/web/.git/config"] [unique_id "ai-7CpFUuC4RZrtRYxir1AAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-15 04:46:14 (1 week ago)	[MonJun1506:46:10.7022992026][security2:error][pid3788818:tid3788887][client34.40.147.85:0]ModSecuri ... show more [MonJun1506:46:10.7022992026][security2:error][pid3788818:tid3788887][client34.40.147.85:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"laketec.ch.136-243-54-122.cpanel.site\"][uri\"/htdocs/.git/config\"][unique_id\"ai-DkrQIlTpZI9ViNxFv9AAAAEc\"] show less	Port Scan Brute-Force Web App Attack
🇳🇿 Antinson	2026-06-15 03:35:31 (1 week ago)	Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-15 03:30:08 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.40.147.85 (85.147.40.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.40.147.85 (85.147.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:30:02.464841 2026] [security2:error] [pid 21271:tid 21271] [client 34.40.147.85:55908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "microbikinitop.com"] [uri "/blog/.git/config"] [unique_id "ai9xugh4GmZpPnQvJ2c3-QAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 stinpriza	2026-06-15 03:00:46 (1 week ago)	common Web Exploits being scanned	Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 02:27:19 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.40.147.85 (85.147.40.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.40.147.85 (85.147.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:27:14.229949 2026] [security2:error] [pid 29381:tid 29381] [client 34.40.147.85:50952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mtl.microkerneltechnologies.com"] [uri "/src/.git/config"] [unique_id "ai9jAlrLRA0wmnAlGND19gAAAEk"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-06-15 02:18:26 (1 week ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇵🇱 lns.bz	2026-06-15 00:37:51 (1 week ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇩🇪 Philister11	2026-06-15 00:16:42 (1 week ago)	CrowdSec: crowdsecurity/http-probing (AU/AS396982)	Web App Attack Hacking
🇺🇸 mnsf	2026-06-15 00:07:35 (1 week ago)	Abuse Detected (30)	Brute-Force Web App Attack
🇨🇭 backslash	2026-06-15 00:06:20 (1 week ago)	block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-15 00:05:00 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.40.147.85 (85.147.40.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.40.147.85 (85.147.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:04:53.444677 2026] [security2:error] [pid 13296:tid 13296] [client 34.40.147.85:57050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prostar.industries"] [uri "/admin/.git/config"] [unique_id "ai9BpdU4buLLDHVsYVmIjAAAADY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.254.40.89

🇹🇼 198.235.24.123

🇺🇸 195.184.76.90

🇧🇷 190.9.65.115

🇺🇸 185.180.141.54

🇺🇸 185.180.141.52

🇺🇸 166.77.36.7

🇺🇸 147.185.132.86

🇺🇸 108.171.103.82

🇺🇸 108.24.209.12

🇱🇹 77.90.185.64

🇺🇸 38.132.109.165

🇳🇱 31.14.32.6

🇭🇰 199.45.154.182

🇩🇪 195.63.19.119

🇺🇸 195.63.11.154

🇺🇸 195.63.7.149

🇳🇱 193.39.208.26

🇬🇧 188.240.59.41

🇺🇸 162.216.149.37