JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.6.167.149

34.6.167.149 was found in our database!

This IP was reported 27 times. Confidence of Abuse is 99%: ?

99%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	149.167.6.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.6.167.149

Whois 34.6.167.149

IP Abuse Reports for 34.6.167.149:

This IP address has been reported a total of 27 times from 20 distinct sources. 34.6.167.149 was first reported on August 26th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Zydzy	2026-08-31 11:28:24 (11 hours ago)	Automated attack detected. Server: 95.140.154.181. Jail: nginx-exploit.	Web App Attack
🇫🇷 masterguru	2026-08-29 07:48:03 (2 days ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 03:25:04 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.6.167.149 (149.167.6.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.6.167.149 (149.167.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 23:24:55.085687 2026] [security2:error] [pid 12323:tid 12323] [client 34.6.167.149:55900] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.yarosh.line2.biz"] [uri "/var/www/.git/config"] [unique_id "apJRBzcF5dpdr4P5e1fBCwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Zydzy	2026-08-29 01:41:07 (2 days ago)	Automated attack detected. Server: 95.140.154.181. Jail: nginx-exploit.	Web App Attack
🇩🇪 Philister11	2026-08-28 23:59:24 (2 days ago)	CrowdSec: crowdsecurity/http-sensitive-files (NL/AS396982)	Web App Attack Hacking
🇮🇹 CoreTech srl	2026-08-28 23:53:57 (2 days ago)	cloudlinux2 fail2ban: 2026-08-29 01:48:55,337 fail2ban.actions [1478]: NOTICE [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-29 01:48:55,337 fail2ban.actions [1478]: NOTICE [plesk-modsecurity] Unban 34.80.6.134cloudlinux2 fail2ban: 2026-08-29 01:49:26,587 fail2ban.actions [1478]: NOTICE [plesk-modsecurity] Unban 34.84.166.19cloudlinux2 fail2ban: 2026-08-29 01:50:38,695 fail2ban.actions [1478]: NOTICE [plesk-modsecurity] Unban 34.12.26.22cloudlinux2 fail2ban: 2026-08-29 01:50:45,315 fail2ban.actions [1478]: NOTICE [plesk-modsecurity] Unban 34.32.111.117cloudlinux2 fail2ban: 2026-08-29 01:50:50,534 fail2ban.actions [1478]: NOTICE [plesk-modsecurity] Unban 3.12.160.78cloudlinux2 fail2ban: 2026-08-29 01:52:54,433 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 34.6.167.149 - 2026-08-29 01:52:54cloudlinux2 fail2ban: 2026-08-29 01:52:54,385 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 34.6.167.149 - 2026-08-29 01:52:54cloudlinux2 fail2ban: 2026-08-29 01:52:54,406 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 34 show less	Brute-Force
🇺🇸 TPI-Abuse	2026-08-28 22:46:54 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.6.167.149 (149.167.6.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.6.167.149 (149.167.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 18:46:46.976017 2026] [security2:error] [pid 7304:tid 7310] [client 34.6.167.149:55468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ywt.bestofthis.com"] [uri "/backend/.git/config"] [unique_id "apIP1qamxWR30bjIYwZP4gAAAQE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-28 22:43:21 (2 days ago)	Multiple WAF Violations	Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-28 21:59:33 (3 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-27. show less	Web App Attack SSH Hacking
🇫🇷 Eldeberen	2026-08-28 21:18:13 (3 days ago)	Vulnerability scan attempt through HTTP protocol	Web App Attack
🇳🇱 e.fierstra	2026-08-28 19:04:38 (3 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇦🇺 afleventoffice.com.au	2026-08-28 18:24:44 (3 days ago)	GET /api/.git/config HTTP/1.1	Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 16:24:55 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.6.167.149 (149.167.6.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.6.167.149 (149.167.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 12:24:50.682584 2026] [security2:error] [pid 18279:tid 18279] [client 34.6.167.149:48630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "inversionestalarame.com"] [uri "/wordpress/.git/config"] [unique_id "apG2UtrZGElCVyrinHowswAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 14:47:22 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.6.167.149 (149.167.6.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.6.167.149 (149.167.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 10:47:14.327529 2026] [security2:error] [pid 22541:tid 22541] [client 34.6.167.149:45962] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gamepart.com"] [uri "/wordpress/.git/config"] [unique_id "apGfcsQHxYzwDUraTQcp-QAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-08-28 12:43:48 (3 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking

Showing 1 to 15 of 27 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.25.89.208

🇩🇪 216.26.253.42

🇨🇳 121.229.9.110

🇰🇷 121.182.249.4

🇨🇳 120.229.212.65

🇺🇸 35.253.173.2

🇺🇸 35.243.216.86

🇺🇸 34.185.81.23

🇺🇸 34.28.23.136

🇵🇹 176.79.180.89

🇺🇸 20.171.13.4

🇺🇸 13.89.120.172

🇨🇳 218.27.205.159

🇻🇪 206.1.205.170

🇳🇱 45.148.10.157

🇷🇴 2.57.121.112

🇩🇪 139.59.208.225

🇹🇷 95.3.59.6

🇷🇴 80.94.92.179

🇳🇱 45.148.10.141