JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.65.212.198

34.65.212.198 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	198.212.65.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.65.212.198

Whois 34.65.212.198

IP Abuse Reports for 34.65.212.198:

This IP address has been reported a total of 39 times from 30 distinct sources. 34.65.212.198 was first reported on August 31st 2026, and the most recent report was 16 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 LRob	2026-09-01 13:51:33 (16 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /wp-config.php~ (+12 more) \| 2026-09-01 13:51 UTC show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 13:46:52 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.65.212.198 (198.212.65.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.65.212.198 (198.212.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:46:48.638128 2026] [security2:error] [pid 4031:tid 4050] [client 34.65.212.198:45230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.driftwoodblue.com"] [uri "/.env.example"] [unique_id "apbXSFRhYWwYeDsFkLv9zgAAAUY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 10:58:21 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.65.212.198 (198.212.65.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.65.212.198 (198.212.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:58:16.512647 2026] [security2:error] [pid 20849:tid 20849] [client 34.65.212.198:46502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.fortwaynepartybuses.com"] [uri "/.env.backup"] [unique_id "apavyK7yV4pvyuwyYs57NAAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-01 10:00:10 (20 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 09:27:29 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.65.212.198 (198.212.65.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.65.212.198 (198.212.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:27:25.134530 2026] [security2:error] [pid 3200:tid 3200] [client 34.65.212.198:35294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "compmansys.com"] [uri "/wp-config.php~"] [unique_id "apaafdMCaDBOgWDUs_dCBgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-01 09:20:44 (20 hours ago)	URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ... show more URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-201) show less	Hacking
🇹🇼 kk_it_man	2026-09-01 08:53:02 (21 hours ago)	ET INFO Request to Hidden Environment File - Inbound ET WEB_SERVER Tilde in URI - potential .php~ ... show more ET INFO Request to Hidden Environment File - Inbound ET WEB_SERVER Tilde in URI - potential .php~ source disclosure vulnerability show less	Port Scan
Anonymous	2026-09-01 08:52:23 (21 hours ago)	{"reqId":"CY8PqLFcltqNbIoTiiFu","level":1,"time":"2026-09-01T10:52:22+02:00","remoteAddr":"34.65.212 ... show more {"reqId":"CY8PqLFcltqNbIoTiiFu","level":1,"time":"2026-09-01T10:52:22+02:00","remoteAddr":"34.65.212.198","user":"--","app":"core","method":"GET","url":"/actuator/env","scriptName":"/index.php","message":"Trusted domain error. \"34.65.212.198\" tried to access using \"shield.khomri.com\" as host.","userAgent":"crusader-worker/1.0","version":"34.0.3.2","data":{"app":"core"}} {"reqId":"i2Z3MrQtDLC5t1DiQBvC","level":1,"time":"2026-09-01T10:52:22+02:00","remoteAddr":"34.65.212.198","user":"--","app":"core","method":"GET","url":"/actuator/configprops","scriptName":"/index.php","message":"Trusted domain error. \"34.65.212.198\" tried to access using \"shield.khomri.com\" as host.","userAgent":"crusader-worker/1.0","version":"34.0.3.2","data":{"app":"core"}} {"reqId":"3j4mnK0a4gBl23dA0fTq","level":1,"time":"2026-09-01T10:52:22+02:00","remoteAddr":"34.65.212.198","user":"--","app":"core","method":"GET","url":"/_ignition/health-check","scriptName":"/index.php","message":"Trusted domain error. \ ... show less	Web App Attack
🇳🇱 e.fierstra	2026-09-01 08:33:55 (21 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 07:03:37 (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.65.212.198 (198.212.65.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.65.212.198 (198.212.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:03:31.262172 2026] [security2:error] [pid 9823:tid 9823] [client 34.65.212.198:37100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flyc2c.com"] [uri "/.env.dev"] [unique_id "apZ4w2g5GBO6WHDgSDT4NAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-09-01 05:25:57 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
🇺🇸 Vano Ganzzz	2026-09-01 05:17:05 (1 day ago)	Triggered Cloudflare WAF (firewallManaged) from CH. Action taken: BLOCK ASN: 396982 (Google LLC) Pro ... show more Triggered Cloudflare WAF (firewallManaged) from CH. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/1.1 (GET method) Endpoint: /wp-config.php.bak Timestamp: 2026-09-01T05:17:05Z Ray ID: a341ce7bdde1444c UA: crusader-worker/1.0 show less	Bad Web Bot
🇬🇧 Aetherweb Ark	2026-09-01 04:47:37 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 34.65.212.198 (CH/Switzerland/198.212.65.34.bc. ... show more (mod_security) mod_security (id:949110) triggered by 34.65.212.198 (CH/Switzerland/198.212.65.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇲🇾 Rizzy	2026-09-01 04:42:00 (1 day ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-01 04:21:11 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 64.89.163.180

🇨🇦 23.162.56.83

🇩🇪 213.209.159.230

🇧🇷 205.210.31.232

🇧🇪 198.235.24.248

🇺🇸 195.184.76.76

🇭🇰 152.32.135.214

🇺🇸 149.88.105.73

🇺🇸 131.226.2.85

🇯🇵 124.45.31.57

🇨🇳 119.181.56.178

🇫🇷 91.231.89.31

🇫🇷 91.231.89.11

🇲🇿 41.221.64.226

🇺🇸 34.169.51.252

🇦🇲 5.77.252.205

🇪🇸 193.125.19.245

🇺🇸 162.216.149.186

🇧🇷 131.0.190.152

🇹🇭 101.108.97.38