JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.85.112.226

34.85.112.226 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	226.112.85.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.85.112.226

Whois 34.85.112.226

IP Abuse Reports for 34.85.112.226:

This IP address has been reported a total of 53 times from 44 distinct sources. 34.85.112.226 was first reported on October 18th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 thedreamer.nl	2026-10-22 23:22:18 (4 hours ago)	34.85.112.226 - - [23/Oct/2026:01:19:32 +0200] "GET /.git/config HTTP/1.1" 404 145 "-" "Mozilla/5.0 ... show more 34.85.112.226 - - [23/Oct/2026:01:19:32 +0200] "GET /.git/config HTTP/1.1" 404 145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "JP" "Tokyo" "35.68930" "139.68990" 34.85.112.226 - - [23/Oct/2026:01:19:33 +0200] "GET /.env HTTP/1.1" 404 145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "JP" "Tokyo" "35.68930" "139.68990" 34.85.112.226 - - [23/Oct/2026:01:19:33 +0200] "GET /.env.local HTTP/1.1" 404 145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "JP" "Tokyo" "35.68930" "139.68990" 34.85.112.226 - - [23/Oct/2026:01:19:34 +0200] "GET /.env.production HTTP/1.1" 404 145 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "JP" "Tokyo" "35.68930" "139.68990" 34.85.112.226 - - [23/Oct/2026:01:19:34 +0200] "GET /.en ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇦🇹 SchiWaGoA	2026-10-22 23:02:11 (5 hours ago)	fail2ban npm-scanner: Web vulnerability scanning (probing for .env, .git, phpinfo and similar files)	Web App Attack Bad Web Bot
🇩🇪 todix	2026-10-22 23:01:51 (5 hours ago)	"GET /.git/config HTTP/1.1" 403 287 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit ... show more "GET /.git/config HTTP/1.1" 403 287 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-10-22 21:47:05 (6 hours ago)	34.85.112.226 - - [22/Oct/2026:15:47:04 -0600] "GET /.git/config HTTP/1.1" 300 4478 "-" "Mozilla/5.0 ... show more 34.85.112.226 - - [22/Oct/2026:15:47:04 -0600] "GET /.git/config HTTP/1.1" 300 4478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 MatCat	2026-10-22 21:05:11 (7 hours ago)	Banned by fail2ban: apache-webprobe	Port Scan Bad Web Bot
🇩🇪 Grossmann-Gruppe	2026-10-22 20:22:13 (7 hours ago)	Plesk Fail2Ban: plesk-modsecurity	Hacking Brute-Force
🇦🇺 AWW-Admin	2026-10-22 19:10:31 (9 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.85.112.226 (JP/Japan/226.112.85.34.b ... show more (mod_security) mod_security triggered on hostname [redacted] 34.85.112.226 (JP/Japan/226.112.85.34.bc.googleusercontent.com) show less	SQL Injection
🇳🇱 Site.eu	2026-10-22 18:52:16 (9 hours ago)	Excessive 404/403 errors	Brute-Force
🇦🇺 Starburst SysOp Team	2026-10-22 12:58:46 (15 hours ago)	Malware host detected by rbl.malware.expert. RBL lookup of 226.112.85.34.rbl.malware.expert succeede ... show more Malware host detected by rbl.malware.expert. RBL lookup of 226.112.85.34.rbl.malware.expert succeeded at REMOTE_ADDR. (400010-syd2-4) show less	Hacking
Anonymous	2026-10-22 12:08:34 (16 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.85.112.226 (JP/Japan/226.112.85.34.b ... show more (mod_security) mod_security triggered on hostname [redacted] 34.85.112.226 (JP/Japan/226.112.85.34.bc.googleusercontent.com) show less	SQL Injection
🇳🇱 e.fierstra	2026-10-22 12:08:11 (16 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-22 10:31:32 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.85.112.226 (226.112.85.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.85.112.226 (226.112.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 06:31:27.718882 2026] [security2:error] [pid 27040:tid 27040] [client 34.85.112.226:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.sahinozalit.com"] [uri "/.git/config"] [unique_id "atnl_xZOvZVZuTse_TatEAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-22 07:22:36 (20 hours ago)	[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.85.112.226 - - [22/Oct/2026:09:22:31 +0200] "GET /.git/config HTTP/1.1" 301 664 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-10-22 05:50:32 (22 hours ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-10-22 01:22:33 (1 day ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 212.73.148.22

🇨🇳 203.132.60.203

🇹🇼 198.235.24.117

🇹🇳 196.235.161.118

🇧🇷 186.219.139.188

🇳🇱 185.136.15.81

🇺🇸 147.185.132.32

🇨🇦 142.160.234.189

🇳🇱 138.226.239.91

🇧🇩 103.172.113.196

🇫🇷 91.231.89.2

🇺🇸 91.230.168.94

🇳🇱 77.239.124.68

🇳🇱 77.239.124.49

🇺🇸 54.235.16.37

🇧🇪 35.205.254.119

🇺🇸 192.255.229.99

🇮🇳 180.188.253.150

🇪🇨 179.49.27.106

🇺🇸 157.230.0.48