JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.88.195.197

34.88.195.197 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 72%: ?

72%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	197.195.88.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇫🇮 Finland
City	Lappeenranta, South Karelia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.88.195.197

Whois 34.88.195.197

IP Abuse Reports for 34.88.195.197:

This IP address has been reported a total of 15 times from 12 distinct sources. 34.88.195.197 was first reported on August 30th 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇿 Antinson	2026-09-01 13:37:08 (15 hours ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇩🇪 Hazzard	2026-09-01 12:28:39 (16 hours ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
🇫🇮 paissangroup	2026-09-01 12:28:27 (16 hours ago)	Multiple WAF Violations	Web App Attack
🇩🇪 marten_o	2026-09-01 12:21:12 (16 hours ago)	34.88.195.197 - - [01/Sep/2026:14:21:12 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 404 4535 "-" "Mozilla ... show more 34.88.195.197 - - [01/Sep/2026:14:21:12 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 404 4535 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 330 4904 ... show less	Web App Attack
🇳🇱 Site.eu	2026-09-01 11:55:33 (17 hours ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-09-01 09:44:28 (19 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.88.195.197 (197.195.88.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.88.195.197 (197.195.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:44:23.086424 2026] [security2:error] [pid 15572:tid 15572] [client 34.88.195.197:47440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tyllo.com"] [uri "/.git/config"] [unique_id "apaed6p8tskga7wh3MH_gwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 09:04:50 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.88.195.197 (197.195.88.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.88.195.197 (197.195.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:04:43.981296 2026] [security2:error] [pid 11287:tid 11287] [client 34.88.195.197:50072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tylerdroneservices.com"] [uri "/.git/config"] [unique_id "apaVK5NcY3rhNXfH5hwO_wAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-01 07:37:57 (21 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)	Hacking Web App Attack
🇩🇪 Manuel Braeuer	2026-08-31 12:18:33 (1 day ago)	34.88.195.197 - - [31/Aug/2026:14:18:31 +0200] "GET /.git/config HTTP/1.1" 403 6263 "-" "Mozilla/5.0 ... show more 34.88.195.197 - - [31/Aug/2026:14:18:31 +0200] "GET /.git/config HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.88.195.197 - - [31/Aug/2026:14:18:32 +0200] "GET /.env HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.88.195.197 - - [31/Aug/2026:14:18:32 +0200] "GET /.env.local HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.88.195.197 - - [31/Aug/2026:14:18:32 +0200] "GET /.env.production HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.88.195.197 - - [31/Aug/2026:14:18:32 +0200] "GET /.env.staging HTTP/1.1" 403 6263 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/5 ... show less	Web App Attack
🇧🇪 Saec	2026-08-31 12:12:01 (1 day ago)	Jarvis auto-ban: CF top attacker on saec.me (25 hits, FI)	Port Scan Web App Attack
🇳🇱 Site.eu	2026-08-31 11:46:53 (1 day ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-08-31 10:24:32 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.88.195.197 (197.195.88.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.88.195.197 (197.195.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 06:24:25.234623 2026] [security2:error] [pid 5037:tid 5037] [client 34.88.195.197:45584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uphillfarmvt.com"] [uri "/.git/config"] [unique_id "apVWWQaM9P9MdcrEtEOhBwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇪 Jim Keir	2026-08-31 08:21:16 (1 day ago)	2026-08-31 08:21:16 34.88.195.197 File scanning, blocking 34.88.195.197 for 5 minutes	Web App Attack
🇵🇱 Budyn	2026-08-30 07:42:57 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: s.budyn.wtf \| URI: /.git/config \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-08-30 07:01:45 (2 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 189.126.91.107

🇺🇦 176.101.194.21

🇺🇸 159.89.228.57

🇨🇳 118.123.116.93

🇹🇼 111.70.29.124

🇮🇳 110.235.234.5

🇭🇰 103.56.115.187

🇺🇸 47.77.205.15

🇳🇱 45.156.128.165

🇩🇪 43.228.157.8

🇧🇪 34.156.162.254

🇧🇪 34.77.42.151

🇰🇷 14.46.87.209

🇺🇸 216.25.89.132

🇺🇸 205.210.31.77

🇹🇼 198.235.24.44

🇨🇳 183.92.112.21

🇫🇷 178.18.253.43

🇹🇭 110.164.130.199

🇮🇳 103.154.37.59