JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.89.157.93

34.89.157.93 was found in our database!

This IP was reported 53 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	93.157.89.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.89.157.93

Whois 34.89.157.93

IP Abuse Reports for 34.89.157.93:

This IP address has been reported a total of 53 times from 42 distinct sources. 34.89.157.93 was first reported on September 10th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 leo1305	2026-09-15 05:34:41 (4 days ago)	CrowdSec detection \| scenario: http-probing	Port Scan Web App Attack
🇦🇺 Bay13	2026-09-15 04:03:01 (4 days ago)	CrowdSec:custom/http-sensitive-files	Web App Attack
🇩🇪 FD-IX	2026-09-15 03:31:40 (4 days ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-09-15 00:57:05 (4 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 thedreamer.nl	2026-09-15 00:48:00 (4 days ago)	34.89.157.93 - - [15/Sep/2026:02:46:07 +0200] "GET /.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Ma ... show more 34.89.157.93 - - [15/Sep/2026:02:46:07 +0200] "GET /.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "DE" "Frankfurt am Main" "50.11690" "8.68370" 34.89.157.93 - - [15/Sep/2026:02:46:08 +0200] "GET /.env HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "DE" "Frankfurt am Main" "50.11690" "8.68370" 34.89.157.93 - - [15/Sep/2026:02:46:09 +0200] "GET /.env.local HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "DE" "Frankfurt am Main" "50.11690" "8.68370" 34.89.157.93 - - [15/Sep/2026:02:46:09 +0200] "GET /.env.production HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "DE" "Frankfurt am Main" "50.11690" "8.68370" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-09-15 00:08:42 (4 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 itsolon	2026-09-14 23:18:28 (4 days ago)	[15/Sep/2026:01:18:27 +0200] 178942790745.653482 34.89.157.93 0 217.154.7.177 443 [15/Sep/2026:01:18 ... show more [15/Sep/2026:01:18:27 +0200] 178942790745.653482 34.89.157.93 0 217.154.7.177 443 [15/Sep/2026:01:18:27 +0200] 178942790727.060962 34.89.157.93 0 217.154.7.177 443 [15/Sep/2026:01:18:27 +0200] 178942790758.925556 34.89.157.93 0 217.154.7.177 443 [15/Sep/2026:01:18:27 +0200] 178942790725.193341 34.89.157.93 0 217.154.7.177 443 [15/Sep/2026:01:18:27 +0200] 178942790755.783555 34.89.157.93 0 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇳🇱 Site.eu	2026-09-14 16:03:10 (5 days ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-09-14 15:10:14 (5 days ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-14 14:16:56 (5 days ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇩🇪 4server	2026-09-14 13:21:24 (5 days ago)	[MonSep1415:21:21.2083662026][security2:error][pid1864376:tid1864483][client34.89.157.93:0]ModSecuri ... show more [MonSep1415:21:21.2083662026][security2:error][pid1864376:tid1864483][client34.89.157.93:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\)\\|[\<\>]\\\\\\\\$.\\\\\\\\\$\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$$\(41\271$\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require$child_process$.execsync$echo\$\(\(41\271$\)\\|base64-w0\).tostring.trimthrowobject.assign$newerror\(next_redirect${digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"volcano.ch\"][uri\"/\"][unique_id\"aqf00cQ9vIwZaLiT0v25mwAAAQY\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 Allolatr	2026-09-14 03:44:53 (5 days ago)	Sep 14 05:44:52 [redacted] j443: ::ffff:34.89.157.93 [redacted].com "POST / HTTP/1.1" 405 562 "-" "M ... show more Sep 14 05:44:52 [redacted] j443: ::ffff:34.89.157.93 [redacted].com "POST / HTTP/1.1" 405 562 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" Sep 14 05:44:53 [redacted] j443: ::ffff:34.89.157.93 [redacted].com "POST / HTTP/1.1" 400 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" Sep 14 05:44:53 [redacted] j443: ::ffff:34.89.157.93 [redacted].com "GET /.git/config HTTP/1.1" 400 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇩🇪 EGP Abuse Dept	2026-09-14 03:02:43 (5 days ago)	Scanning for web/db/file exploits on www.vttb.nl	SQL Injection Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-09-14 02:09:14 (5 days ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇦 URAN Publishing Service	2026-09-14 01:56:17 (5 days ago)	[14/Sep/2026:04:56:17 +0300] -- 34.89.157.93 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/ ... show more [14/Sep/2026:04:56:17 +0300] -- 34.89.157.93 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1 show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 53 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇷 200.105.99.79

🇺🇸 185.223.152.225

🇺🇸 165.154.182.179

🇺🇸 163.227.179.121

🇨🇴 153.67.115.239

🇺🇸 136.116.134.196

🇳🇱 94.154.46.248

🇨🇦 51.79.86.230

🇬🇧 35.203.211.168

🇬🇧 35.203.211.3

🇭🇰 2602:80d:1004::15

🇧🇪 198.235.24.185

🇧🇪 198.235.24.172

🇩🇪 194.88.98.101

🇩🇪 193.124.20.228

🇨🇴 186.148.183.47

🇸🇰 185.188.239.36

🇺🇸 172.171.233.230

🇺🇸 159.223.206.7

🇨🇳 121.40.41.46