JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.89.167.152

34.89.167.152 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 72%: ?

72%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	152.167.89.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.89.167.152

Whois 34.89.167.152

IP Abuse Reports for 34.89.167.152:

This IP address has been reported a total of 14 times from 13 distinct sources. 34.89.167.152 was first reported on September 15th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-09-16 00:15:34 (8 hours ago)	Multiple WAF Violations	Web App Attack
🇩🇪 TheDjRider	2026-09-15 21:18:19 (11 hours ago)	CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban tri ... show more CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-09-15T21:17:57.645126707Z. Context: http_status=302 show less	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-15 19:01:10 (14 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-09-15 17:07:33 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.89.167.152 (152.167.89.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.89.167.152 (152.167.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:07:26.697587 2026] [security2:error] [pid 2495:tid 2495] [client 34.89.167.152:38834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "onyxcc.com"] [uri "/.git/config"] [unique_id "aql7TmvMmAeaeJd2hLWKRgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 Saec	2026-09-15 16:28:53 (16 hours ago)	Jarvis auto-ban: Honeypot /.git/config via rolls.saec.me [DE] ASN:Google LLC	Port Scan Web App Attack
🇺🇸 Lee Daniel	2026-09-15 14:34:01 (18 hours ago)	34.89.167.152 - - [15/Sep/2026:10:34:00 -0400] "GET /.env HTTP/1.1" 403 6365 "-" "Mozilla/5.0 (Macin ... show more 34.89.167.152 - - [15/Sep/2026:10:34:00 -0400] "GET /.env HTTP/1.1" 403 6365 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-15 11:42:37 (21 hours ago)	Excessive 404/403 errors	Brute-Force
🇩🇪 grassau.com	2026-09-15 10:00:47 (23 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.89.167.152 (DE/Germany/Hesse/Frankfu ... show more (mod_security) mod_security triggered on hostname [redacted] 34.89.167.152 (DE/Germany/Hesse/Frankfurt am Main/152.167.89.34.bc.googleusercontent.com) show less	SQL Injection
Anonymous	2026-09-15 09:49:56 (23 hours ago)	34.89.167.152 rolistore.com - [15/Sep/2026:03:49:53 -0600] "GET / HTTP/1.1" 403 158 "-" "Mozilla/5.0 ... show more 34.89.167.152 rolistore.com - [15/Sep/2026:03:49:53 -0600] "GET / HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"\n34.89.167.152 rolistore.com - [15/Sep/2026:03:49:53 -0600] "POST / HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"\n34.89.167.152 rolistore.com - [15/Sep/2026:03:49:53 -0600] "POST / HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"\n34.89.167.152 rolistore.com - [15/Sep/2026:03:49:54 -0600] "POST / HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"\n34.89.167.152 rolistore.com - [15/Sep/2026:03:49:54 -0600] "GET /.git/config HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/1 show less	DDoS Attack Web App Attack
🇮🇹 VHosting	2026-09-15 06:10:04 (1 day ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 05:47:48 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.89.167.152 (152.167.89.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.89.167.152 (152.167.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 01:47:37.061183 2026] [security2:error] [pid 13159:tid 13159] [client 34.89.167.152:44266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ontrek.com"] [uri "/.git/config"] [unique_id "aqjb-bFKhYvy4w5xbwSsCAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-15 05:35:01 (1 day ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇳🇱 Alt255	2026-09-15 05:22:36 (1 day ago)	[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.89.167.152 - - [15/Sep/2026:07:22:36 +0200] "GET /.git/config HTTP/1.1" 404 13492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-09-15 02:52:14 (1 day ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 196.251.121.125

🇩🇪 196.251.121.123

🇺🇸 195.184.76.188

🇫🇮 178.20.210.151

🇷🇴 92.118.39.14

🇺🇦 91.208.194.40

🇹🇷 91.93.57.195

🇬🇷 79.107.113.233

🇵🇰 72.255.19.143

🇫🇷 62.210.142.159

🇵🇰 59.103.100.211

🇻🇳 42.96.33.3

🇮🇳 20.235.157.149

🇬🇧 206.189.30.214

🇧🇷 200.150.115.230

🇹🇷 178.210.170.115

🇺🇸 162.216.150.241

🇺🇸 162.216.149.14

🇸🇬 138.2.69.249

🇩🇪 130.12.182.193