JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.89.249.216

34.89.249.216 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 67%: ?

67%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	216.249.89.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.89.249.216

Whois 34.89.249.216

IP Abuse Reports for 34.89.249.216:

This IP address has been reported a total of 14 times from 13 distinct sources. 34.89.249.216 was first reported on September 15th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-17 22:00:39 (3 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-16. show less	Web App Attack SSH Hacking
🇳🇱 Alt255	2026-09-16 05:08:12 (5 days ago)	[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.89.249.216 - - [16/Sep/2026:07:08:03 +0200] "GET /.git/config HTTP/1.1" 301 800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 Melle	2026-09-16 02:16:34 (5 days ago)	Blocked by CrowdSec \| Scenario: crowdsecurity/http-sensitive-files \| 34.89.249.216 triggered 5 event ... show more Blocked by CrowdSec \| Scenario: crowdsecurity/http-sensitive-files \| 34.89.249.216 triggered 5 events \| Detected: 2026-09-16T02:16:32.887414457Z show less	Web App Attack Hacking
Anonymous	2026-09-16 02:02:12 (5 days ago)	Bot detected scanning for vulnerable pages	Port Scan
🇳🇱 Savvii	2026-09-16 01:34:57 (5 days ago)	20 attempts against mh-misbehave-ban on ship	Brute-Force Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-09-16 01:30:03 (5 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: staging.budyn.top \| URI: /.git/config \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-16 00:25:04 (5 days ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
Anonymous	2026-09-16 00:05:09 (5 days ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇨🇦 Anytech	2026-09-15 23:38:18 (5 days ago)	Blocked by ConnMonitor	Web App Attack
🇮🇹 CoreTech srl	2026-09-15 22:58:14 (5 days ago)	CloudLinux/Plesk alert - host=cloudlinux dominio=dlmtappi.com ip=34.89.249.216 richieste=130 rischio ... show more CloudLinux/Plesk alert - host=cloudlinux dominio=dlmtappi.com ip=34.89.249.216 richieste=130 rischio=ALTO score=15 motivi=molte_richieste,diverse_uri_uniche,molti_404,path_sospetti,api,poco_statico,dinamico cat_id=21,19 periodo=10min show less	Web App Attack Bad Web Bot
Anonymous	2026-09-15 16:30:01 (5 days ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 12:31:37 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.89.249.216 (216.249.89.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.89.249.216 (216.249.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 08:31:31.736359 2026] [security2:error] [pid 25926:tid 25926] [client 34.89.249.216:52336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powerlinemagazine.com"] [uri "/.git/config"] [unique_id "aqk6o6qb3ztJvpbQ1Z1q_AAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 11:04:40 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.89.249.216 (216.249.89.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.89.249.216 (216.249.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 07:04:32.314891 2026] [security2:error] [pid 15885:tid 15885] [client 34.89.249.216:44402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powerkiteforum.com"] [uri "/.git/config"] [unique_id "aqkmQJY8givb_5MN03DdyAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-15 06:11:34 (5 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.89.249.216 (DE/Germany/216.249.89.34 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.89.249.216 (DE/Germany/216.249.89.34.bc.googleusercontent.com) show less	SQL Injection

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a940:302:118:0:19::

🇧🇪 198.235.24.181

🇧🇬 194.68.225.42

🇮🇩 163.7.3.241

🇧🇷 152.32.199.115

🇺🇸 135.119.17.197

🇫🇷 91.196.152.92

🇳🇱 77.239.124.175

🇩🇪 69.5.169.57

🇺🇸 64.62.197.108

🇲🇾 49.125.203.165

🇨🇦 38.192.46.97

🇨🇳 36.25.43.202

🇹🇷 31.223.87.101

🇺🇸 20.46.235.176

🇰🇷 14.41.26.141

🇺🇸 216.25.89.145

🇧🇷 205.210.31.216

🇺🇸 162.216.149.141

🇺🇸 158.94.187.205