JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.94.131.149

34.94.131.149 was found in our database!

This IP was reported 66 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	149.131.94.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.94.131.149

Whois 34.94.131.149

IP Abuse Reports for 34.94.131.149:

This IP address has been reported a total of 66 times from 47 distinct sources. 34.94.131.149 was first reported on September 15th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 klaus_ph	2026-09-26 21:12:36 (3 days ago)	2026-09-25 20:51:14,683 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.94.131.149 .. ... show more 2026-09-25 20:51:14,683 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.94.131.149 ... show less	Bad Web Bot
🇩🇪 klaus_ph	2026-09-23 12:04:17 (1 week ago)	2026-09-22 23:59:07,573 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.94.131.149 .. ... show more 2026-09-22 23:59:07,573 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.94.131.149 ... show less	Bad Web Bot
🇳🇱 Site.eu	2026-09-22 04:58:52 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 JustMeHere	2026-09-21 19:10:39 (1 week ago)	[Mon Sep 21 15:10:35.000580 2026] [security2:error] [pid 43224:tid 43268] [client 34.94.131.149:4388 ... show more [Mon Sep 21 15:10:35.000580 2026] [security2:error] [pid 43224:tid 43268] [client 34.94.131.149:43886] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 55)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "vpn.yorknation.com"] [uri "/"] [unique_id "arGBKuVAhfCN56au3l2ZGwAAARA"] ... show less	Web App Attack
🇺🇸 NeverBehave	2026-09-21 18:47:51 (1 week ago)	[fail2ban] service ocserv jail	Brute-Force Web App Attack
🇨🇦 Vianpyro	2026-09-21 17:32:32 (1 week ago)	Honeypot: 12 request(s) in 0 min. Paths: /, /.env, /.env.local, /.env.production, /.git/config. Meth ... show more Honeypot: 12 request(s) in 0 min. Paths: /, /.env, /.env.local, /.env.production, /.git/config. Method(s): GET, POST. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13. ASN: 396982 (Google LLC). show less	Hacking Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-09-21 17:09:47 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vpn.sweetpuddingtrap.online \| URI: /.git/config \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 dot.mg	2026-09-20 09:29:02 (1 week ago)	Bad behaviour	Web Spam
Anonymous	2026-09-20 08:45:40 (1 week ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-09-20 07:29:06 (1 week ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇪🇸 robotstxt	2026-09-19 12:10:20 (1 week ago)	34.94.131.149 - - [19/Sep/2026:12:09:23 +0000] "GET /.env HTTP/1.1" 403 44667 "-" "Mozilla/5.0 (X11; ... show more 34.94.131.149 - - [19/Sep/2026:12:09:23 +0000] "GET /.env HTTP/1.1" 403 44667 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 34.94.131.149 - - [19/Sep/2026:12:09:23 +0000] "GET /.env.local HTTP/1.1" 403 44667 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 34.94.131.149 - - [19/Sep/2026:12:09:24 +0000] "GET /.env.production HTTP/1.1" 403 44667 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 34.94.131.149 - - [19/Sep/2026:12:09:25 +0000] "GET /.env.staging HTTP/1.1" 403 44667 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 34.94.131.149 - - [19/Sep/2026:12:09:26 +0000] "GET /.env.development HTTP/1.1" 403 44525 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" ... show less	Web App Attack
🇳🇱 Site.eu	2026-09-19 12:02:49 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇪🇸 robotstxt	2026-09-19 11:35:24 (1 week ago)	34.94.131.149 - - [19/Sep/2026:11:35:19 +0000] "GET /.env HTTP/1.1" 403 24936 "-" "Mozilla/5.0 (Wind ... show more 34.94.131.149 - - [19/Sep/2026:11:35:19 +0000] "GET /.env HTTP/1.1" 403 24936 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 34.94.131.149 - - [19/Sep/2026:11:35:19 +0000] "GET /.env.local HTTP/1.1" 403 24936 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 34.94.131.149 - - [19/Sep/2026:11:35:20 +0000] "GET /.env.production HTTP/1.1" 403 24936 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 34.94.131.149 - - [19/Sep/2026:11:35:20 +0000] "GET /.env.staging HTTP/1.1" 403 24936 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 34.94.131.149 - - [19/Sep/2026:11:35:21 +0000] "GET /.env.development HTTP/1.1" 403 24936 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ... show less	Web App Attack
🇩🇪 LRob	2026-09-19 08:31:47 (1 week ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config (+1 more) \| 2026-09-19 08:31 UTC show less	Hacking Web App Attack
🇩🇪 neckaralb-admin.de	2026-09-19 06:52:39 (1 week ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack

Showing 1 to 15 of 66 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2001:41d0:303:1ee9::1

🇹🇭 223.206.225.126

🇦🇷 200.81.188.202

🇸🇰 178.143.41.4

🇺🇦 178.54.78.190

🇺🇸 172.90.128.97

🇫🇷 172.71.232.153

🇺🇸 129.121.139.111

🇺🇸 129.121.98.135

🇺🇸 107.150.111.212

🇳🇱 104.23.166.95

🇳🇱 91.92.42.240

🇳🇱 91.92.42.194

🇳🇴 85.11.187.35

🇷🇺 77.91.65.141

🇺🇸 74.94.234.151

🇸🇬 47.84.140.197

🇳🇱 45.148.10.152

🇸🇦 37.127.14.187

🇬🇪 212.58.120.66