JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.95.212.189

34.95.212.189 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	189.212.95.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.95.212.189

Whois 34.95.212.189

IP Abuse Reports for 34.95.212.189:

This IP address has been reported a total of 45 times from 26 distinct sources. 34.95.212.189 was first reported on September 15th 2026, and the most recent report was 53 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 rh24	2026-09-18 04:05:05 (53 minutes ago)	(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.95.212.189 (BR/Brazil/189.212.95.34.bc ... show more (secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.95.212.189 (BR/Brazil/189.212.95.34.bc.googleusercontent.com) show less	Hacking
🇩🇪 todix	2026-09-17 22:14:59 (6 hours ago)	Web App Attack Exploid from 34.95.212.189	Web App Attack
🇳🇱 e.fierstra	2026-09-17 22:01:05 (6 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 4server	2026-09-17 21:56:31 (7 hours ago)	[ThuSep1723:56:25.5299872026][security2:error][pid2727317:tid2727421][client34.95.212.189:0]ModSecur ... show more [ThuSep1723:56:25.5299872026][security2:error][pid2727317:tid2727421][client34.95.212.189:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"webmail.kiteinvest.ch\"][uri\"/.env.bak\"][unique_id\"aqxiCYjju9-mY4aYERfZZgAAANQ\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 dbmwebdesign	2026-09-17 18:15:21 (10 hours ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
Anonymous	2026-09-17 14:20:39 (14 hours ago)	[Thu Sep 17 16:20:38.473354 2026] [php:error] [pid 1765812:tid 1765812] [client 34.95.212.189:37176] ... show more [Thu Sep 17 16:20:38.473354 2026] [php:error] [pid 1765812:tid 1765812] [client 34.95.212.189:37176] script '/var/www/webmail/phpinfo.php' not found or unable to stat ... show less	Brute-Force
🇩🇪 FD-IX	2026-09-17 04:46:21 (1 day ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-09-17 03:05:32 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
🇩🇪 rh24	2026-09-17 02:54:56 (1 day ago)	(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.95.212.189 (BR/Brazil/189.212.95.34.bc ... show more (secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.95.212.189 (BR/Brazil/189.212.95.34.bc.googleusercontent.com) show less	Hacking
🇩🇪 itsolon	2026-09-16 20:58:03 (1 day ago)	[16/Sep/2026:22:58:02 +0200] 178959228231.071427 34.95.212.189 43304 217.154.7.177 443 [16/Sep/2026: ... show more [16/Sep/2026:22:58:02 +0200] 178959228231.071427 34.95.212.189 43304 217.154.7.177 443 [16/Sep/2026:22:58:02 +0200] 178959228266.437986 34.95.212.189 43304 217.154.7.177 443 [16/Sep/2026:22:58:02 +0200] 178959228233.909529 34.95.212.189 43304 217.154.7.177 443 [16/Sep/2026:22:58:03 +0200] 178959228392.622412 34.95.212.189 43304 217.154.7.177 443 [16/Sep/2026:22:58:03 +0200] 178959228378.790203 34.95.212.189 43304 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇮🇹 VHosting	2026-09-16 17:45:03 (1 day ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇱 Alt255	2026-09-16 17:33:20 (1 day ago)	[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.95.212.189 - - [16/Sep/2026:19:33:13 +0200] "GET /.git/config HTTP/1.1" 301 630 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-09-16 17:01:12 (1 day ago)	Bot / seems abusive / Apache connections: 43	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇩🇪 svr	2026-09-16 15:04:52 (1 day ago)	HC-Flood Web Scanner	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 14:50:40 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.95.212.189 (189.212.95.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.95.212.189 (189.212.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 10:50:36.415374 2026] [security2:error] [pid 10731:tid 10731] [client 34.95.212.189:58098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.iconbizpromo.com"] [uri "/.git/config"] [unique_id "aqqsvHMgr0WEZVOYafLUoAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 219.146.75.30

🇩🇪 213.209.159.241

🇺🇸 205.210.31.84

🇮🇩 202.58.196.145

🇺🇸 172.174.235.111

🇨🇳 122.158.10.155

🇨🇳 121.46.239.203

🇧🇩 115.69.210.233

🇧🇪 104.155.23.46

🇬🇧 35.203.210.112

🇧🇷 16.5.0.236

🇨🇴 206.1.82.8

🇦🇷 179.40.42.136

🇺🇸 172.234.218.210

🇦🇺 123.243.126.39

🇸🇮 102.220.161.79

🇺🇸 66.132.172.237

🇺🇸 45.56.94.61

🇬🇧 193.32.209.243

🇦🇷 181.85.119.52