JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.95.225.47

34.95.225.47 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	47.225.95.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.95.225.47

Whois 34.95.225.47

IP Abuse Reports for 34.95.225.47:

This IP address has been reported a total of 45 times from 36 distinct sources. 34.95.225.47 was first reported on October 15th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 copestack	2026-10-16 16:00:10 (1 hour ago)	Automated detection: HTTP environment file enumeration (.env credential harvesting). 1 decisions on ... show more Automated detection: HTTP environment file enumeration (.env credential harvesting). 1 decisions on ov-4e5936. show less	Web App Attack
🇬🇧 consul.to	2026-10-16 15:28:40 (1 hour ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 Phenix Info	2026-10-16 09:21:03 (7 hours ago)	SmallGuard.fr/Prestashop Massive 403	Web App Attack
🇫🇮 Christopher Hughes	2026-10-16 09:12:33 (8 hours ago)	34.95.225.47 - - [16/Oct/2026:10:12:33 +0100] "GET /.config/gcloud/application_default_credentials.j ... show more 34.95.225.47 - - [16/Oct/2026:10:12:33 +0100] "GET /.config/gcloud/application_default_credentials.json HTTP/2.0" 200 6016 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Web App Attack
🇺🇸 countdownmail.com	2026-10-16 09:08:02 (8 hours ago)	Intensive SQL injection attacks with multiple payload variations. Credential brute-force attempts wi ... show more Intensive SQL injection attacks with multiple payload variations. Credential brute-force attempts with multiple failed login requests. Extensive web application scanning for vulnerabilities. Automated attack tool detected. Sample: /*.auto.tfvars. show less	Web App Attack Bad Web Bot SQL Injection Brute-Force
🇪🇸 robotstxt	2026-10-16 08:00:58 (9 hours ago)	34.95.225.47 - - [16/Oct/2026:08:00:51 +0000] "GET /robots.txt HTTP/2.0" 403 118 "https://cosasdelin ... show more 34.95.225.47 - - [16/Oct/2026:08:00:51 +0000] "GET /robots.txt HTTP/2.0" 403 118 "https://cosasdelinux.com/robots.txt" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" edge="34.95.225.47" 34.95.225.47 - - [16/Oct/2026:08:00:51 +0000] "GET /wp-content/cache/autoptimize/js/autoptimize_9db7c934875e12ad17c66c4a66641ded.js HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "-" edge="34.95.225.47" 34.95.225.47 - - [16/Oct/2026:08:00:51 +0000] "GET /?3ca8ad=8fca654cfb.js& HTTP/2.0" 403 2 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "-" edge="34.95.225.47" 34.95.225.47 - - [16/Oct/2026:08:00:51 +0000] "GET /wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js HTTP/2.0" 403 ... show less	Web App Attack
🇫🇷 masterguru	2026-10-16 07:14:48 (10 hours ago)	HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ... show more HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197) show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-16 03:24:44 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.95.225.47 (47.225.95.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.95.225.47 (47.225.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 23:24:37.199812 2026] [security2:error] [pid 25571:tid 25571] [client 34.95.225.47:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cloudex.link"] [uri "/static//home/user/.env"] [unique_id "atGY9fu40RMyxWB_5X3ksAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Christopher Hughes	2026-10-16 03:14:08 (14 hours ago)	34.95.225.47 - - [16/Oct/2026:04:14:07 +0100] "GET /..%2f..%2f.env HTTP/2.0" 404 224 "-" "Mozilla/5. ... show more 34.95.225.47 - - [16/Oct/2026:04:14:07 +0100] "GET /..%2f..%2f.env HTTP/2.0" 404 224 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Web App Attack
🇲🇾 Rizzy	2026-10-16 02:56:42 (14 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇳🇱 ConsulHosting	2026-10-16 00:21:35 (16 hours ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇩🇪 paissangroup	2026-10-15 23:08:02 (18 hours ago)	Multiple WAF Violations	Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-10-15 22:06:59 (19 hours ago)	Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,ice02,mx02,wa01,w ... show more Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,ice02,mx02,wa01,wa02] show less	Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-10-15 21:58:15 (19 hours ago)	excessive HTTP 404 errors	Bad Web Bot
Anonymous	2026-10-15 21:46:05 (19 hours ago)	Web application attack: grafana cve 2021 43798; Web application attack: http cve 2021 41773; Probing ... show more Web application attack: grafana cve 2021 43798; Web application attack: http cve 2021 41773; Probing for exposed secret / credential files; Web application attack: http sensitive files; Web application attack: http path traversal probing show less	Hacking Web App Attack

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 111.17.199.57

🇺🇸 20.65.170.72

🇸🇬 2a12:f541:4ffa:a6f4:e155:2ee5:c91b:e7f3

🇳🇱 195.178.110.18

🇦🇲 178.160.230.97

🇳🇬 165.154.11.140

🇺🇸 107.172.15.131

🇸🇪 104.23.221.54

🇿🇦 102.66.187.159

🇺🇸 100.50.24.221

🇳🇱 77.239.124.149

🇺🇸 45.63.4.69

🇳🇱 200.162.146.170

🇷🇺 195.19.123.38

🇨🇳 183.130.198.16

🇲🇽 177.229.197.38

🇺🇸 147.185.132.162

🇮🇳 144.31.146.233

🇸🇬 121.6.96.149

🇧🇩 103.131.101.114