JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.95.49.148

34.95.49.148 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	148.49.95.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇨🇦 Canada
City	Montreal, Quebec

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.95.49.148

Whois 34.95.49.148

IP Abuse Reports for 34.95.49.148:

This IP address has been reported a total of 31 times from 24 distinct sources. 34.95.49.148 was first reported on September 15th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 07:32:29 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.95.49.148 (148.49.95.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.95.49.148 (148.49.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 03:32:25.192107 2026] [security2:error] [pid 19731:tid 19731] [client 34.95.49.148:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.swarnar.com"] [uri "/.git/config"] [unique_id "aqpGCd1n3RHMb4XDWPa6JQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-16 07:03:12 (7 hours ago)	Bot / seems abusive / Apache connections: 23	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇳🇱 GabrielJST	2026-09-16 06:36:37 (7 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.95.49.148 (CA/Canada/148.49.95.34.bc ... show more (mod_security) mod_security triggered on hostname [redacted] 34.95.49.148 (CA/Canada/148.49.95.34.bc.googleusercontent.com): (CF_ENABLE) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-09-16 06:09:23 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.95.49.148 (148.49.95.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.95.49.148 (148.49.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 02:09:17.817188 2026] [security2:error] [pid 14426:tid 14426] [client 34.95.49.148:35758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.sunsettrailsardmore.com"] [uri "/.git/config"] [unique_id "aqoyjS0NsUBQR4sIj4dyYQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Dunham Support	2026-09-16 05:57:59 (8 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.95.49.148 (CA/Canada/148.49.95.34.bc ... show more (mod_security) mod_security triggered on hostname [redacted] 34.95.49.148 (CA/Canada/148.49.95.34.bc.googleusercontent.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-09-16 05:48:14 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.95.49.148 (148.49.95.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.95.49.148 (148.49.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 01:48:09.472692 2026] [security2:error] [pid 19748:tid 19748] [client 34.95.49.148:41044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.summitmediawv.com"] [uri "/.git/config"] [unique_id "aqotmYeAy_eV4x1M3QKwwQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-09-16 04:36:00 (9 hours ago)	[WedSep1606:35:57.8299862026][security2:error][pid28480:tid28524][client34.95.49.148:0]ModSecurity:A ... show more [WedSep1606:35:57.8299862026][security2:error][pid28480:tid28524][client34.95.49.148:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"webmail.studio-portale.ch\"][uri\"/.env.bak\"][unique_id\"aqocrSsq4dwZjDwxBmTqpQAAAEc\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 03:45:37 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.95.49.148 (148.49.95.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.95.49.148 (148.49.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 23:45:31.293926 2026] [security2:error] [pid 29292:tid 29443] [client 34.95.49.148:41218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.stonyp.com"] [uri "/.git/config"] [unique_id "aqoQ2-YLLvhvbwQjGMzTkQAAAhI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 e.fierstra	2026-09-16 01:46:15 (12 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
Anonymous	2026-09-16 01:39:27 (12 hours ago)	[ns67.kdns.gr] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log,/var/log/nginx/access ... show more [ns67.kdns.gr] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log,/var/log/nginx/access.log; samples=/.git/config \| /.env \| /.env.local show less	Hacking Web App Attack
🇩🇪 SwinT	2026-09-16 01:00:09 (13 hours ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇩🇪 gadix	2026-09-16 00:58:10 (13 hours ago)	[16/Sep/2026:02:58:09.712756 +0200] aqnpoWbOQXDPYsrNrjvOlgAAAAY 34.95.49.148 52234 127.0.0.1 7081 [1 ... show more [16/Sep/2026:02:58:09.712756 +0200] aqnpoWbOQXDPYsrNrjvOlgAAAAY 34.95.49.148 52234 127.0.0.1 7081 [16/Sep/2026:02:58:09.925303 +0200] aqnpofgfa6YFCdoQa1rh2QAAAAA 34.95.49.148 52256 127.0.0.1 7081 [16/Sep/2026:02:58:10.022464 +0200] aqnpoueK9du4iNuqPLOsnAAAAAU 34.95.49.148 52260 127.0.0.1 7081 ... show less	Web App Attack
🇵🇱 TaKeN	2026-09-16 00:10:32 (14 hours ago)	Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application pr ... show more Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 1 matching blocked event(s) between 2026-09-16T02:10:32+02:00 and 2026-09-16T02:10:32+02:00. Sample requested paths: /.env.old. show less	Web App Attack Hacking
🇩🇪 akasolutions.de	2026-09-15 23:57:10 (14 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.95.49.148 (CA/Canada/148.49.95.34.bc ... show more (mod_security) mod_security triggered on hostname [redacted] 34.95.49.148 (CA/Canada/148.49.95.34.bc.googleusercontent.com) show less	SQL Injection
🇩🇪 Hazzard	2026-09-15 23:06:49 (15 hours ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇯 109.75.49.163

🇮🇩 2001:448a:5040:485a:ad06:964:4d82:302c

🇹🇯 217.8.45.72

🇺🇿 213.230.93.107

🇳🇴 193.90.12.230

🇫🇷 185.101.21.163

🇺🇸 172.236.228.115

🇫🇮 170.168.175.125

🇨🇦 158.69.117.45

🇩🇿 154.255.103.173

🇫🇷 145.223.47.28

🇻🇪 138.122.7.194

🇨🇳 113.142.69.96

🇦🇷 104.238.7.127

🇺🇸 104.206.128.66

🇹🇬 102.208.105.138

🇺🇿 84.54.72.63

🇰🇿 67.209.139.180

🇺🇸 66.29.156.149

🇳🇱 51.159.91.169