JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.141.39.126

Activity Trending Down

Abuse Confidence Score

100% Critical

63 reports

49 reporters · latest 2 weeks ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 126.39.141.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

63 from 49 distinct reporters

First reported

October 12th 2026

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇩🇪 Germany 12 🇺🇸 United States of America 11 🇳🇱 Netherlands 10

Most common categories Web App Attack 44 Bad Web Bot 26 Brute-Force 22 Hacking 6 SQL Injection 4

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-10-15 04:33:35 (2 weeks ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇬🇧 openstrike.co.uk	2026-10-13 05:16:28 (3 weeks ago)	452 attacks on PHP URLs, VC URLs, password/key grabbing URLs, shell probes, env grabbing URLs (type 2), config grabbing URLs (type 2), directory traversals, env grabbing URLs: POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://inp ... show more 452 attacks on PHP URLs, VC URLs, password/key grabbing URLs, shell probes, env grabbing URLs (type 2), config grabbing URLs (type 2), directory traversals, env grabbing URLs: POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1 GET /.git/config HTTP/1.1 GET /.ssh/id_rsa HTTP/1.1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1 GET /static/../../../a/../../../../proc/self/environ HTTP/1.1 GET /secrets.yml HTTP/1.1 GET /..%2f..%2f.env HTTP/1.1 GET /static/../../../a/../../../../.env HTTP/1.1 show less	Web App Attack Hacking
🇨🇭 🇨🇭 Hosting	2026-10-13 05:10:23 (3 weeks ago)	Automated WAF report: 400-500 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
🇲🇽 octageeks.com	2026-10-13 04:23:27 (3 weeks ago)	Wordpress malicious attack:[octablocked]	Web App Attack
Anonymous	2026-10-12 20:05:03 (3 weeks ago)	Web Probe / Attack	Web App Attack
🇦🇹 SchiWaGoA	2026-10-12 18:54:28 (3 weeks ago)	fail2ban npm-scanner: Web vulnerability scanning (probing for .env, .git, phpinfo and similar files)	Web App Attack Bad Web Bot
🇩🇪 Hazzard	2026-10-12 17:27:55 (3 weeks ago)	(PERMBLOCK) 34.141.39.126 (DE/Germany/Hesse/Frankfurt am Main/126.39.141.34.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks	Hacking
🇳🇱 Alt255	2026-10-12 16:27:29 (3 weeks ago)	[ti-02al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.141.39.126 - - [12/Oct/2026:18:27:22 +0200] "GET /forgot-password HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Linux; Android 10; K) Apple ... show more [ti-02al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.141.39.126 - - [12/Oct/2026:18:27:22 +0200] "GET /forgot-password HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36" 34.141.39.126 - - [12/Oct/2026:18:27:22 +0200] "GET /auth HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36" 34.141.39.126 - - [12/Oct/2026:18:27:22 +0200] "GET /auth/login HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36" 34.141.39.126 - - [12/Oct/2026:18:27:22 +0200] "GET /backoffice HTTP/2.0" 404 1855 ... show less	Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-10-12 15:10:24 (3 weeks ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
🇸🇬 khairilgunawan	2026-10-12 14:41:59 (3 weeks ago)	ZonaKuota Sentinel: Malicious automated scanner/exploit probe trapped. Blocked.	Web App Attack Bad Web Bot
🇫🇷 AGEPCom	2026-10-12 14:05:57 (3 weeks ago)	Smart-Ban: IP bannie via score AbuseIPDB	Brute-Force Web App Attack
🇨🇭 4server	2026-10-12 13:45:14 (3 weeks ago)	[MonOct1215:45:07.8812232026][security2:error][pid2745413:tid2745539][client34.141.39.126:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\\|__schema\\\\\\\\\?{\?\(\?:querytype\\|types\?\)\)\?\\\\\\\\{\"atREQ ... show more [MonOct1215:45:07.8812232026][security2:error][pid2745413:tid2745539][client34.141.39.126:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\\|__schema\\\\\\\\\?{\?\(\?:querytype\\|types\?\)\)\?\\\\\\\\{\"atREQUEST_BODY.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"234\"][id\"344378\"][rev\"2\"][msg\"Atomicorp.comWAFRules:GraphQLInjectionAttackattempt\"][data\"MatchedData:__schema{types{foundwithinREQUEST_BODY:{\\\\x22query\\\\x22:\\\\x22{__schema{types{namefields{nameargs{namedefaultvalue}}}}}\\\\x22}\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"rs-solution.ch\"][uri\"/graphql\"][unique_id\"aszkYxrn8COcEWxEgvQl7QAAAQ4\"]\,referer:https://rs-solution.ch show less	Hacking Web App Attack
🇩🇪 roxyapi	2026-10-12 13:24:15 (3 weeks ago)	Honeypot: automated vulnerability scan / web app attack. Last probe: GET /.env.config	Web App Attack Bad Web Bot
Anonymous	2026-10-12 13:20:55 (3 weeks ago)	Fail2Ban apache-noscript	Bad Web Bot
🇦🇹 nomzamo	2026-10-12 13:03:15 (3 weeks ago)	Fail2Ban reported: nginx-badbots	Brute-Force

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.81.200.83

🇩🇪 167.94.146.72

🇮🇪 108.130.195.15

🇩🇪 2a03:2880:f277:1c6:face:b00c:0:43fe

🇺🇸 216.218.206.69

🇺🇸 216.218.206.68

🇳🇱 195.178.110.228

🇳🇱 195.178.110.153

🇦🇷 181.170.84.236

🇨🇳 106.75.224.92

🇺🇸 216.218.206.67

🇺🇸 216.218.206.66

🇻🇳 180.93.226.114

🇺🇸 147.185.132.135

🇩🇪 102.220.163.245

🇺🇸 64.121.113.135

🇺🇸 47.34.184.4

🇬🇧 31.14.254.115

🇸🇬 27.111.231.101

🇦🇺 20.53.249.197