JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.159.243.238

Activity Trending Down

Abuse Confidence Score

94% Critical

36 reports

32 reporters · latest 2 weeks ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 238.243.159.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

36 from 32 distinct reporters

First reported

October 13th 2026

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 12 🇩🇪 Germany 5 🇨🇿 Czechia 3

Most common categories Web App Attack 26 Bad Web Bot 12 Brute-Force 10 Hacking 7 SSH 2

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-10-14 22:02:39 (2 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-13.	Web App Attack SSH Hacking
🇬🇧 openstrike.co.uk	2026-10-14 05:14:10 (2 weeks ago)	226 attacks on env grabbing URLs (type 2), shell probes, config grabbing URLs (type 2), directory traversals, env grabbing URLs, PHP URLs, password/key grabbing URLs, VC URLs: GET /__vite_rsc_findSourceMapURL?filename=file:///proc/self/environ&enviro ... show more 226 attacks on env grabbing URLs (type 2), shell probes, config grabbing URLs (type 2), directory traversals, env grabbing URLs, PHP URLs, password/key grabbing URLs, VC URLs: GET /__vite_rsc_findSourceMapURL?filename=file:///proc/self/environ&environmentName=rsc HTTP/1.1 POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1 GET /config/settings.local.yml HTTP/1.1 GET /..%2f..%2f.env HTTP/1.1 GET /llm/.env HTTP/1.1 POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1 GET /__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc HTTP/1.1 GET /.git/config HTTP/1.1 show less	Hacking Web App Attack
🇨🇭 🇨🇭 Hosting	2026-10-14 05:10:34 (2 weeks ago)	Automated WAF report: 300-400 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-14 02:07:05 (2 weeks ago)	[cb-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.159.243.238 - - [14/Oct/2026:04:06:54 +0200] "POST /lib/terminal-xhr.php HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (compatible; GrokBot/1 ... show more [cb-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.159.243.238 - - [14/Oct/2026:04:06:54 +0200] "POST /lib/terminal-xhr.php HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 34.159.243.238 - - [14/Oct/2026:04:06:54 +0200] "POST /icecoder/lib/terminal-xhr.php HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 34.159.243.238 - - [14/Oct/2026:04:06:56 +0200] "GET /manifest.json HTTP/2.0" 404 61646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 34.159.243.238 - - [14/Oct/2026:04:06:56 +0200] "GET /m7sq6t9bgnmvapx2hly7 HTTP/2.0" 404 61651 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 34.159.243.238 - - [14/Oct/2026:04:06:56 +0200] "GET /assets/manifest.json HTTP/2.0" 404 61651 ... show less	Bad Web Bot Web App Attack
🇷🇴 iulianh	2026-10-14 01:42:10 (2 weeks ago)	80,443	Brute-Force SSH
🇧🇷 dominioz	2026-10-14 01:01:52 (2 weeks ago)	2026-10-14 01:01:35 GET /images../.env - - 34.159.243.238 HTTP/2 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko;+compatible;+Perplexity-User/1.0;++https://perplexity.ai/perplexity-user) - 301 612 2026-10-14 01:01:36 GET /static/..;/..;/.env - - 34 ... show more 2026-10-14 01:01:35 GET /images../.env - - 34.159.243.238 HTTP/2 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko;+compatible;+Perplexity-User/1.0;++https://perplexity.ai/perplexity-user) - 301 612 2026-10-14 01:01:36 GET /static/..;/..;/.env - - 34.159.243.238 HTTP/2 Mozilla/5.0+(compatible;+Qwenbot/1.0;++https://qwen.alibaba.com/) - 301 624 2026-10-14 01:01:36 GET /static/..;/.env - - 34.159.243.238 HTTP/2 Mozilla/5.0+(compatible;+MoonshotBot/1.0;++https://kimi.ai/) - 301 616 2026-10-14 01:01:36 GET /..../..../..../..../.env - - 34.159.243.238 HTTP/2 Mozilla/5.0+(compatible;+Baiduspider/2.0;++http://www.baidu.com/search/spider.html) - 301 634 2026-10-14 01:01:36 GET /api/..;/.env - - 34.159.243.238 HTTP/2 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko;+compatible;+Perplexity-User/1.0;++https://perplexity.ai/perplexity-user) - 301 610 ... show less	Bad Web Bot Web App Attack
🇵🇱 sefinek.net	2026-10-14 00:51:55 (2 weeks ago)	Triggered Cloudflare WAF (firewallManaged) from DE. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: /form/ \| UA: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) • Generated by: github.com/sefinek/Cloudflare ... show more Triggered Cloudflare WAF (firewallManaged) from DE. Action: BLOCK \| Protocol: HTTP/2 (GET) \| Endpoint: /form/ \| UA: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 big-cloud.nl	2026-10-14 00:27:46 (2 weeks ago)	Try to access /core/.env	Web App Attack
🇲🇾 Rizzy	2026-10-13 21:36:19 (3 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇳🇱 Mangelot Hosting	2026-10-13 20:22:01 (3 weeks ago)	(modsec_attack) srv201 ModSecurity attack 34.159.243.238 (DE/Germany/238.243.159.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:	Web App Attack
🇫🇷 Octopuce	2026-10-13 18:27:59 (3 weeks ago)	Aggressive web search of vulnerable pages: /uploads../.env /img../.env /media../.env /images../.env /static../.env ...	Web App Attack
🇬🇧 Aetherweb Ark	2026-10-13 17:47:43 (3 weeks ago)	(mod_security) mod_security (id:949110) triggered by 34.159.243.238 (DE/Germany/238.243.159.34.bc.googleusercontent.com): N in the last X secs	Web App Attack
🇮🇪 RoboSOC	2026-10-13 16:22:50 (3 weeks ago)	PHP CGI Argument Injection Vulnerability, PTR: 238.243.159.34.bc.googleusercontent.com.	Hacking
🇧🇪 cmbplf	2026-10-13 15:32:56 (3 weeks ago)	1.869 requests with url.path .env 384 requests with url.path /@fs/* 224 requests with url.path /proc/ 183 requests with url.path *credentials.json	Brute-Force Bad Web Bot
🇫🇷 COMAITE	2026-10-13 15:27:42 (3 weeks ago)	Common web attack from 34.159.243.238.	Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇵🇱 217.113.226.14

🇮🇩 192.42.85.90

🇳🇱 86.38.187.75

🇺🇸 192.81.218.246

🇳🇱 192.42.116.95

🇳🇱 192.42.116.67

🇧🇷 190.115.84.25

🇺🇸 159.223.97.218

🇨🇦 155.204.100.54

🇮🇳 122.172.81.65

🇫🇷 62.210.142.165

🇹🇷 45.83.32.136

🇺🇸 34.16.79.197

🇺🇸 20.55.44.181

🇺🇸 2602:fa59:2:f913::1

🇳🇱 192.42.116.143

🇳🇱 192.42.116.49

🇻🇳 118.70.182.193

🇰🇪 102.135.174.96

🇮🇹 95.255.158.96