JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.171.139.134

Activity Trending Down

Abuse Confidence Score

100% Critical

372 reports

154 reporters · latest 1 week ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 134.139.171.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: Council Bluffs, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

372 from 154 distinct reporters

First reported

August 30th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇩🇪 Germany 93 🇺🇸 United States of America 61 🇳🇱 Netherlands 38

Most common categories Web App Attack 290 Bad Web Bot 112 Brute-Force 88 Hacking 68 Port Scan 35

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 TheCoon	2026-10-24 16:26:50 (1 week ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
🇺🇸 1cyb3rpunk	2026-10-23 18:43:02 (1 week ago)	Coordinated campaign CMP-1786835248-000: 2228 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot sur ... show more Coordinated campaign CMP-1786835248-000: 2228 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface. show less	Port Scan Brute-Force Bad Web Bot Web App Attack
🇨🇭 TheCoon	2026-10-23 06:31:47 (1 week ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
🇨🇭 TheCoon	2026-10-21 06:54:19 (1 week ago)	Automated: Credential theft attempt - JSON bomb served	Web App Attack Hacking
🇩🇪 snhosting	2026-10-15 16:02:31 (2 weeks ago)	34.171.139.134 - - [15/Oct/2026:18:02:20 +0200] "GET /.env.local HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 34.171.139.134 - - [15/Oct/2026:18:02:20 +0200] "GET /.env.production HTTP/1.1" 403 405 "-" ... show more 34.171.139.134 - - [15/Oct/2026:18:02:20 +0200] "GET /.env.local HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 34.171.139.134 - - [15/Oct/2026:18:02:20 +0200] "GET /.env.production HTTP/1.1" 403 405 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 34.171.139.134 - - [15/Oct/2026:18:02:20 +0200] "GET /.env.staging HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 34.171.139.134 - - [15/Oct/2026:18:02:20 +0200] "GET /.env.development HTTP/1.1" 404 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 34.171.139.134 - - [15/Oct/2026:18:02:21 +0200] "GET /.env.backup HTTP/1.1" 404 0 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1" ... show less	DNS Compromise DNS Poisoning Phishing Email Spam Brute-Force Web App Attack SSH
🇩🇪 IVski.com	2026-10-15 14:42:05 (2 weeks ago)	IVski WAF \| Path traversal detected - double encoding or cgi-bin abuse	Hacking Brute-Force Web App Attack
🇳🇱 Alt255	2026-10-15 14:19:10 (2 weeks ago)	[ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.171.139.134 - - \[15/Oct/2026:16:19:07 +0200\] "GET /.env HTTP/1.1" 404 7191 "-" "Mozilla/5.0 \(iPhone\; CPU iPhone OS 18_1 like Mac OS X\) AppleWebKi ... show more [ti-01ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.171.139.134 - - \[15/Oct/2026:16:19:07 +0200\] "GET /.env HTTP/1.1" 404 7191 "-" "Mozilla/5.0 \(iPhone\; CPU iPhone OS 18_1 like Mac OS X\) AppleWebKit/605.1.15 \(KHTML, like Gecko\) Version/18.1 Mobile/15E148 Safari/604.1" ... show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-15 12:55:44 (2 weeks ago)	[ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.171.139.134 - - [15/Oct/2026:14:55:35 +0200] "GET /.env HTTP/1.1" 404 42854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ... show more [ti-30al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.171.139.134 - - [15/Oct/2026:14:55:35 +0200] "GET /.env HTTP/1.1" 404 42854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" ... show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-15 04:57:45 (2 weeks ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: login.astropot.tech \| URI: /.env \| UA: Mozilla/5. ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: login.astropot.tech \| URI: /.env \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 lnklnx	2026-10-14 23:14:40 (2 weeks ago)	www.lincolnclan.com:443 34.171.139.134 - - [14/Oct/2026:18:14:39 -0500] "GET /.env HTTP/1.1" 401 6992 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" ...	Web App Attack
🇳🇱 Site.eu	2026-10-14 19:40:02 (2 weeks ago)	Excessive 404/403 errors	Brute-Force
🇩🇪 paissangroup	2026-10-14 14:45:17 (2 weeks ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Alt255	2026-10-14 08:36:57 (2 weeks ago)	[testbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.171.139.134 - - [14/Oct/2026:10:36:39 +0200] "GET /.env HTTP/1.1" 404 7825 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (K ... show more [testbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.171.139.134 - - [14/Oct/2026:10:36:39 +0200] "GET /.env HTTP/1.1" 404 7825 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" ... show less	Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-10-14 02:35:01 (2 weeks ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-10-14 00:03:29 (2 weeks ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 372 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 201.93.183.181

🇷🇴 193.32.162.15

🇧🇷 187.73.183.12

🇧🇷 177.223.57.137

🇮🇹 151.75.224.78

🇺🇸 100.29.192.84

🇩🇪 88.218.47.82

🇳🇱 77.239.124.148

🇺🇸 65.49.1.52

🇳🇱 64.205.72.136

🇵🇾 45.235.122.252

🇺🇸 20.83.60.145

🇨🇭 209.99.185.135

🇷🇺 194.87.168.46

🇧🇷 189.98.166.216

🇪🇨 181.188.237.219

🇹🇼 152.32.230.104

🇨🇳 106.14.248.11

🇮🇩 103.4.82.147

🇺🇸 74.7.241.13