JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.138.217.74

Activity Trending Down

Abuse Confidence Score

31% Elevated

20 reports

18 reporters · latest 1 month ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 74.217.138.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: North Charleston, South Carolina

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

20 from 18 distinct reporters

First reported

September 20th 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 6 🇩🇪 Germany 4 🇫🇮 Finland 2

Most common categories Web App Attack 18 Brute-Force 12 Hacking 7 Bad Web Bot 5 SSH 2

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 dynamix	2026-09-30 05:02:34 UTC · (1 month ago)	Multiple WAF Violations	Web App Attack
🇩🇪 Blexyel	2026-09-29 13:09:24 UTC · (1 month ago)	34.138.217.74 - - [29/Sep/2026:15:09:23 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ...	Brute-Force Web App Attack
🇺🇸 Starburst SysOp Team	2026-09-29 06:40:02 UTC · (1 month ago)	Malware host detected by rbl.malware.expert. RBL lookup of 74.217.138.34.rbl.malware.expert succeeded at REMOTE_ADDR. (400010-mnz6-4)	Hacking
🇺🇸 TPI-Abuse	2026-09-29 00:20:15 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.138.217.74 (74.217.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:20:08.854692 2026] [security2:error] [pid 26149:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.138.217.74 (74.217.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:20:08.854692 2026] [security2:error] [pid 26149:tid 26149] [client 34.138.217.74:57158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kelticdreamsranch.com"] [uri "/.git/config"] [unique_id "arsEOJyno2x9Upn9xfb5RQAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-09-28 05:05:18 UTC · (1 month ago)	Scanning/Probing (15)	Brute-Force Web App Attack
🇷🇴 clauss	2026-09-28 03:44:23 UTC · (1 month ago)	34.138.217.74 - - [28/Sep/2026:06:44:23 +0300] "GET /phpinfo.php HTTP/2.0" 404 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.138.217.74 - - [28/Sep/2026:06:44:23 +030 ... show more 34.138.217.74 - - [28/Sep/2026:06:44:23 +0300] "GET /phpinfo.php HTTP/2.0" 404 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.138.217.74 - - [28/Sep/2026:06:44:23 +0300] "GET /info.php HTTP/2.0" 404 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇳🇱 Site.eu	2026-09-27 04:38:48 UTC · (1 month ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 ghostwarriors	2026-09-25 04:20:03 UTC · (1 month ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-09-25 04:16:15 UTC · (1 month ago)	34.138.217.74 - - [25/Sep/2026:06:16:11 +0200] "POST / HTTP/1.1" 200 7889 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.138.217.74 - - [25/Sep/2026:06:16:11 +0200] "GET ... show more 34.138.217.74 - - [25/Sep/2026:06:16:11 +0200] "POST / HTTP/1.1" 200 7889 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.138.217.74 - - [25/Sep/2026:06:16:11 +0200] "GET /.git/config HTTP/1.1" 403 524 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.138.217.74 - - [25/Sep/2026:06:16:11 +0200] "GET /.env.local HTTP/1.1" 404 42919 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.138.217.74 - - [25/Sep/2026:06:16:11 +0200] "GET /.env.production HTTP/1.1" 404 42919 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.138.217.74 - - [25/Sep/2026:06:16:12 +0200] "GET /.env.staging HTTP/1.1" 404 42919 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gec show less	Web App Attack Hacking
🇫🇮 Kimmo Rieskaniemi	2026-09-25 04:15:34 UTC · (1 month ago)	CrowdSec triggered crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇫🇷 phoenix1jl96	2026-09-25 04:13:56 UTC · (1 month ago)	2026/09/25 06:13:56 [error] 1353769#1353769: 228696 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.138.217.74, server: mta-sts.ledemon.us, request: "GET /mailer/.env HTTP/1.1", host: "mta-sts.ledem ... show more 2026/09/25 06:13:56 [error] 1353769#1353769: 228696 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.138.217.74, server: mta-sts.ledemon.us, request: "GET /mailer/.env HTTP/1.1", host: "mta-sts.ledemon.us" 2026/09/25 06:13:56 [error] 1353769#1353769: *228696 open() "/usr/local/lib/roundcubemail/.env" failed (2: No such file or directory), client: 34.138.217.74, server: mta-sts.ledemon.us, request: "GET /mail/.env HTTP/1.1", host: "mta-sts.ledemon.us" ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot SSH Web App Attack
🇦🇺 Klaverstyn	2026-09-25 03:54:27 UTC · (1 month ago)	Excessive HTTP request rate	Web App Attack
🇩🇪 Gwyneth Llewelyn	2026-09-25 02:34:08 UTC · (1 month ago)	2026/09/25 03:33:56 [error] 325888#325888: 2011306 access forbidden by rule, client: 34.138.217.74, server: [redacted], request: "GET /.env HTTP/1.1", host: "mta-sts.[redacted]" 34.138.217.74 - - [25/Sep/2026:03:33:56 +0100] "GET /.env HTTP/1.1" 403 ... show more 2026/09/25 03:33:56 [error] 325888#325888: 2011306 access forbidden by rule, client: 34.138.217.74, server: [redacted], request: "GET /.env HTTP/1.1", host: "mta-sts.[redacted]" 34.138.217.74 - - [25/Sep/2026:03:33:56 +0100] "GET /.env HTTP/1.1" 403 1178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 2026/09/25 03:34:07 [error] 325888#325888: *2011306 access forbidden by rule, client: 34.138.217.74, server: [redacted], request: "GET /app/.env HTTP/1.1", host: "mta-sts.[redacted]" show less	Brute-Force Web App Attack
🇵🇱 strefapi_com	2026-09-25 02:31:10 UTC · (1 month ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇫🇮 oh.mg	2026-09-24 04:17:53 UTC · (1 month ago)	[Thu Sep 24 06:17:52.820154 2026] [security2:error] [pid 3298464:tid 3298473] [client 34.138.217.74:0] [client 34.138.217.74] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/ ... show more [Thu Sep 24 06:17:52.820154 2026] [security2:error] [pid 3298464:tid 3298473] [client 34.138.217.74:0] [client 34.138.217.74] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 50)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "us.mmn.ca"] [uri "/"] [unique_id "arSkcHQFcf8_cSnJGvaWYAAAAcc"] [Thu Sep 24 06:17:53.008418 2026] [security2:error] [pid 3298464:tid 3298474] [client 34.138.217.74:0] [client 34.138.217.74] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 50)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evalua ... show less	Web App Attack Bad Web Bot

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 185.61.219.59

🇮🇳 182.76.115.214

🇧🇾 178.121.26.175

🇰🇷 119.204.122.94

🇳🇱 89.21.67.175

🇦🇷 57.144.103.168

🇺🇸 208.102.149.137

🇳🇱 192.42.116.16

🇬🇧 185.216.145.162

🇵🇪 179.6.7.38

🇺🇸 147.185.132.168

🇸🇪 104.222.171.182

🇳🇱 89.21.67.145

🇩🇪 64.225.111.45

🇮🇳 45.129.87.117

🇺🇸 45.33.78.70

🇹🇼 35.221.183.202

🇵🇾 2803:7d80:a420:7f17:766d:faff:fe14:ac3c

🇳🇱 213.209.159.231

🇳🇱 193.29.139.168