JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.140.212.172

34.140.212.172 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	172.212.140.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.140.212.172

Whois 34.140.212.172

IP Abuse Reports for 34.140.212.172:

This IP address has been reported a total of 38 times from 33 distinct sources. 34.140.212.172 was first reported on October 20th 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Alfafoxtrot	2026-10-23 02:24:35 (8 hours ago)	Reason: proxy suspicious \| src-ip: 34.140.212.172 \| dport=80 \| Protoc.=TCP \| Inc. 2d: 2962	Open Proxy Hacking
Anonymous	2026-10-21 11:05:01 (1 day ago)	suspicious request in access.log	Web App Attack
🇳🇱 Alt255	2026-10-21 10:57:51 (1 day ago)	[ti-12al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 34. ... show more [ti-12al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 34.140.212.172 - - \[21/Oct/2026:12:57:29 +0200\] "GET /.env.supabase HTTP/2.0" 404 1863 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; Perplexity-User/1.0\; +https://perplexity.ai/perplexity-user\)" 34.140.212.172 - - \[21/Oct/2026:12:57:29 +0200\] "GET /.htpasswd HTTP/2.0" 403 1866 "-" "Mozilla/5.0 \(compatible\; Bytespider\; [email protected]\) AppleWebKit/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 mbch	2026-10-21 10:47:22 (1 day ago)	Observed automated probing of web application/configuration paths over completed HTTP requests. UTC ... show more Observed automated probing of web application/configuration paths over completed HTTP requests. UTC 2026-10-21T10:47:22.912000+00:00 to 2026-10-21T10:47:23.833000+00:00: 10 distinct paths in 0.921s, denied HTTP 403/404. Trusted client-IP processing; forwarding headers accepted only from official configured Cloudflare networks. No successful compromise established. Examples: /.vite/manifest.json, /build/manifest.json, /dist/.vite/manifest.json, /dist/manifest.json, /.env, /_image, /api/admin/config.json, /proc/self/environ, /wp-admin/.env, /values.yaml. show less	Web App Attack
🇬🇧 consul.to	2026-10-21 10:33:16 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 bancix	2026-10-21 09:44:46 (2 days ago)	Heimdallr NIDS: Automatic ban triggered. Reason: PORT_SWEEP_DETECTED (3 porte uniche in 20s)	Port Scan
🇵🇱 Budyn	2026-10-21 05:14:03 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vault.budyn.ovh \| URI: /ai/.env \| UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇫🇷 EDSL	2026-10-21 03:26:16 (2 days ago)	[gps.edsl.fr] Blocked by SysWarden Firewall (Web Attack Port 443)	Web App Attack Hacking Port Scan
🇩🇪 updown.io	2026-10-21 03:25:35 (2 days ago)	{"level":"info","ts":1792553132.5047035,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1792553132.5047035,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.140.212.172","remote_port":"37214","client_ip":"34.140.212.172","proto":"HTTP/2.0","method":"GET","host":"status.blot.im","uri":"/cbyb68r86wyrkt10zfai","headers":{"User-Agent":["Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"],"Accept":["/"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.blot.im","ech":false}},"bytes_read":0,"user_id":"","duration":0.000170535,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1792553132.537297,"logger":"http.log.access.log1","msg":"handled request"," ... show less	DDoS Attack Web App Attack
🇵🇱 Budyn	2026-10-21 02:48:12 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: shop.budyn.ovh \| URI: /.vite/manifest.json \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇹🇷 Jova	2026-10-21 00:52:06 (2 days ago)	Probing a web server for sensitive files (.env, backups, configs): 3 requests.	Web App Attack
🇸🇬 Cloudkul Cloudkul	2026-10-21 00:00:37 (2 days ago)	Attempted Brute Force on our application	Brute-Force Web App Attack
🇦🇺 aranguren.org	2026-10-20 23:50:25 (2 days ago)	34.140.212.172 - - [21/Oct/2026:10:50:24 +1100] "GET /robots.txt HTTP/2.0" 404 994 "-" "Mozilla/5.0 ... show more 34.140.212.172 - - [21/Oct/2026:10:50:24 +1100] "GET /robots.txt HTTP/2.0" 404 994 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" TLSv1.3 TLS_AES_128_GCM_SHA256 34.140.212.172 - - [21/Oct/2026:10:50:24 +1100] "GET /webpack-stats.json HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" TLSv1.3 TLS_AES_128_GCM_SHA256 34.140.212.172 - - [21/Oct/2026:10:50:24 +1100] "GET /static/manifest.json HTTP/2.0" 404 994 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" TLSv1.3 TLS_AES_128_GCM_SHA256 ... show less	Bad Web Bot
🇵🇱 Budyn	2026-10-20 22:35:00 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: idp.budyn.ovh \| URI: /dist/.vite/manifest.json \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇦🇹 René Hickersberger	2026-10-20 21:53:13 (2 days ago)	malicious bot detected: violations="ignored-robots-policy"; user_agent="Mozilla/5.0 (compatible; Met ... show more malicious bot detected: violations="ignored-robots-policy"; user_agent="Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" show less	Bad Web Bot

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 193.37.32.86

🇨🇦 144.217.241.75

🇸🇬 139.59.246.235

🇨🇳 117.133.160.214

🇧🇩 103.214.81.72

🇭🇰 45.249.247.238

🇻🇳 42.1.70.131

🇧🇪 34.76.97.56

🇰🇷 211.200.11.218

🇨🇴 190.67.248.44

🇷🇺 188.32.104.175

🇧🇷 186.209.172.93

🇵🇰 154.192.102.233

🇩🇪 146.103.57.68

🇵🇰 116.71.182.199

🇰🇷 112.161.64.234

🇵🇹 89.153.125.230

🇬🇧 77.67.26.231

🇬🇧 77.67.26.58

🇩🇪 69.5.169.253