JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.141.24.149

Recent Activity

Abuse confidence score ?

100% Critical

102 reports

81 reporters · latest 1 day ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	149.24.141.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.141.24.149

Export CSV

This IP address has been reported a total of 102 times from 81 distinct sources. 34.141.24.149 was first reported on October 8th 2026, and the most recent report was 1 day ago. In the last 60 days, the top reporter locations were: Germany with 24 reports; United States of America with 16 reports; Netherlands with 15 reports. The most common categories in these recent reports were: Web App Attack 79 times; Brute-Force 32 times; Bad Web Bot 30 times; Hacking 18 times; Port Scan 7 times; Other 12 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-10-09 21:59:58 (1 day ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-08. show less	Web App Attack SSH Hacking
🇳🇱 Alt255	2026-10-09 04:13:11 (1 day ago)	[ti-26al] Excessive 404 errors (web scanning): 43 suspicious requests detected by fail2ban jail apac ... show more [ti-26al] Excessive 404 errors (web scanning): 43 suspicious requests detected by fail2ban jail apache-404. Example: 34.141.24.149 - - [09/Oct/2026:06:12:50 +0200] "GET /sign-in HTTP/1.1" 404 2065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 34.141.24.149 - - [09/Oct/2026:06:12:50 +0200] "GET /account/login HTTP/1.1" 404 2065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 34.141.24.149 - - [09/Oct/2026:06:12:50 +0200] "GET /auth HTTP/1.1" 404 2065 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 34.141.24.149 - - [09/Oct/2026:06:12:50 +0200] "GET /z9x8c7v6b5-debug-trigger-api-dev.nguworkwear.de HTTP/1.1" 404 7783 "-" ... show less	Bad Web Bot Web App Attack
🇳🇴 Abuse Buster	2026-10-09 04:01:45 (1 day ago)	34.141.24.149 - - [09/Oct/2026:06:01:43 +0200] "GET /72vons5bklgeqlxvmlvx HTTP/2.0" 404 22 "-" "Mozi ... show more 34.141.24.149 - - [09/Oct/2026:06:01:43 +0200] "GET /72vons5bklgeqlxvmlvx HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.141.24.149 - - [09/Oct/2026:06:01:43 +0200] "GET /z9x8c7v6b5-debug-trigger-api.wingthor.net HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.141.24.149 - - [09/Oct/2026:06:01:43 +0200] "GET /f2e21eb8m4lakc2f2un7 HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" ... show less	Web App Attack
🇺🇸 gamabe	2026-10-09 03:53:01 (1 day ago)	Detected crowdsecurity/http-dos-swithcing-ua attack pattern. Reported by CrowdSec IDS.	Hacking
🇩🇪 Skyrider	2026-10-09 03:47:55 (1 day ago)	crowdsecurity/http-probing	Web App Attack
🇵🇱 mscode.pl	2026-10-09 03:20:49 (1 day ago)	Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK ASN: 396982 (Google LLC) Pro ... show more Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/2 (POST method) Zone: analytics.mscode.pl Endpoint: /admin UA: Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/) show less	Bad Web Bot
🇬🇧 stevendodd	2026-10-09 03:08:52 (1 day ago)	34.141.24.149 - - [09/Oct/2026:04:08:51 +0100] "GET /firebase-config.json HTTP/1.1" 404 262 "-" "Moz ... show more 34.141.24.149 - - [09/Oct/2026:04:08:51 +0100] "GET /firebase-config.json HTTP/1.1" 404 262 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot" 34.141.24.149 - - [09/Oct/2026:04:08:52 +0100] "GET /app-config.json HTTP/1.1" 404 262 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" 34.141.24.149 - - [09/Oct/2026:04:08:52 +0100] "GET /config.json HTTP/1.1" 404 262 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 34.141.24.149 - - [09/Oct/2026:04:08:52 +0100] "GET /.env.js HTTP/1.1" 404 262 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.141.24.149 - - [09/Oct/2026:04:08:52 +0100] "GET /config.json.js HTTP/1.1" 404 262 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +cla ... show less	Brute-Force Web App Attack
🇪🇸 Adolfo Montaño	2026-10-09 02:53:47 (1 day ago)	CrowdSec blocked IP for crowdsecurity/http-probing on localhost	Web App Attack
🇺🇸 gamabe	2026-10-09 02:45:43 (1 day ago)	Detected crowdsecurity/http-path-traversal-probing attack pattern. Reported by CrowdSec IDS.	Port Scan
🇨🇦 cubie	2026-10-09 02:31:49 (1 day ago)	Port Scan: Admin Enumeration - Reported by CubieCloud Firewall [CFW_H440-009]	Port Scan
🇵🇱 Budyn	2026-10-09 02:30:37 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: admin.budyn.ovh \| URI: /dist/.vite/manifest.json \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Hacking Web App Attack
🇸🇬 Cloudkul Cloudkul	2026-10-09 02:30:30 (1 day ago)	Attempted Brute Force on our application	Brute-Force Web App Attack
🇫🇷 sthoyer.de	2026-10-09 02:22:58 (1 day ago)	34.141.24.149 - - [09/Oct/2026:04:22:57 +0200] "GET /dashboard HTTP/2" 302 495 "-" "Mozilla/5.0 (Mac ... show more 34.141.24.149 - - [09/Oct/2026:04:22:57 +0200] "GET /dashboard HTTP/2" 302 495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" 34.141.24.149 - - [09/Oct/2026:04:22:57 +0200] "GET /n4jirznhpz2wea3bvw7d HTTP/2" 302 495 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 34.141.24.149 - - [09/Oct/2026:04:22:57 +0200] "GET /reset-password HTTP/2" 302 495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" ... show less	Web App Attack
🇩🇪 ghostwarriors	2026-10-09 02:20:08 (1 day ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇫🇮 Christopher Hughes	2026-10-09 01:59:02 (1 day ago)	34.141.24.149 - - [09/Oct/2026:02:59:00 +0100] "GET /xyi6rcs5ohoulb6358kq HTTP/2.0" 200 1456 "-" "Mo ... show more 34.141.24.149 - - [09/Oct/2026:02:59:00 +0100] "GET /xyi6rcs5ohoulb6358kq HTTP/2.0" 200 1456 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ... show less	Web App Attack

Showing 1 to 15 of 102 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 183.106.178.212

🇳🇱 77.239.124.72

🇬🇧 77.67.26.156

🇺🇸 66.132.195.102

🇺🇸 43.130.29.234

🇸🇬 217.216.109.148

🇨🇳 183.63.125.162

🇺🇸 172.190.89.127

🇺🇸 159.223.98.42

🇧🇬 78.128.114.162

🇺🇸 43.152.72.201

🇺🇸 20.106.60.160

🇸🇬 15.235.192.186

🇩🇪 162.19.232.204

🇺🇸 129.121.120.159

🇳🇱 77.239.124.40

🇺🇸 24.7.185.197

🇺🇸 16.146.174.54

🇧🇷 186.222.155.186

🇺🇸 172.203.228.114