JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.141.40.42

34.141.40.42 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	42.40.141.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.141.40.42

Whois 34.141.40.42

IP Abuse Reports for 34.141.40.42:

This IP address has been reported a total of 39 times from 26 distinct sources. 34.141.40.42 was first reported on August 31st 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Cloud86 B.V.	2026-09-01 23:26:02 (7 hours ago)	categories: DDoS Attack	DDoS Attack
🇺🇸 TPI-Abuse	2026-09-01 13:49:10 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.141.40.42 (42.40.141.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.141.40.42 (42.40.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:49:05.641968 2026] [security2:error] [pid 226455:tid 226557] [client 34.141.40.42:46850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.tomithai.com"] [uri "/wp-config.php.swp"] [unique_id "apbX0bAlSH7yQ6QV7T0uzwAAAM0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-01 13:45:31 (17 hours ago)	Observed scanned 12 known-sensitive endpoint(s), e.g.: /, /%2eenv, /.ENV, /.env, /.env.bak, /.env.ol ... show more Observed scanned 12 known-sensitive endpoint(s), e.g.: /, /%2eenv, /.ENV, /.env, /.env.bak, /.env.old show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 12:22:28 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.141.40.42 (42.40.141.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.141.40.42 (42.40.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 08:22:24.965090 2026] [security2:error] [pid 22241:tid 22328] [client 34.141.40.42:37686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "schecter.org"] [uri "/.env.example"] [unique_id "apbDgGXeETkt3gyVFH9E5wAAAMQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-09-01 11:09:26 (20 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 11:01:45 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.141.40.42 (42.40.141.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.141.40.42 (42.40.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 07:01:41.538403 2026] [security2:error] [pid 12137:tid 12137] [client 34.141.40.42:53462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.manninglandservices.com"] [uri "/.env.local"] [unique_id "apawldkR44D-H0pKRGWFOAAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-09-01 10:14:22 (21 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 daveoctober	2026-09-01 10:11:23 (21 hours ago)	October Sentinel: honeypot triggered	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-01 09:54:14 (21 hours ago)	[01/Sep/2026:12:54:14 +0300] -- 34.141.40.42 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.env. ... show more [01/Sep/2026:12:54:14 +0300] -- 34.141.40.42 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.env.backup HTTP/1.1 show less	Bad Web Bot Web App Attack
🇵🇫 www.gregorymariani.com	2026-09-01 09:23:14 (21 hours ago)	34.141.40.42 - - [01/Sep/2026:09:23:13 +0000] "GET /.env.save HTTP/1.1" 401 172 "-" "crusader-worker ... show more 34.141.40.42 - - [01/Sep/2026:09:23:13 +0000] "GET /.env.save HTTP/1.1" 401 172 "-" "crusader-worker/1.0" 410 0.000 [default-comfy-mars-service-80] [] - - - - 61c624645309429d4a55591d2be33fa8 34.141.40.42 - - [01/Sep/2026:09:23:13 +0000] "GET /.env.local HTTP/1.1" 401 172 "-" "crusader-worker/1.0" 411 0.000 [default-comfy-mars-service-80] [] - - - - 923dae6671f667e2ed0b474dda48d66a 34.141.40.42 - - [01/Sep/2026:09:23:13 +0000] "GET /crusader-404-probe HTTP/1.1" 401 172 "-" "crusader-worker/1.0" 419 0.000 [default-comfy-mars-service-80] [] - - - - 9a9f77511b38a310db0811216eaf94e2 ... show less	Brute-Force
🇺🇸 TPI-Abuse	2026-09-01 09:21:20 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.141.40.42 (42.40.141.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.141.40.42 (42.40.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:21:16.437949 2026] [security2:error] [pid 4414:tid 4414] [client 34.141.40.42:52934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "survey.joebankx.com"] [uri "/wp-config.php~"] [unique_id "apaZDNaxKsjxYEL2AG8Y3wAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-01 09:20:13 (22 hours ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇺🇦 Olexiy Backend	2026-09-01 08:32:12 (22 hours ago)	34.141.40.42 ...	Bad Web Bot Web App Attack
Anonymous	2026-09-01 07:41:43 (23 hours ago)	Observed scanned 1 known-sensitive endpoint(s), e.g.: /.env.production	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 06:43:23 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.141.40.42 (42.40.141.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.141.40.42 (42.40.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:43:19.879334 2026] [security2:error] [pid 3382:tid 3382] [client 34.141.40.42:39356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swindontkd.swindon-itf.com"] [uri "/.env"] [unique_id "apZ0ByHgJh_sU5qnvFpi9gAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 172.70.240.168

🇺🇸 172.56.234.23

🇺🇸 165.154.163.58

🇬🇧 154.16.44.103

🇺🇸 142.93.55.159

🇨🇳 111.35.36.48

🇺🇸 103.215.74.26

🇧🇬 78.128.112.30

🇺🇸 67.189.244.59

🇺🇸 67.8.32.168

🇱🇻 62.60.130.242

🇳🇱 45.148.10.141

🇬🇧 45.133.173.47

🇸🇬 35.240.132.107

🇦🇪 20.74.177.114

🇰🇷 221.150.43.7

🇳🇱 193.47.62.69

🇧🇴 192.223.107.131

🇨🇱 181.43.38.67

🇺🇦 176.111.182.106