AbuseIPDB » 34.142.159.72
34.142.159.72
This IP was reported 12 times. Confidence of
Abuse
is 44% : ?
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
72.159.142.34.bc.googleusercontent.com
Domain Name
google.com
Country
🇸🇬
Singapore
City
Singapore
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 34.142.159.72 :
This IP address has been reported a total of
12
times from
11 distinct
sources.
34.142.159.72 was first reported on
July 8th 2026 , and the most recent report was
7 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇫🇮
xyz.rip
2026-09-30 13:29:18
(7 hours ago)
WAF Violation
...
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 12:32:16
(8 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.142.159.72 (72.159.142.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:949110) triggered by 34.142.159.72 (72.159.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 08:32:11.064057 2026] [security2:error] [pid 26654:tid 26654] [client 34.142.159.72:58948] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 20)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.temp.pathpointsandbox.click"] [uri "/api/console/api_server"] [unique_id "ar0BSwv-6tsIkDC9LopwPQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 10:17:50
(10 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.142.159.72 (72.159.142.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.142.159.72 (72.159.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 06:17:47.127461 2026] [security2:error] [pid 8150:tid 8150] [client 34.142.159.72:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cloudex.click|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cloudex.click"] [uri "/rclone.conf"] [unique_id "arzhy0iJq-f384I2KnhyaAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-30 10:05:36
(10 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
Stara
2026-09-30 09:05:54
(11 hours ago)
ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)
Brute-Force
Hacking
Web App Attack
🇳🇱
Site.eu
2026-09-30 08:34:07
(12 hours ago)
Excessive 404/403 errors
Brute-Force
2026-09-30 08:10:03
(12 hours ago)
| [Dangerous/Singapore] Aggressive IP 34.142.159.72 (~30 hits). Type: DoS Defender- Web server 400 e ...
show more
| [Dangerous/Singapore] Aggressive IP 34.142.159.72 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇳🇱
wlt-blocker
2026-07-09 07:15:07
(2 months ago)
Spam with a high level and/or caught by honeypot detected
Email Spam
🇩🇪
Bedios GmbH
2026-07-08 14:03:38
(2 months ago)
Sends SPAM
Email Spam
🇩🇪
tinect
2026-07-08 13:41:11
(2 months ago)
Gets ban for 4h for triggering crowdsecurity/postscreen-rbl at root1.
Web App Attack
🇳🇱
Cloud86 B.V.
2026-07-08 13:39:03
(2 months ago)
categories: Email Spam
Email Spam
2026-07-08 13:28:20
(2 months ago)
SPAM EMAIL 34.142.159.72 (ronreitsma.nl)
Email Spam
Showing 1 to
12
of 12 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: