JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.15.150.42

Recent Activity

Abuse Confidence Score

100% Critical

69 reports

46 reporters · latest 11 hours ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 42.150.15.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇹🇭 Thailand
City: Bangkok, Bangkok

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

69 from 46 distinct reporters

First reported

October 30th 2026

Most recent report

11 hours ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 12 🇩🇪 Germany 11 🇳🇱 Netherlands 10

Most common categories Web App Attack 63 Bad Web Bot 21 Brute-Force 19 Hacking 18 Port Scan 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mishan	2026-11-11 06:05:35 UTC · (11 hours ago)	34.15.150.42 - - [10/Nov/2026:22:05:35 -0800] "GET /.git/config HTTP/1.1" 200 1042069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ...	Web App Attack
🇸🇪 vaia.cloud	2026-11-11 05:35:01 UTC · (12 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇷🇺 Deynekin.com	2026-11-11 05:08:19 UTC · (12 hours ago)	Automated fail2ban report from server 176.99.5.35. Attack type: web application vulnerability scanning/exploitation attempts (jails: nginx-attack-scan). Observed: 2026-11-11T08:08:19+03:00. Detections: 1 ban event(s), 5 failed attempts. Ban duration: ... show more Automated fail2ban report from server 176.99.5.35. Attack type: web application vulnerability scanning/exploitation attempts (jails: nginx-attack-scan). Observed: 2026-11-11T08:08:19+03:00. Detections: 1 ban event(s), 5 failed attempts. Ban duration: 1d. Sample requests/indicators: GET /.git/config -> 403 GET /.env -> 403 GET /.env.local -> 403 GET /.env.production -> 403 No personal data included. -- Reported via Fail2Ban_AbuseIPDB Monitor: https://github.com/paulmann/Fail2Ban_AbuseIPDB show less	Bad Web Bot Web App Attack
🇬🇧 poundawebsiteltd	2026-11-11 01:00:10 UTC · (16 hours ago)	Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.15.150.42 (TH/Thailand/[REDACTED_DOMAIN]): 20 in the last 3600 secs \| UA: (apache_probe) Failed Access (403/404) 34.15.150.42 (TH/Thailand/42.150.15.34.bc.go ... show more Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.15.150.42 (TH/Thailand/[REDACTED_DOMAIN]): 20 in the last 3600 secs \| UA: (apache_probe) Failed Access (403/404) 34.15.150.42 (TH/Thailand/42.150.15.34.bc.googleusercontent.com): 20 in the last 3600 secs show less	Brute-Force Web App Attack
🇩🇪 refresh.cx	2026-11-11 00:56:20 UTC · (17 hours ago)	{"datetime":"2026-11-11T00:56:20Z","clientRequestHTTPMethodName":"GET","clientRequestHTTPHost":"about.refresh.cx","clientRequestPath":"/firebase-adminsdk.json","edgeResponseStatus":403,"clientIP":"34.15.150.42","clientCountryName":"TH","originRespons ... show more {"datetime":"2026-11-11T00:56:20Z","clientRequestHTTPMethodName":"GET","clientRequestHTTPHost":"about.refresh.cx","clientRequestPath":"/firebase-adminsdk.json","edgeResponseStatus":403,"clientIP":"34.15.150.42","clientCountryName":"TH","originResponseStatus":0}, {"datetime":"2026-11-11T00:56:20Z","clientRequestHTTPMethodName":"GET","clientRequestHTTPHost":"about.refresh.cx","clientRequestPath":"/","edgeResponseStatus":403,"clientIP":"34.15.150.42","clientCountryName":"TH","originResponseStatus":0}, {"datetime":"2026-11-11T00:56:20Z","clientRequestHTTPMethodName":"GET","clientRequestHTTPHost":"about.refresh.cx","clientRequestPath":"/firebase-key.json","edgeResponseStatus":403,"clientIP":"34.15.150.42","clientCountryName":"TH","originResponseStatus":0} show less	Web App Attack Bad Web Bot
🇫🇷 masterguru	2026-11-10 23:58:38 UTC · (18 hours ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇫🇮 mnazibo	2026-11-10 19:05:23 UTC · (22 hours ago)	Date: Nov 10 21:56:17 2026 EAT \| Reported IP: 34.15.150.42 mod_security \| id: 932130 932235 932260 933135 934100 934130 942151 942550 949110 930130 920440 920500 \| TH/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| L ... show more Date: Nov 10 21:56:17 2026 EAT \| Reported IP: 34.15.150.42 mod_security \| id: 932130 932235 932260 933135 934100 934130 942151 942550 949110 930130 920440 920500 \| TH/usernameab.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; Remote Command Execution: Unix Shell Expression Found; Remote Command Execution: Unix Shell Expression Found; Remote Command Execution: Unix Command Injection (command without evasion); Remote Command Execution: Unix Command Injection (command without evasion); Remote Command Execution: Direct Unix Command Execution; Remote Command Execution: Direct Unix Command Execution; PHP Injection Attack: Variable Access Found; PHP Injection Attack: Variable Access Found; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; Node.js Injection Attack 1/2; JavaScript Prototype Pollution; JavaScript Prot show less	SQL Injection Brute-Force Bad Web Bot
Anonymous	2026-11-10 18:11:19 UTC · (23 hours ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇳🇱 OrangeFlamingo	2026-11-09 16:55:52 UTC · (2 days ago)	2026-11-09 16:55:51 WARN Probe detected: uri=/api/.env ip=34.15.150.42 ...	Web App Attack
🇦🇺 BorderTechSolutions	2026-11-09 06:48:56 UTC · (2 days ago)	Scanner probing for secrets/webshells on an API host: GET /.git/config. Hit a honeypot path that serves nothing real.	Web App Attack
Anonymous	2026-11-09 06:07:03 UTC · (2 days ago)	Automated web scanner. Requested suspicious paths: /.git/config. UTC: 2026-11-09 05:12:04.	Web App Attack
🇺🇸 inderiva6	2026-11-09 02:26:39 UTC · (2 days ago)	Automated HTTP(S) attack blocked by first-party WAF. FirstSeen=2026-11-09T02:26:01Z; LastSeen=2026-11-09T02:26:39Z; Requests=209; EvidenceHits=209; DistinctPaths=209; Methods=GET; Rules=scanner:3\|sensitive_files:206; SamplePaths=/.env\|/.env.backup\|/. ... show more Automated HTTP(S) attack blocked by first-party WAF. FirstSeen=2026-11-09T02:26:01Z; LastSeen=2026-11-09T02:26:39Z; Requests=209; EvidenceHits=209; DistinctPaths=209; Methods=GET; Rules=scanner:3\|sensitive_files:206; SamplePaths=/.env\|/.env.backup\|/.env.backup1\|/.env.backup2\|/.env.bak; LogDigest=6f69f8bd37d3a77a5c2a48b14437f990705133f1acb115229813c7eaa35bdc11. show less	Hacking Web App Attack
🇫🇷 Feelautom	2026-11-08 23:33:26 UTC · (2 days ago)	[FeelAutom Auto-Ban] PathScan: /.env.backup (Score: 200)	Port Scan
🇨🇦 CentiDevOps	2026-11-08 22:53:27 UTC · (2 days ago)	Web app scan: 15 requests in 3 s on 1 domain (404). Paths: /.git/config, /.env, /.env.development (+7 more). Sample: 2026-11-08T22:53:27Z "GET /.git/config" 404	Hacking Web App Attack
🇫🇮 oh.mg	2026-11-08 21:59:10 UTC · (2 days ago)	[Sun Nov 08 22:59:08.941965 2026] [security2:error] [pid 3738301:tid 3738309] [client 34.15.150.42:0] [client 34.15.150.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/sh ... show more [Sun Nov 08 22:59:08.941965 2026] [security2:error] [pid 3738301:tid 3738309] [client 34.15.150.42:0] [client 34.15.150.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "api.sup.coop"] [uri "/.env.txt"] [unique_id "avDwrDTCofv0Yxwa7xLwXgAAAEY"] [Sun Nov 08 22:59:09.523688 2026] [security2:error] [pid 3738301:tid 3738320] [client 34.15.150.42:0] [client 34.15.150.42] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-e ... show less	Web App Attack Bad Web Bot

Showing 1 to 15 of 69 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 92.118.39.75

🇫🇮 216.40.75.48

🇧🇷 205.210.31.226

🇧🇷 200.96.16.212

🇨🇳 183.204.62.122

🇺🇸 157.22.100.246

🇦🇷 153.67.13.48

🇷🇺 94.41.248.13

🇫🇷 85.217.140.39

🇬🇧 77.68.16.165

🇨🇳 36.157.103.116

🇷🇴 2.57.122.168

🇳🇱 195.178.110.134

🇺🇸 129.121.140.56

🇮🇩 114.4.121.174

🇺🇸 64.23.156.45

🇳🇱 45.148.10.141

🇨🇳 27.115.124.38

🇺🇸 198.13.215.77

🇳🇱 192.253.248.229