JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.154.132.72

34.154.132.72 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	72.132.154.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.154.132.72

Whois 34.154.132.72

IP Abuse Reports for 34.154.132.72:

This IP address has been reported a total of 36 times from 24 distinct sources. 34.154.132.72 was first reported on September 16th 2026, and the most recent report was 5 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Petros Stefanakis	2026-09-21 01:41:20 (5 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.154.132.72 (IT/Italy/72.132.154.34.b ... show more (mod_security) mod_security triggered on hostname [redacted] 34.154.132.72 (IT/Italy/72.132.154.34.bc.googleusercontent.com) show less	SQL Injection
Anonymous	2026-09-20 23:23:37 (7 hours ago)	34.154.132.72 - - [21/Sep/2026:01:23:32 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh ... show more 34.154.132.72 - - [21/Sep/2026:01:23:32 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.132.72 - - [21/Sep/2026:01:23:32 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.132.72 - - [21/Sep/2026:01:23:33 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.132.72 - - [21/Sep/2026:01:23:33 +0200] "GET /.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.132.72 - - [21/Sep/2026:01:23:34 +0200] "GET /.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34 ... show less	Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-20 15:05:02 (16 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-09-20 12:40:13 (18 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇳🇱 Mangelot Hosting	2026-09-20 12:04:31 (19 hours ago)	(php_susp_dir) srv101 PHP Suspicious Directory 34.154.132.72 (IT/Italy/72.132.154.34.bc.googleuserco ... show more (php_susp_dir) srv101 PHP Suspicious Directory 34.154.132.72 (IT/Italy/72.132.154.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇳🇱 Alt255	2026-09-20 10:53:33 (20 hours ago)	[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.154.132.72 - - [20/Sep/2026:12:53:29 +0200] "GET /.git/config HTTP/1.1" 404 765 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-09-20 10:22:44 (20 hours ago)	20 attempts against mh-misbehave-ban on boron	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-09-20 10:15:54 (20 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 maxxsense	2026-09-20 09:05:16 (22 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.154.132.72 (IT/Italy/72.132.154.34.b ... show more (mod_security) mod_security triggered on hostname [redacted] 34.154.132.72 (IT/Italy/72.132.154.34.bc.googleusercontent.com) show less	SQL Injection
🇨🇭 🇨🇭 Hosting	2026-09-20 08:00:03 (23 hours ago)	Automated security scanning detected: Environment File Exposure, Git Repository Config Exposure, API ... show more Automated security scanning detected: Environment File Exposure, Git Repository Config Exposure, API Environment File Exposure, Laravel Environment File Exposure, Production Environment File Exposure. Systematic reconnaissance using automated tools. show less	Web App Attack
🇩🇪 pscriptos	2026-09-20 01:43:43 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch	Web App Attack
🇺🇸 TPI-Abuse	2026-09-20 00:43:30 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.154.132.72 (72.132.154.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.154.132.72 (72.132.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 20:43:23.744160 2026] [security2:error] [pid 19264:tid 19264] [client 34.154.132.72:60456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aschmidtconsulting.com"] [uri "/.git/config"] [unique_id "aq8sK8BotgnPcB3ry7kJ_AAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hary74656	2026-09-20 00:31:22 (1 day ago)	Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3. [earlier text truncated] y: Acces ... show more Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3. [earlier text truncated] y: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 35)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "aschi.at"] [uri "/"] [unique_id "aq8pWRwuIgOnhUMKMEM6NgAAAMo"] [Sun Sep 20 02:31:22.075253 2026] [security2:error] [pid 135756:tid 135850] [client 34.154.132.72:50824] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [ver "OWASP_CRS/4.29.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "aschi.at"] [uri "/"] [unique_id "aq8pWhwuIgOnhUMKMEM6NwAAAM8"] show less	Web App Attack
🇩🇪 TheDjRider	2026-09-19 14:50:46 (1 day ago)	CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban tri ... show more CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-09-19T14:50:43.588261789Z. Context: http_status=200 show less	Web App Attack
🇨🇦 polycoda	2026-09-19 05:46:35 (2 days ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based ... show more AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based) show less	Hacking Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇿🇦 197.185.176.206

🇧🇷 189.29.147.178

🇭🇺 178.48.71.236

🇺🇸 139.28.232.159

🇺🇸 95.164.136.26

🇫🇷 85.217.140.36

🇫🇷 64.7.195.81

🇯🇵 43.165.174.53

🇬🇧 35.203.210.11

🇧🇷 16.5.0.236

🇫🇷 2001:41d0:33d:9200::40a

🇰🇷 218.149.228.171

🇲🇽 201.163.15.122

🇧🇷 179.109.154.44

🇦🇷 167.250.209.92

🇮🇹 151.41.149.141

🇲🇾 120.138.95.36

🇫🇷 91.196.152.63

🇨🇭 89.251.254.179

🇨🇦 85.217.149.65