JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.154.138.40

34.154.138.40 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	40.138.154.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.154.138.40

Whois 34.154.138.40

IP Abuse Reports for 34.154.138.40:

This IP address has been reported a total of 30 times from 22 distinct sources. 34.154.138.40 was first reported on September 15th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-09-19 12:04:32 (6 hours ago)	Try to access /.git/config	Web App Attack
🇳🇱 Site.eu	2026-09-19 11:49:13 (6 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 et-a_network	2026-09-19 11:17:06 (7 hours ago)	34.154.138.40 - - [19/Sep/2026:11:17:04 +0000] "GET /phpinfo.php HTTP/2.0" 444 0 "-" "Mozilla/5.0 (W ... show more 34.154.138.40 - - [19/Sep/2026:11:17:04 +0000] "GET /phpinfo.php HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" host=e-pruef.et-a.eu via=172.64.198.179 rt=0.000 34.154.138.40 - - [19/Sep/2026:11:17:05 +0000] "GET /admin/phpinfo.php HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" host=e-pruef.et-a.eu via=162.158.102.29 rt=0.000 ... show less	Bad Web Bot Web App Attack
🇺🇸 Charlesiv	2026-09-18 22:30:31 (19 hours ago)	Triggered Cloudflare WAF (firewallCustom) from IT. Action taken: BLOCK ASN: 396982 (Google LLC) Prot ... show more Triggered Cloudflare WAF (firewallCustom) from IT. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/1.1 (GET method) Endpoint: / Timestamp: 2026-09-18T14:59:58Z Ray ID: a3d137b03aaced97 UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 pltcldvlpr	2026-09-18 17:14:17 (1 day ago)	CMS/framework probe: 34.154.138.40 - - [18/Sep/2026:08:32:30 +0200] "GET /.git/config HTTP/1.1" 444 ... show more CMS/framework probe: 34.154.138.40 - - [18/Sep/2026:08:32:30 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" asn=396982 org="Google LLC" country=IT ... show less	Web App Attack
🇺🇸 Charlesiv	2026-09-18 14:44:31 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from IT. Action taken: BLOCK ASN: 396982 (Google LLC) Prot ... show more Triggered Cloudflare WAF (firewallCustom) from IT. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/1.1 (GET method) Endpoint: /firebase-key.json Timestamp: 2026-09-18T13:35:59Z Ray ID: a3d0bcaa4d2d9cec UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Bad Web Bot
🇫🇷 dynamix	2026-09-18 12:57:42 (1 day ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 11:02:10 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.154.138.40 (40.138.154.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.154.138.40 (40.138.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 07:02:04.171873 2026] [security2:error] [pid 21292:tid 21292] [client 34.154.138.40:39648] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "assheton.com"] [uri "/.git/config"] [unique_id "aq0aLDjNT7CzvBer_nH2NQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 Mediashaker	2026-09-18 10:01:18 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 34.154.138.40 (IT/Italy/40.138.154.34.b ... show more (mod_security) mod_security triggered on hostname [redacted] 34.154.138.40 (IT/Italy/40.138.154.34.bc.googleusercontent.com) show less	SQL Injection
🇩🇪 pscriptos	2026-09-18 08:51:40 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 pscriptos	2026-09-18 07:02:56 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch	Web App Attack
🇩🇪 LRob	2026-09-17 12:25:10 (2 days ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config \| 2026-09-17 12:25 UTC show less	Hacking Web App Attack
Anonymous	2026-09-17 12:20:01 (2 days ago)	suspicious request in access.log	Web App Attack
🇫🇷 masterguru	2026-09-17 11:44:18 (2 days ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇩🇪 FD-IX	2026-09-17 10:43:48 (2 days ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.224.128.16

🇷🇺 80.95.38.14

🇱🇹 62.60.130.253

🇰🇷 61.85.5.245

🇩🇪 194.164.59.59

🇰🇷 140.238.3.21

🇸🇪 130.78.189.159

🇧🇬 109.160.32.44

🇷🇺 80.247.110.206

🇷🇴 80.94.95.118

🇺🇸 74.82.47.62

🇸🇪 46.59.88.25

🇺🇸 34.31.203.120

🇺🇸 216.25.89.66

🇮🇳 210.212.136.3

🇳🇱 193.47.62.69

🇩🇪 167.94.146.64

🇸🇬 165.22.105.152

🇨🇳 120.235.75.102

🇧🇪 81.244.240.64