JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.154.239.243

34.154.239.243 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	243.239.154.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.154.239.243

Whois 34.154.239.243

IP Abuse Reports for 34.154.239.243:

This IP address has been reported a total of 24 times from 20 distinct sources. 34.154.239.243 was first reported on September 16th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 poundawebsiteltd	2026-09-18 18:56:36 (1 hour ago)	Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.154.239 ... show more Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.154.239.243 (IT/Italy/[REDACTED_DOMAIN]): 20 in the last 3600 secs \| UA: (apache_probe) Failed Access (403/404) 34.154.239.243 (IT/Italy/243.239.154.34.bc.googleusercontent.com): 20 in the last 3600 secs show less	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 15:25:59 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.154.239.243 (243.239.154.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.154.239.243 (243.239.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 11:25:53.588187 2026] [security2:error] [pid 26187:tid 26187] [client 34.154.239.243:38312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.playmakersinc.com"] [uri "/.git/config"] [unique_id "aq1YARxSqzozjQnckSQZUQAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 14:45:10 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.154.239.243 (243.239.154.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.154.239.243 (243.239.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 10:44:58.947962 2026] [security2:error] [pid 9326:tid 9326] [client 34.154.239.243:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.plaiatech.com"] [uri "/.git/config"] [unique_id "aq1OanhfFeGBanu1d349jAAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 13:51:36 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.154.239.243 (243.239.154.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.154.239.243 (243.239.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 09:51:33.034340 2026] [security2:error] [pid 15085:tid 15085] [client 34.154.239.243:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.pixacast.com"] [uri "/.git/config"] [unique_id "aq1B5UtBhPulhSNGsY9XqAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 clauss	2026-09-18 13:32:39 (6 hours ago)	34.154.239.243 - - [18/Sep/2026:16:32:37 +0300] "GET /.git/config HTTP/1.1" 200 314 "-" "Mozilla/5.0 ... show more 34.154.239.243 - - [18/Sep/2026:16:32:37 +0300] "GET /.git/config HTTP/1.1" 200 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.239.243 - - [18/Sep/2026:16:32:39 +0300] "GET /.env.local HTTP/1.1" 200 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 Blexyel	2026-09-18 13:12:35 (6 hours ago)	34.154.239.243 - - [18/Sep/2026:15:12:34 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 ... show more 34.154.239.243 - - [18/Sep/2026:15:12:34 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇩🇪 TheDjRider	2026-09-18 13:12:01 (6 hours ago)	CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban tri ... show more CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-09-18T13:11:59.351951096Z. Context: http_status=200 show less	Web App Attack
🇫🇷 Catalin Negru	2026-09-18 09:37:52 (10 hours ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇺🇸 TPI-Abuse	2026-09-18 09:15:32 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.154.239.243 (243.239.154.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.154.239.243 (243.239.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 05:15:27.810166 2026] [security2:error] [pid 11577:tid 11577] [client 34.154.239.243:51264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.perlcreative.com"] [uri "/.git/config"] [unique_id "aq0BL6FPYspFs11mZX205wAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 rubixstudios	2026-09-18 07:02:02 (13 hours ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack
🇫🇷 phoenix1jl96	2026-09-18 06:45:19 (13 hours ago)	2026/09/18 08:45:18 [error] 138669#138669: 18070 open() "/home/user-data/www/default/mailer/.env" f ... show more 2026/09/18 08:45:18 [error] 138669#138669: 18070 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.154.239.243, server: autodiscover.pbs.ledemon.us, request: "GET /mailer/.env HTTP/1.1", host: "autodiscover.pbs.ledemon.us" 2026/09/18 08:45:18 [error] 138669#138669: *18070 open() "/usr/local/lib/roundcubemail/.env" failed (2: No such file or directory), client: 34.154.239.243, server: autodiscover.pbs.ledemon.us, request: "GET /mail/.env HTTP/1.1", host: "autodiscover.pbs.ledemon.us" ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot SSH Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-09-18 06:31:44 (13 hours ago)	[Fri Sep 18 00:31:38.901852 2026] [authz_core:error] [pid 137360:tid 140604089734720] [client 34.154 ... show more [Fri Sep 18 00:31:38.901852 2026] [authz_core:error] [pid 137360:tid 140604089734720] [client 34.154.239.243:35352] AH01630: client denied by server configuration: /var/www/horde/.env.bak [Fri Sep 18 00:31:43.687555 2026] [authz_core:error] [pid 137360:tid 140603673278016] [client 34.154.239.243:35352] AH01630: client denied by server configuration: /var/www/horde/.env.dist [Fri Sep 18 00:31:43.813745 2026] [authz_core:error] [pid 137360:tid 140601559299648] [client 34.154.239.243:35352] AH01630: client denied by server configuration: /var/www/horde/.env.swp ... show less	Bad Web Bot
🇸🇪 nekopavel	2026-09-18 06:20:59 (13 hours ago)	34.154.239.243 - - [18/Sep/2026:08:20:58 +0200]"GET /.git/config HTTP/1.1" 404 178"-" autodiscover.p ... show more 34.154.239.243 - - [18/Sep/2026:08:20:58 +0200]"GET /.git/config HTTP/1.1" 404 178"-" autodiscover.pavel.gg "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.001" "0.000""Milan" "IT" 34.154.239.243 - - [18/Sep/2026:08:20:58 +0200]"GET /.env HTTP/1.1" 404 178"-" autodiscover.pavel.gg "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.000" "0.000""Milan" "IT" 34.154.239.243 - - [18/Sep/2026:08:20:58 +0200]"GET /.env.local HTTP/1.1" 404 178"-" autodiscover.pavel.gg "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.001" "0.000""Milan" "IT" ... show less	Hacking Bad Web Bot Web App Attack
🇵🇱 strefapi_com	2026-09-18 00:37:33 (19 hours ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇵🇱 wHosts	2026-09-18 00:23:32 (19 hours ago)	Blocked by Fail2Ban	Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.180.246.105

🇬🇧 188.240.59.22

🇺🇸 70.172.164.55

🇱🇹 62.60.130.253

🇳🇱 45.148.10.157

🇬🇧 35.203.210.11

🇷🇺 188.247.43.42

🇻🇳 171.244.141.86

🇭🇰 114.111.54.189

🇺🇸 66.132.172.127

🇺🇦 37.203.17.159

🇬🇧 2.120.42.200

🇰🇷 211.252.205.154

🇧🇬 193.24.211.218

🇧🇷 177.30.68.202

🇬🇧 206.68.83.251

🇧🇷 179.42.34.166

🇫🇷 176.173.14.222

🇺🇸 162.216.149.233

🇸🇬 159.65.5.51