JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.154.242.236

34.154.242.236 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 65%: ?

65%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	236.242.154.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇮🇹 Italy
City	Milan, Lombardy

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.154.242.236

Whois 34.154.242.236

IP Abuse Reports for 34.154.242.236:

This IP address has been reported a total of 13 times from 12 distinct sources. 34.154.242.236 was first reported on September 15th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-16 22:02:48 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-15. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-09-15 23:22:44 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.154.242.236 (236.242.154.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.154.242.236 (236.242.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 19:22:39.541928 2026] [security2:error] [pid 27912:tid 27912] [client 34.154.242.236:54276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lenorasflowers.com"] [uri "/.git/config"] [unique_id "aqnTP3iLu0m3Jr_72AAP7wAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-15 20:10:04 (3 days ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-09-15 18:50:15 (3 days ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 18:42:02 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.154.242.236 (236.242.154.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.154.242.236 (236.242.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 14:41:55.939462 2026] [security2:error] [pid 17606:tid 17606] [client 34.154.242.236:54772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lemontreefoods.com"] [uri "/.git/config"] [unique_id "aqmRc5_Ugd4BRadA8Thl9QAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 yitzhaq	2026-09-15 18:33:37 (3 days ago)	34.154.242.236 - - [15/Sep/2026:20:33:30 +0200] "GET /.env.production HTTP/1.1" 404 42142 "-" "Mozil ... show more 34.154.242.236 - - [15/Sep/2026:20:33:30 +0200] "GET /.env.production HTTP/1.1" 404 42142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.242.236 - - [15/Sep/2026:20:33:30 +0200] "GET /.env.staging HTTP/1.1" 404 42142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.242.236 - - [15/Sep/2026:20:33:31 +0200] "GET /.env.development HTTP/1.1" 404 42142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.242.236 - - [15/Sep/2026:20:33:31 +0200] "GET /.env.test HTTP/1.1" 404 42142 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.242.236 - - [15/Sep/2026:20:33:31 +0200] "GET /.env.remote HTTP/1.1" 404 42105 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.154.242.236 - - [15 show less	Web App Attack Hacking
🇳🇱 Alt255	2026-09-15 16:44:37 (4 days ago)	[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.154.242.236 - - [15/Sep/2026:18:44:36 +0200] "GET /.git/config HTTP/1.1" 404 2129 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 IVski.com	2026-09-15 08:14:01 (4 days ago)	IVski WAF \| Sensitive file probe - looking for exposed .git/config	Hacking Brute-Force Web App Attack
🇩🇪 SCHAPPY	2026-09-15 07:52:48 (4 days ago)	Brute-force attack to non-existent web resources, HTTP code 404.	Brute-Force Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-15 06:01:57 (4 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 gadix	2026-09-15 04:59:34 (4 days ago)	[15/Sep/2026:06:59:34.189126 +0200] aqjQtq6lt7tHgiN7w-h8-AAAAI8 34.154.242.236 42406 127.0.0.1 7081 ... show more [15/Sep/2026:06:59:34.189126 +0200] aqjQtq6lt7tHgiN7w-h8-AAAAI8 34.154.242.236 42406 127.0.0.1 7081 [15/Sep/2026:06:59:34.225462 +0200] aqjQtq6lt7tHgiN7w-h8-QAAAIM 34.154.242.236 42422 127.0.0.1 7081 [15/Sep/2026:06:59:34.244699 +0200] aqjQtq6lt7tHgiN7w-h8-gAAAII 34.154.242.236 42424 127.0.0.1 7081 ... show less	Web App Attack
🇳🇱 Site.eu	2026-09-15 04:19:34 (4 days ago)	Excessive 404/403 errors	Brute-Force
Anonymous	2026-09-15 03:15:38 (4 days ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 201.149.53.243

🇧🇷 200.12.12.110

🇭🇰 199.45.154.52

🇬🇧 185.216.145.165

🇨🇴 181.59.2.207

🇮🇪 98.71.8.129

🇸🇬 47.79.207.81

🇺🇸 3.89.209.40

🇲🇾 202.146.94.206

🇬🇧 193.176.29.10

🇺🇸 162.216.150.158

🇺🇸 162.216.150.152

🇬🇧 161.35.34.21

🇮🇳 122.187.228.228

🇵🇸 77.91.128.171

🇺🇸 66.132.172.229

🇰🇷 58.229.253.119

🇩🇪 47.245.179.7

🇺🇸 45.79.207.252

🇩🇪 43.228.157.8