JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.158.132.138

34.158.132.138

Recent Activity

23 reports found in our database

97% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Google LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS396982

Hostname(s)

138.132.158.34.bc.googleusercontent.com

Domain Name

google.com

Country

🇳🇱 Netherlands

City

Groningen, Groningen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.158.132.138:

This IP address has been reported a total of 23 times from 17 distinct sources. 34.158.132.138 was first reported on September 6th 2026, and the most recent report was 1 hour ago. In the last 60 days, the top reporter locations were: United States of America with 6 reports; Germany with 5 reports; France with 2 reports. The most common categories in these recent reports were: Web App Attack 17 times; Brute-Force 16 times; Bad Web Bot 11 times; Hacking 3 times; Port Scan 3 times; Other 17 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇬 Cloudkul Cloudkul	2026-09-09 13:56:42 (1 hour ago)	Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ... show more Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests. show less	Brute-Force Web App Attack
🇧🇪 cmbplf	2026-09-09 12:39:51 (2 hours ago)	1.078 requests with url.path phpinfo.php 242 requests with url.path credentials.json	Brute-Force Bad Web Bot
🇸🇪 vaia.cloud	2026-09-09 12:05:02 (2 hours ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇩🇪 iNetWorker	2026-09-09 10:59:14 (4 hours ago)	trolling for resource vulnerabilities	Web App Attack
🇳🇱 Site.eu	2026-09-09 09:29:50 (5 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-09-09 09:09:09 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.158.132.138 (138.132.158.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.158.132.138 (138.132.158.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 05:09:03.332054 2026] [security2:error] [pid 9656:tid 9656] [client 34.158.132.138:46034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "badgerkelley.com"] [uri "/.git/config"] [unique_id "aqEiL34kjcbqYi7Z8K-c-AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-09 08:49:28 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.158.132.138 (138.132.158.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.158.132.138 (138.132.158.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 04:49:21.177608 2026] [security2:error] [pid 22747:tid 22747] [client 34.158.132.138:54784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "badfoodlawsuit.com"] [uri "/.git/config"] [unique_id "aqEdkRX3RNHhA_k_gTvnuAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 Hazzard	2026-09-09 06:32:31 (8 hours ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
🇺🇸 TPI-Abuse	2026-09-09 06:13:25 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.158.132.138 (138.132.158.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.158.132.138 (138.132.158.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 02:13:20.021097 2026] [security2:error] [pid 9133:tid 9133] [client 34.158.132.138:49300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bacpool.com"] [uri "/.git/config"] [unique_id "aqD5AOAT97ecm8oJYRd_UQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 tsZero	2026-09-09 04:23:25 (10 hours ago)	Scan example: path=/.git/config status=403	Hacking
🇵🇱 Budyn	2026-09-09 04:19:31 (10 hours ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: backup.sweetpuddingtrap.online \| URI: /.git/config \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇫🇮 6kilowatti	2026-09-09 03:54:16 (11 hours ago)	34.158.132.138 - - [09/Sep/2026:06:54:15 +0300] "POST / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Lin ... show more 34.158.132.138 - - [09/Sep/2026:06:54:15 +0300] "POST / HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 phoenix1jl96	2026-09-07 17:34:54 (1 day ago)	2026/09/07 19:34:53 [error] 3857369#3857369: 231710 open() "/home/user-data/www/default/mailer/.env ... show more 2026/09/07 19:34:53 [error] 3857369#3857369: 231710 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.158.132.138, server: autodiscover.epouville.fr, request: "GET /mailer/.env HTTP/1.1", host: "autodiscover.epouville.fr" 2026/09/07 19:34:53 [error] 3857369#3857369: *231710 open() "/usr/local/lib/roundcubemail/.env" failed (2: No such file or directory), client: 34.158.132.138, server: autodiscover.epouville.fr, request: "GET /mail/.env HTTP/1.1", host: "autodiscover.epouville.fr" ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot SSH Web App Attack
🇨🇭 DasBiberlein	2026-09-07 14:40:50 (2 days ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇺🇸 TPI-Abuse	2026-09-07 13:13:11 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.158.132.138 (138.132.158.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.158.132.138 (138.132.158.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 09:13:07.567094 2026] [security2:error] [pid 24310:tid 24310] [client 34.158.132.138:49154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.elegantweddingnapkins.com"] [uri "/.git/config"] [unique_id "ap64Y44MiUnLKN7qHdJDlAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 23 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2600:1900:4120:e3fb:0:82::

🇮🇳 122.187.235.148

🇳🇱 31.187.197.176

🇵🇰 202.63.219.200

🇺🇦 194.28.89.220

🇦🇷 186.22.245.180

🇺🇸 174.204.195.77

🇺🇸 134.199.238.80

🇮🇩 103.52.147.221

🇸🇬 84.75.148.154

🇱🇹 62.60.130.242

🇳🇱 31.14.32.7

🇺🇸 2607:f8b0:4001:c5f::129

🇺🇸 192.241.176.216

🇪🇨 186.42.173.68

🇩🇪 167.235.95.95

🇺🇸 162.241.235.82

🇻🇳 160.250.131.238

🇦🇷 149.107.239.66

🇺🇸 87.232.152.71