JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.166.38.112

Recent Activity

Abuse confidence score ?

100% Critical

49 reports

34 reporters · latest 3 days ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	112.38.166.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇦 Saudi Arabia
City	Dammam, Eastern Province

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.166.38.112

This IP address has been reported a total of 49 times from 34 distinct sources. 34.166.38.112 was first reported on September 15th 2026, and the most recent report was 3 days ago. In the last 60 days, the top reporter locations were: United States of America with 16 reports; Netherlands with 11 reports; Germany with 7 reports. The most common categories in these recent reports were: Web App Attack 39 times; Brute-Force 20 times; Bad Web Bot 19 times; Hacking 10 times; Port Scan 5 times; Other 6 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 klaus_ph	2026-09-27 02:54:45 (3 days ago)	2026-09-26 00:30:58,450 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.166.38.112 .. ... show more 2026-09-26 00:30:58,450 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.166.38.112 ... show less	Bad Web Bot
🇩🇪 klaus_ph	2026-09-23 14:37:59 (6 days ago)	2026-09-23 01:17:06,025 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.166.38.112 .. ... show more 2026-09-23 01:17:06,025 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.166.38.112 ... show less	Bad Web Bot
🇮🇳 evicky2002	2026-09-23 06:00:01 (6 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇿🇦 conure.sh	2026-09-22 12:05:04 (1 week ago)	csagent: score 20.2: secrets grab x2, 404 noise floor x1; 1 domain(s) in 1s	Web App Attack
Anonymous	2026-09-22 07:40:10 (1 week ago)	\| [Dangerous/Saudi Arabia] Aggressive IP 34.166.38.112 (~30 hits). Type: DoS Defender- Web server 40 ... show more \| [Dangerous/Saudi Arabia] Aggressive IP 34.166.38.112 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇳🇱 e.fierstra	2026-09-22 07:07:40 (1 week ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 abuse-opdc	2026-09-22 06:30:45 (1 week ago)	Malicious HTTP requests matching injection/exploit signatures.	Web App Attack Brute-Force
🇺🇸 dot.mg	2026-09-22 04:46:05 (1 week ago)	Bad behaviour	Web Spam
🇬🇷 setupgr	2026-09-22 03:47:19 (1 week ago)	(mod_security) mod_security (id:11000011) triggered by 34.166.38.112 (SA/Saudi Arabia/Eastern Provin ... show more (mod_security) mod_security (id:11000011) triggered by 34.166.38.112 (SA/Saudi Arabia/Eastern Province/Dammam/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Tue Sep 22 06:47:18.825859 2026] [security2:error] [pid 1957330:tid 1957459] [client 34.166.38.112:52944] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 112.38.166.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "doityourself.gr"] [uri "/"] [unique_id "arH6Rif5-v8iZLuxYe1PCQAAA0c"] show less	Port Scan
🇩🇪 ghostwarriors	2026-09-22 03:20:05 (1 week ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇫🇷 masterguru	2026-09-22 02:56:40 (1 week ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇩🇪 yitzhaq	2026-09-22 02:55:51 (1 week ago)	34.166.38.112 - - [22/Sep/2026:04:55:48 +0200] "GET /.env.save HTTP/1.1" 403 549 "-" "Mozilla/5.0 (W ... show more 34.166.38.112 - - [22/Sep/2026:04:55:48 +0200] "GET /.env.save HTTP/1.1" 403 549 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.166.38.112 - - [22/Sep/2026:04:55:48 +0200] "GET /.env.old HTTP/1.1" 403 549 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.166.38.112 - - [22/Sep/2026:04:55:48 +0200] "GET /.env.sample HTTP/1.1" 403 549 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.166.38.112 - - [22/Sep/2026:04:55:48 +0200] "GET /.env.example HTTP/1.1" 403 549 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.166.38.112 - - [22/Sep/2026:04:55:49 +0200] "GET /.env.dev HTTP/1.1" 403 549 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34 show less	Web App Attack Hacking
Anonymous	2026-09-22 01:44:14 (1 week ago)	2026-09-21 21:44:13,042 fail2ban.actions [621931]: NOTICE [apache-auth] Ban 34.166.38.112 .. ... show more 2026-09-21 21:44:13,042 fail2ban.actions [621931]: NOTICE [apache-auth] Ban 34.166.38.112 ... show less	Port Scan Brute-Force
🇧🇪 cmbplf	2026-09-22 01:03:32 (1 week ago)	10.151 requests from abuseipdb.com blacklisted IP (1yr10mos3w)	Brute-Force Bad Web Bot
🇫🇷 ✨	2026-09-22 00:02:09 (1 week ago)	Domain : dogsatweddings.yellowanorak.com Rule : env 2026-09-22 00:00:42 *hidden-privacy* GET /.e ... show more Domain : dogsatweddings.yellowanorak.com Rule : env 2026-09-22 00:00:42 *hidden-privacy* GET /.env.docker - 443 - 34.166.38.112 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - dogsatweddings.yellowanorak.com 404 0 2 1445 309 89 - - show less	Hacking SQL Injection

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇱 181.43.201.226

🇺🇸 176.20.210.86

🇺🇸 172.234.218.22

🇧🇷 170.239.18.138

🇭🇰 156.225.1.41

🇨🇳 112.28.153.241

🇺🇸 98.172.187.201

🇺🇸 97.212.79.244

🇸🇦 84.13.136.9

🇬🇧 35.203.211.32

🇦🇪 2.51.207.76

🇷🇴 193.32.162.214

🇬🇧 185.247.137.191

🇧🇩 180.210.166.115

🇵🇭 180.191.0.66

🇫🇮 147.185.133.228

🇬🇧 138.68.144.176

🇮🇩 103.59.161.219

🇮🇷 85.198.19.100

🇳🇱 51.159.91.169