JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.171.72.129

34.171.72.129 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 66%: ?

66%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	129.72.171.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.171.72.129

Whois 34.171.72.129

IP Abuse Reports for 34.171.72.129:

This IP address has been reported a total of 17 times from 12 distinct sources. 34.171.72.129 was first reported on September 21st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-09-29 15:06:02 (1 day ago)	Fail2Ban - [WAF]ModSecurity OWASP CRS rule violation on nginx-modsecurity ... [ice01,wa01,wa02]	Hacking SQL Injection Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-09-29 13:57:02 (1 day ago)	Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [wa01,wa02]	Hacking SQL Injection Web App Attack
Anonymous	2026-09-29 13:33:41 (1 day ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
Anonymous	2026-09-29 13:18:03 (1 day ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇵🇱 nakordoni.eu	2026-09-29 08:30:04 (1 day ago)	Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matc ... show more Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: Google LLC (US), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 53/100. show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-29 05:49:34 (1 day ago)	[ti-03tr] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-03tr] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.171.72.129 - - [29/Sep/2026:07:49:19 +0200] "GET /.git/config HTTP/1.1" 404 3239 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-29 00:25:21 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.171.72.129 (129.72.171.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.171.72.129 (129.72.171.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:25:16.958274 2026] [security2:error] [pid 16222:tid 16222] [client 34.171.72.129:60356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.tbvfc.com"] [uri "/.git/config"] [unique_id "arsFbDK4zjtkClzs6WtgtgAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-28 10:16:10 (2 days ago)	[28/Sep/2026:13:16:09 +0300] -- 34.171.72.129 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git ... show more [28/Sep/2026:13:16:09 +0300] -- 34.171.72.129 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-26 20:19:12 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.171.72.129 (129.72.171.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.171.72.129 (129.72.171.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 16:19:05.296082 2026] [security2:error] [pid 12272:tid 12272] [client 34.171.72.129:54092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.10bestattorneys.com"] [uri "/.git/config"] [unique_id "argoud1ErZKhLnuwOCMMnQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 lolyay	2026-09-25 06:32:32 (5 days ago)	34.171.72.129 - - [25/Sep/2026:06:32:30 +0000] "GET /.git/config HTTP/1.1" 200 4 "-" "Mozilla/5.0 (X ... show more 34.171.72.129 - - [25/Sep/2026:06:32:30 +0000] "GET /.git/config HTTP/1.1" 200 4 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.171.72.129 - - [25/Sep/2026:06:32:31 +0000] "GET /.env HTTP/1.1" 200 4 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack Bad Web Bot
🇳🇱 Site.eu	2026-09-25 03:05:48 (5 days ago)	Excessive 404/403 errors	Brute-Force
🇩🇪 dbmwebdesign	2026-09-25 00:01:13 (5 days ago)	Repeated probing for non-existent PHP exploit paths blocked by Fail2Ban	Web App Attack
🇳🇱 homeshowdomain.nl	2026-09-22 22:01:17 (1 week ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-21. show less	Web App Attack SSH Hacking
🇩🇪 marten_o	2026-09-21 16:04:45 (1 week ago)	34.171.72.129 - - [21/Sep/2026:18:04:44 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 404 236 "-" "Mozilla/ ... show more 34.171.72.129 - - [21/Sep/2026:18:04:44 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 323 458 ... show less	Web App Attack
🇸🇪 vaia.cloud	2026-09-21 07:45:03 (1 week ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 193.47.62.69

🇧🇷 187.102.92.116

🇺🇸 100.50.17.159

🇱🇹 62.60.130.201

🇺🇸 2600:1f18:66cd:1a50:6560:d914:1504:8c3

🇹🇼 198.235.24.91

🇧🇷 177.33.139.183

🇨🇳 120.221.233.41

🇳🇱 109.160.32.177

🇿🇲 102.23.122.235

🇨🇦 85.217.149.2

🇲🇦 41.92.125.61

🇺🇸 40.77.167.24

🇳🇱 195.178.110.102

🇬🇧 193.163.125.61

🇪🇸 170.253.45.81

🇳🇱 109.160.32.140

🇿🇦 105.8.4.166

🇵🇰 103.72.87.158

🇳🇱 204.76.203.4