JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.178.39.243

Recent Activity

Abuse Confidence Score

100% Critical

102 reports

75 reporters · latest 2 days ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 243.39.178.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇳🇱 Netherlands
City: Groningen, Groningen

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

102 from 75 distinct reporters

First reported

November 1st 2026

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 27 🇩🇪 Germany 11 🇬🇧 United Kingdom of Great Britain and Northern Ireland 11

Most common categories Web App Attack 72 Bad Web Bot 40 Brute-Force 29 Hacking 20 Port Scan 5

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 NotCool	2026-11-06 21:41:40 UTC · (2 days ago)	(CRAWLDELAY) Generic Bot Crawl-delay Violation 34.178.39.243 (NL/The Netherlands/243.39.178.34.bc.googleusercontent.com): 50 in the last 3600 secs	Bad Web Bot
🇺🇸 jcbriar	2026-11-06 21:30:23 UTC · (2 days ago)	Searching for vulnerable scripts	Hacking Web App Attack
🇺🇸 proactive-noc	2026-11-06 18:37:22 UTC · (2 days ago)	Web application abuse detected 10 times recently; honeypot-j.	Hacking Web App Attack
🇧🇾 lns.bz	2026-11-06 18:35:20 UTC · (2 days ago)	Too many 404 requests [BY]	Web App Attack
🇩🇪 big-cloud.nl	2026-11-06 17:55:35 UTC · (2 days ago)	Try to access /api%2F.env	Web App Attack
🇺🇸 TPI-Abuse	2026-11-06 17:11:54 UTC · (2 days ago)	(mod_security) mod_security (id:210730) triggered by 34.178.39.243 (243.39.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:11:47.801588 2026] [security2:error] [pid 23988:tid ... show more (mod_security) mod_security (id:210730) triggered by 34.178.39.243 (243.39.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:11:47.801588 2026] [security2:error] [pid 23988:tid 23988] [client 34.178.39.243:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|autodiscover.juliajimmy.com\|F\|2"] [data ".juliajimmy.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.juliajimmy.com"] [uri "/z9x8c7v6b5-debug-trigger-autodiscover.juliajimmy.com"] [unique_id "au4KU0KkyZPfeCCADlHU8AAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-06 14:21:03 UTC · (2 days ago)	(mod_security) mod_security (id:210730) triggered by 34.178.39.243 (243.39.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:20:55.817571 2026] [security2:error] [pid 30344:tid ... show more (mod_security) mod_security (id:210730) triggered by 34.178.39.243 (243.39.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:20:55.817571 2026] [security2:error] [pid 30344:tid 30344] [client 34.178.39.243:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mail-pmg.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail-pmg.com"] [uri "/z9x8c7v6b5-debug-trigger-mail-pmg.com"] [unique_id "au3iR7LtiNEcctXMyCBsJAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 iwle	2026-11-06 12:09:17 UTC · (3 days ago)	[Fri Nov 06 07:09:15.620286 2026] [:error] [pid 909453:tid 909500] [client 34.178.39.243:0] [client 34.178.39.243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activate ... show more [Fri Nov 06 07:09:15.620286 2026] [:error] [pid 909453:tid 909500] [client 34.178.39.243:0] [client 34.178.39.243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.justuptowngames.com"] [uri "/.zshrc"] [unique_id "au3DayVHIiDCBTBVq13VzAAAABM"], referer: https://justuptowngames.com/.zshrc [Fri Nov 06 07:09:16.021293 2026] [:error] [pid 909140:tid 909197] [client 34.178.39.243:0] [client 34.178.39.243] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "153"] [id "949110"] [msg "Inbound A ... show less	Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-11-06 12:00:04 UTC · (3 days ago)	csagent: score 19.2: 404 noise floor x37, wp-config backup grab x1; 1 domain(s) in 3s	Web App Attack
🇺🇸 TPI-Abuse	2026-11-06 11:53:24 UTC · (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.178.39.243 (243.39.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 06:53:19.649155 2026] [security2:error] [pid 22618:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.178.39.243 (243.39.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 06:53:19.649155 2026] [security2:error] [pid 22618:tid 22618] [client 34.178.39.243:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.local639.com"] [uri "/.env.preprod"] [unique_id "au2_r_zF2NF7sZnqOO5ECQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-11-06 10:40:03 UTC · (3 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇩🇰 floyd_dk	2026-11-06 10:09:27 UTC · (3 days ago)	34.178.39.243 - - [06/Nov/2026:10:09:27 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.178.39.243 - - [06/Nov/2026:10:09:27 +0000] "G ... show more 34.178.39.243 - - [06/Nov/2026:10:09:27 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.178.39.243 - - [06/Nov/2026:10:09:27 +0000] "GET /sitemap_index.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" 34.178.39.243 - - [06/Nov/2026:10:09:27 +0000] "GET /assets/manifest.json HTTP/2.0" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.178.39.243 - - [06/Nov/2026:10:09:27 +0000] "GET /r6fk53dd5du73qkiece5 HTTP/2.0" 404 153 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" 34.178.39.243 - - [06/Nov/2026:10:09:27 +0000] "GET /z9x8c7v6b5-debug-trigger-nextcloud.jcsteadi.cam HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.178.39.243 - - [06/Nov/2026:10:09:27 +0000] "GET /dist/manifest.json HTTP/2.0" 404 555 ... show less	Web App Attack
🇷🇴 gtheo99	2026-11-06 09:55:11 UTC · (3 days ago)	(CT) IP 34.178.39.243 (NL/The Netherlands/243.39.178.34.bc.googleusercontent.com) found to have 147 connections	Port Scan
🇿🇦 Megasurf	2026-11-06 09:35:18 UTC · (3 days ago)	web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).	Web App Attack
🇺🇸 TPI-Abuse	2026-11-06 09:18:54 UTC · (3 days ago)	(mod_security) mod_security (id:210580) triggered by 34.178.39.243 (243.39.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:18:49.634987 2026] [security2:error] [pid 13948:tid ... show more (mod_security) mod_security (id:210580) triggered by 34.178.39.243 (243.39.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:18:49.634987 2026] [security2:error] [pid 13948:tid 13948] [client 34.178.39.243:0] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at ARGS:path. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt\|\|autodiscover.kirklandhighlands.org\|F\|2"] [data "Matched Data: proc/self/environ found within ARGS:path: /proc/self/environ"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "autodiscover.kirklandhighlands.org"] [uri "/api/fs/read"] [unique_id "au2beXcJg7Ad5nzplLbqXQAAACc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 102 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇼 41.216.214.10

🇧🇪 35.210.188.253

🇮🇹 188.152.238.126

🇭🇰 167.148.117.193

🇩🇪 130.61.73.28

🇨🇳 111.61.97.5

🇳🇱 85.155.15.14

🇺🇸 52.22.87.224

🇩🇪 51.89.72.14

🇬🇧 35.203.210.127

🇺🇸 2600:100b:a110:81d4:28ad:c114:62bf:4bd3

🇷🇺 212.109.13.133

🇳🇱 204.76.203.38

🇺🇸 192.177.101.58

🇻🇪 190.153.66.12

🇧🇩 103.74.11.140

🇺🇸 216.70.97.74

🇨🇳 182.204.182.18

🇮🇳 180.151.244.108

🇩🇪 69.5.169.24