JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.179.142.38

34.179.142.38 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 0%: ?

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	38.142.179.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.179.142.38

Whois 34.179.142.38

IP Abuse Reports for 34.179.142.38:

This IP address has been reported a total of 20 times from 15 distinct sources. 34.179.142.38 was first reported on June 8th 2026, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-09 22:00:58 (2 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08. show less	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-06-08 22:09:13 (2 months ago)	Auto-ban: >3000 req/min op 2026-06-08	Web App Attack SSH Hacking
🇳🇱 e.fierstra	2026-06-08 16:45:30 (2 months ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
Anonymous	2026-06-08 16:34:16 (2 months ago)	34.179.142.38 - - [08/Jun/2026:18:34:14 +0200] "GET /actuator/env HTTP/1.1" 404 733 "-" "Mozilla/5.0 ... show more 34.179.142.38 - - [08/Jun/2026:18:34:14 +0200] "GET /actuator/env HTTP/1.1" 404 733 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.36" 34.179.142.38 - - [08/Jun/2026:18:34:14 +0200] "GET /actuator/env HTTP/1.1" 404 297 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.36" 34.179.142.38 - - [08/Jun/2026:18:34:14 +0200] "GET /api/heapdump HTTP/1.1" 404 733 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/538.1 (KHTML, like Gecko) QupZilla/1.9.0 Safari/538.1" 34.179.142.38 - - [08/Jun/2026:18:34:14 +0200] "GET /api/heapdump HTTP/1.1" 404 297 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/538.1 (KHTML, like Gecko) QupZilla/1.9.0 Safari/538.1" 34.179.142.38 - - [08/Jun/2026:18:34:14 +0200] "GET /api/env HTTP/1.1" 404 733 "-" "Mozilla/5.0 (Linux; Android 9; Redmi Note 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537. ... show less	Bad Web Bot Web App Attack
Anonymous	2026-06-08 15:49:57 (2 months ago)	(caddyscan) Scanner path probe from 34.179.142.38 (DE/Germany/38.142.179.34.bc.googleusercontent.com ... show more (caddyscan) Scanner path probe from 34.179.142.38 (DE/Germany/38.142.179.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.179.142.38 - - [08/Jun/2026:15:49:55 +0000] "GET /app/actuator/heapdump HTTP/1.1" [REDACTED] 200 2627 34.179.142.38 - - [08/Jun/2026:15:49:55 +0000] "GET /actuator/heapdump HTTP/1.1" [REDACTED] 200 2627 34.179.142.38 - - [08/Jun/2026:15:49:55 +0000] "GET /app/actuator/env HTTP/1.1" [REDACTED] 200 2627 34.179.142.38 - - [08/Jun/2026:15:49:55 +0000] "GET /api/actuator/heapdump HTTP/1.1" [REDACTED] 200 2627 34.179.142.38 - - [08/Jun/2026:15:49:55 +0000] "GET /app/actuator/configprops HTTP/1.1" show less	Port Scan
🇫🇷 masterguru	2026-06-08 11:48:16 (2 months ago)	Restricted File Access Attempt. Matched phrase "credentials.json" at REQUEST_FILENAME. (930130-197)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 11:22:51 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 34.179.142.38 (38.142.179.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.179.142.38 (38.142.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 07:22:44.467289 2026] [security2:error] [pid 20166:tid 20166] [client 34.179.142.38:51412] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.shadowveil.io\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.shadowveil.io"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiamBIgbP2i2Av8SLXZySAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 LRob	2026-06-08 11:00:14 (2 months ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
Anonymous	2026-06-08 10:23:37 (2 months ago)	Multiple web server 400 error codes from same source ip	Web App Attack
Anonymous	2026-06-08 10:04:08 (2 months ago)	Blocked by ModSec and CSF	Port Scan
🇳🇱 maxxsense	2026-06-08 09:19:07 (2 months ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 34.179.142.38 (DE/German ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 34.179.142.38 (DE/Germany/38.142.179.34.bc.googleusercontent.com) show less	Port Scan
Anonymous	2026-06-08 08:01:45 (2 months ago)	(caddyscan) Scanner path probe from 34.179.142.38 (DE/Germany/38.142.179.34.bc.googleusercontent.com ... show more (caddyscan) Scanner path probe from 34.179.142.38 (DE/Germany/38.142.179.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.179.142.38 - - [08/Jun/2026:08:01:42 +0000] "GET /actuator/env HTTP/1.1" [REDACTED] 200 2627 34.179.142.38 - - [08/Jun/2026:08:01:42 +0000] "GET /actuator/configprops HTTP/1.1" [REDACTED] 200 2627 34.179.142.38 - - [08/Jun/2026:08:01:42 +0000] "GET /actuator/dump HTTP/1.1" [REDACTED] 200 2627 34.179.142.38 - - [08/Jun/2026:08:01:42 +0000] "GET /actuator/trace HTTP/1.1" [REDACTED] 200 2627 34.179.142.38 - - [08/Jun/2026:08:01:42 +0000] "GET /actuator/logfile HTTP/1.1" show less	Port Scan
🇧🇷 P1n4	2026-06-08 07:45:39 (2 months ago)	Heimdal IDS auto-block: sensitive_file (score=0.90)	Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 06:21:19 (2 months ago)	(mod_security) mod_security (id:210730) triggered by 34.179.142.38 (38.142.179.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.179.142.38 (38.142.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 02:21:15.632324 2026] [security2:error] [pid 20089:tid 20103] [client 34.179.142.38:47646] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.upperwilds.com.danfriel.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.upperwilds.com.danfriel.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aiZfW2cbYPLkOAqFxP_fOQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-08 06:07:30 (2 months ago)	Abuse Detected (14)	Brute-Force Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 115.190.248.214

🇩🇪 167.94.145.22

🇳🇱 93.123.109.165

🇺🇸 72.225.141.225

🇩🇪 43.228.157.8

🇬🇧 35.203.210.28

🇳🇱 192.253.248.92

🇧🇷 191.210.72.37

🇧🇷 191.37.16.226

🇨🇳 182.43.235.218

🇩🇪 169.150.201.135

🇨🇳 115.191.32.68

🇺🇸 72.215.44.72

🇸🇬 52.237.80.79

🇺🇸 35.197.32.228

🇯🇵 34.85.11.35

🇰🇷 222.118.59.16

🇭🇰 202.82.20.241

🇷🇺 195.16.59.171

🇧🇷 191.33.76.49