JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.21.139.242

34.21.139.242 was found in our database!

This IP was reported 85 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	242.139.21.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.21.139.242

Whois 34.21.139.242

IP Abuse Reports for 34.21.139.242:

This IP address has been reported a total of 85 times from 67 distinct sources. 34.21.139.242 was first reported on September 16th 2026, and the most recent report was 15 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 [email protected]	2026-09-19 14:27:22 (15 minutes ago)	CrowdSec ban: crowdsecurity/http-bad-user-agent (duration: 71h59m53s)	Web App Attack
🇩🇪 Marco711	2026-09-19 13:57:50 (44 minutes ago)	port/URL scanning	Port Scan Web App Attack
🇨🇦 alexbfr	2026-09-19 13:47:55 (54 minutes ago)	Fail2Ban report from nginx-bot-trap; automated HTTP honeypot detection.	Web App Attack
🇪🇸 el-brujo	2026-09-19 13:46:06 (56 minutes ago)	19/Sep/2026:15:46:05.416311 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 19/Sep/2026:15:46:05.416311 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.21.139.242] ModSecurity: Warning. Matched phrase "proc/self/environ" at ARGS:0. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "98"] [id "930120"] [msg "OS File Access Attempt"] [data "Matched Data: proc/self/environ found within ARGS:0: {\\\\x22then\\\\x22:\\\\x22$1:__proto__:then\\\\x22,\\\\x22status\\\\x22:\\\\x22resolved_model\\\\x22,\\\\x22reason\\\\x22:-1,\\\\x22value\\\\x22:\\\\x22{/\\\\x22then/\\\\x22:/\\\\x22$b1337/\\\\x22}\\\\x22,\\\\x22_response\\\\x22:{\\\\x22_prefix\\\\x22:\\\\x22process.mainmodule.require('child_process').execsync('env 2>/dev/null \|\| cat /proc/self/environ 2>/dev/null');\\\\x22,\\\\x22_formdata\\\\x22:{\\\\x22get\\\\x22:\\\\x22$1:constructor:constructor\\\\x22}}}"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag " ... show less	Hacking Web App Attack
🇳🇱 Alt255	2026-09-19 13:43:31 (58 minutes ago)	[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ... show more [mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.21.139.242 - - [19/Sep/2026:15:43:20 +0200] "GET /@fs/src/.env?raw?? HTTP/2.0" 404 1422 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" ... show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-19 13:42:57 (59 minutes ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.21.139.242 (SG/Singapore/242.139.2 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.21.139.242 (SG/Singapore/242.139.21.34.bc.googleusercontent.com): 2 in the last 3600 secs (0-196) show less	Hacking
🇩🇪 pscriptos	2026-09-19 12:46:43 (1 hour ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇪🇸 el-brujo	2026-09-19 08:17:32 (6 hours ago)	Cloudflare WAF: Request Path: /mcp Request Query: Host: grafana.elhacker.net userAgent: Mozilla/5.0 ... show more Cloudflare WAF: Request Path: /mcp Request Query: Host: grafana.elhacker.net userAgent: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler) Action: block Source: firewallManaged ASN Description: Google LLC Country: SG Method: POST Timestamp: 2026-09-19T08:17:32Z ruleId: e7e4b386797e417c998d872956c390a1. Report generated by Cloudflare-WAF-to-AbuseIPDB. show less	Hacking SQL Injection Web App Attack
🇪🇸 el-brujo	2026-09-19 08:17:21 (6 hours ago)	19/Sep/2026:10:17:21.256774 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ... show more 19/Sep/2026:10:17:21.256774 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.21.139.242] ModSecurity: Warning. Pattern match "(?i)(?:\\\\\\\\x5c\|(?:%(?:c(?:0%(?:[2aq]f\|5c\|9v)\|1%(?:[19p]c\|8s\|af))\|2(?:5(?:c(?:0%25af\|1%259c)\|2f\|5c)\|%46\|f)\|(?:(?:f(?:8%8)?0%8\|e)0%80%a\|bg%q)f\|%3(?:2(?:%(?:%6\|4)6\|F)\|5%%63)\|u(?:221[56]\|002f\|EFC8\|F025)\|1u\|5c)\|0x(?:2f\|5c)\|\\\\\\\\/))(?:%(?:(?:f(?:(?:c%80\|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "48"] [id "930100"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /..%252f found within REQUEST_URI_RAW: /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw??"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [hostname "grafana.elhacker.net"] [uri "/@fs/..%2f..%2f..%2f..%2f..% ... show less	Hacking Web App Attack
🇩🇪 mzaiser12	2026-09-19 07:36:05 (7 hours ago)	Web application probing: 50 requests to typical attack paths (/.aws/credentials, /.docker/.env, /.en ... show more Web application probing: 50 requests to typical attack paths (/.aws/credentials, /.docker/.env, /.env.development, /.aws/config) within 5 min. Reported automatically by a SIEM; contact via abuse mailbox of the reporting network. show less	Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-09-19 06:24:07 (8 hours ago)	{"level":"info","ts":1789799042.174094,"logger":"http.log.access.log1","msg":"handled request","requ ... show more {"level":"info","ts":1789799042.174094,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.21.139.242","remote_port":"54864","client_ip":"34.21.139.242","proto":"HTTP/2.0","method":"GET","host":"eu.pandahut.net","uri":"/id_ecdsa","headers":{"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"],"Accept":["/"],"Cookie":["REDACTED"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"eu.pandahut.net","ech":false}},"bytes_read":0,"user_id":"","duration":0.00023024,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1789799042.1760669,"logger":"http.log.access.log1","msg":"han ... show less	DDoS Attack Web App Attack
🇫🇮 as211431.net	2026-09-19 04:41:00 (10 hours ago)	Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) ... show more Triggered Cloudflare WAF (firewallCustom) from SG. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /panel/.env UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 masterguru	2026-09-19 03:12:55 (11 hours ago)	BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ... show more BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-131) show less	Bad Web Bot
🇮🇹 ciccio diddo	2026-09-19 03:10:04 (11 hours ago)	High Burst multiple 40X port:Tcp/80,443	Brute-Force Web App Attack
🇮🇹 VHosting	2026-09-19 02:00:05 (12 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack

Showing 1 to 15 of 85 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.93.89.66

🇫🇮 147.185.133.179

🇳🇱 167.71.72.95

🇦🇹 91.141.114.218

🇧🇷 45.163.86.141

🇷🇺 45.91.64.6

🇪🇸 34.175.225.15

🇧🇪 34.77.125.222

🇺🇸 20.42.90.131

🇭🇰 128.1.132.84

🇨🇳 125.122.36.17

🇰🇷 121.163.62.61

🇻🇳 103.48.192.48

🇳🇱 45.148.10.141

🇺🇸 45.79.149.61

🇺🇸 209.141.56.109

🇦🇷 201.221.108.173

🇪🇹 196.188.93.169

🇲🇽 189.162.101.114

🇩🇪 167.172.174.188