JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.31.233.242

34.31.233.242 was found in our database!

This IP was reported 51 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	242.233.31.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.31.233.242

Whois 34.31.233.242

IP Abuse Reports for 34.31.233.242:

This IP address has been reported a total of 51 times from 35 distinct sources. 34.31.233.242 was first reported on August 28th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 WeCloudit-Anti-Abuse	2026-08-30 03:18:21 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 big-cloud.nl	2026-08-30 01:21:21 (2 days ago)	Try to access /.env	Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-29 22:00:32 (2 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-28. show less	Web App Attack SSH Hacking
🇺🇸 cwytech	2026-08-29 03:13:38 (3 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/http-honeypath-sniper-crit.	Bad Web Bot Web App Attack
🇺🇸 Sling	2026-08-29 03:02:19 (3 days ago)	Automated detection: IP accessed 9 sensitive endpoints within 30s on a.api.slingexe.com. Paths: /sto ... show more Automated detection: IP accessed 9 sensitive endpoints within 30s on a.api.slingexe.com. Paths: /storage/logs/laravel.log, /env, /.env, /.env.production, /.env.example, /.env.dev, /.env.bak, /.env.local, /.env.backup. UA: crusader-worker/1.0. show less	Web App Attack Bad Web Bot Hacking
Anonymous	2026-08-29 02:02:12 (3 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.31.233.242 (US/United States/242.233 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.31.233.242 (US/United States/242.233.31.34.bc.googleusercontent.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-08-29 00:56:00 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.31.233.242 (242.233.31.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.31.233.242 (242.233.31.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:55:54.938452 2026] [security2:error] [pid 31898:tid 31898] [client 34.31.233.242:55176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.l3l4.com"] [uri "/wp-config.php.swp"] [unique_id "apIuGsqN3ZRCFQQJ0P0gpQAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-28 23:50:04 (3 days ago)	\| Suspicious URL access.	Web App Attack Hacking SQL Injection
🇺🇸 ruusvuu	2026-08-28 23:30:44 (3 days ago)	Automated abuse report: 15 attack/probe requests from Google LLC / US. Targeted paths: /.env.prod, / ... show more Automated abuse report: 15 attack/probe requests from Google LLC / US. Targeted paths: /.env.prod, /wp-config.php.swp, /.env.local, /actuator/configprops, /wp-config.php.bak. Sample log lines: [mirprotocol] 2026-08-28 16:30:43: 34.31.233.242 - [08/28/2026, 16:30:43] "GET /.env.dev" 429 "crusader-worker/1.0" [mirprotocol] 2026-08-28 16:30:43: 34.31.233.242 - [08/28/2026, 16:30:43] "GET /.env.save" 429 "crusader-worker/1.0" [mirprotocol] 2026-08-28 16:30:43: 34.31.233.242 - [08/28/2026, 16:30:43] "GET /.env.bak" 429 "crusader-worker/1.0" Detected by an automated web-server log monitor. show less	Web App Attack
🇬🇧 Aetherweb Ark	2026-08-28 23:28:14 (3 days ago)	(mod_security) mod_security (id:949110) triggered by 34.31.233.242 (US/United States/242.233.31.34.b ... show more (mod_security) mod_security (id:949110) triggered by 34.31.233.242 (US/United States/242.233.31.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇩🇪 4server	2026-08-28 22:39:23 (3 days ago)	[SatAug2900:39:17.0989782026][security2:error][pid3251669:tid3251798][client34.31.233.242:0]ModSecur ... show more [SatAug2900:39:17.0989782026][security2:error][pid3251669:tid3251798][client34.31.233.242:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.craniosacraltherapy.ch.136-243-54-122.cpanel.site\"][uri\"/wp-config.php.swp\"][unique_id\"apIOFdvSQdVZN1Ko_58WSgAAANg\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 22:01:43 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.31.233.242 (242.233.31.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.31.233.242 (242.233.31.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 18:01:36.560507 2026] [security2:error] [pid 6415:tid 6415] [client 34.31.233.242:47822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lejzerowicz.williamgilcher.com"] [uri "/wp-config.php.swp"] [unique_id "apIFQKJLMoGT-IH5g8rroQAAAEY"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 antlac1	2026-08-28 21:22:51 (3 days ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇬🇧 relianoid.com	2026-08-28 21:16:18 (3 days ago)	404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web App Attack
🇳🇱 debestelapp	2026-08-28 20:45:08 (3 days ago)		Web App Attack

Showing 1 to 15 of 51 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇭 203.150.107.87

🇬🇧 188.240.59.46

🇺🇸 165.232.144.232

🇰🇷 119.209.12.20

🇲🇾 113.211.215.241

🇲🇽 68.155.159.216

🇷🇴 2.57.122.168

🇧🇪 198.235.24.144

🇧🇩 160.191.148.25

🇯🇵 133.232.78.69

🇹🇼 125.229.55.83

🇨🇳 123.181.222.36

🇨🇳 61.169.106.246

🇮🇱 37.142.223.217

🇨🇳 14.103.107.234

🇸🇦 8.213.72.153

🇬🇷 2a02:587:9003:7800:297c:dbef:2a17:a15a

🇧🇷 179.125.251.185

🇺🇸 136.117.178.255

🇨🇳 123.152.109.13