JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.32.94.238

34.32.94.238 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	238.94.32.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇩🇪 Germany
City	Berlin, State of Berlin

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.32.94.238

Whois 34.32.94.238

IP Abuse Reports for 34.32.94.238:

This IP address has been reported a total of 40 times from 30 distinct sources. 34.32.94.238 was first reported on August 30th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Mangelot Hosting	2026-09-01 13:44:34 (1 day ago)	(modsecurity) srv102 ModSecurity 34.32.94.238 (DE/Germany/238.94.32.34.bc.googleusercontent.com): 30 ... show more (modsecurity) srv102 ModSecurity 34.32.94.238 (DE/Germany/238.94.32.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇫🇷 Lacrimosa99	2026-09-01 13:20:44 (1 day ago)	34.32.94.238 - - [01/Sep/2026:15:20:43 +0200] "POST / HTTP/1.1" 404 418 "-" "Mozilla/5.0 (Macintosh; ... show more 34.32.94.238 - - [01/Sep/2026:15:20:43 +0200] "POST / HTTP/1.1" 404 418 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.32.94.238 - - [01/Sep/2026:15:20:43 +0200] "POST / HTTP/1.1" 404 418 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.32.94.238 - - [01/Sep/2026:15:20:43 +0200] "POST / HTTP/1.1" 404 418 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web Spam
Anonymous	2026-09-01 13:12:00 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇳🇱 e.fierstra	2026-09-01 10:01:25 (1 day ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 07:54:37 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.32.94.238 (238.94.32.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.32.94.238 (238.94.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:54:30.065139 2026] [security2:error] [pid 27226:tid 27226] [client 34.32.94.238:38182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.dd214chronicle.org"] [uri "/.git/config"] [unique_id "apaEtkQCRLGcjn4pkFdYtgAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-09-01 07:02:33 (1 day ago)	csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 2s	Web App Attack
🇩🇪 FD-IX	2026-09-01 06:55:02 (1 day ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
Anonymous	2026-09-01 06:14:42 (1 day ago)	(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.32.94.238 (DE/Germany/238.94.32.34.bc.goo ... show more (config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.32.94.238 (DE/Germany/238.94.32.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.32.94.238 - - [01/Sep/2026:08:14:41 +0200] "GET /.env HTTP/1.1" 406 518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.32.94.238 - - [01/Sep/2026:08:14:41 +0200] "GET /.env.local HTTP/1.1" 406 4886 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.32.94.238 - - [01/Sep/2026:08:14:41 +0200] "GET /.env.production HTTP/1.1" 406 4888 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Port Scan
🇭🇺 miszterx.hu	2026-09-01 05:39:22 (1 day ago)	XORP (haproxy): 270x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_i ... show more XORP (haproxy): 270x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu) show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 04:46:01 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.32.94.238 (238.94.32.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.32.94.238 (238.94.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:45:56.373926 2026] [security2:error] [pid 183200:tid 183337] [client 34.32.94.238:35234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.danbressler.com"] [uri "/.git/config"] [unique_id "apZYhLY84gQ5GXA31mEjAAAAARE"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-09-01 04:24:31 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 34.32.94.238 (DE/Germany/238.94.32.34.bc.google ... show more (mod_security) mod_security (id:949110) triggered by 34.32.94.238 (DE/Germany/238.94.32.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇩🇪 lolyay	2026-09-01 02:00:49 (1 day ago)	34.32.94.238 - - [01/Sep/2026:02:00:48 +0000] "GET /.git/config HTTP/1.1" 200 4 "-" "Mozilla/5.0 (X1 ... show more 34.32.94.238 - - [01/Sep/2026:02:00:48 +0000] "GET /.git/config HTTP/1.1" 200 4 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.32.94.238 - - [01/Sep/2026:02:00:48 +0000] "GET /.env HTTP/1.1" 200 4 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack Bad Web Bot
Anonymous	2026-09-01 00:36:45 (1 day ago)	Apache vulnerability scan	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-31 14:23:16 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.32.94.238 (238.94.32.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.32.94.238 (238.94.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 10:23:10.268802 2026] [security2:error] [pid 11109:tid 11109] [client 34.32.94.238:49554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.penelopeswales.com"] [uri "/.git/config"] [unique_id "apWOTrWTRSlFPlibrKKuTwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-31 14:05:05 (2 days ago)	WAF repeated trigger detected by Fail2Ban	Web App Attack

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 142.251.157.119

🇸🇬 101.47.159.125

🇺🇸 64.204.14.83

🇱🇹 62.60.130.253

🇳🇱 34.12.141.57

🇺🇸 2604:a880:400:d1:0:4:e8d7:e001

🇧🇪 198.235.24.195

🇩🇪 157.230.98.178

🇨🇳 115.191.32.57

🇷🇴 92.118.39.14

🇨🇳 36.250.220.142

🇮🇳 34.47.228.163

🇧🇷 205.210.31.224

🇮🇩 165.99.239.85

🇺🇸 144.225.187.68

🇩🇪 135.125.235.107

🇳🇱 104.28.163.197

🇫🇮 35.228.252.254

🇸🇬 20.184.59.236

🇺🇸 66.253.9.53