JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.38.196.131

34.38.196.131 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 57%: ?

57%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	131.196.38.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.38.196.131

Whois 34.38.196.131

IP Abuse Reports for 34.38.196.131:

This IP address has been reported a total of 10 times from 10 distinct sources. 34.38.196.131 was first reported on June 13th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 edena	2026-06-15 15:31:38 (2 days ago)	34.38.196.131 - - [15/Jun/2026:17:31:38 +0200] "GET /.env.old HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Li ... show more 34.38.196.131 - - [15/Jun/2026:17:31:38 +0200] "GET /.env.old HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Linux; U; Android 1.5; en-us; sdk Build/CUPCAKE) AppleWebkit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1" 34.38.196.131 - - [15/Jun/2026:17:31:38 +0200] "GET /.env.production.bak HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Linux; Android 7.0; LGL84VL Build/NRD90U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.125 Mobile Safari/537.36" 34.38.196.131 - - [15/Jun/2026:17:31:38 +0200] "GET /.env.bak HTTP/1.1" 403 322 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/600.8.9 (KHTML, like Gecko) Maxthon/4.5.2" ... show less	Web App Attack Bad Web Bot
🇩🇪 iNetWorker	2026-06-15 06:56:54 (3 days ago)	trolling for resource vulnerabilities	Web App Attack
🇺🇸 SiliSoftware	2026-06-15 01:56:41 (3 days ago)	/wp-json/gravitysmtp/v1/settings	Web App Attack
🇺🇸 lnklnx	2026-06-14 13:08:23 (4 days ago)	www.lnklnx.com:443 34.38.196.131 - - [14/Jun/2026:08:08:21 -0500] "GET /wp-json/gravitysmtp/v1/tests ... show more www.lnklnx.com:443 34.38.196.131 - - [14/Jun/2026:08:08:21 -0500] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 403 3850 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.75 Safari/537.36" ... show less	Web App Attack
🇩🇪 wsyq	2026-06-14 07:32:42 (4 days ago)	Fail2Ban - \[NGINX\]40x-Forcing to access a restricted resource ...	Bad Web Bot Web App Attack
🇨🇭 4server	2026-06-14 05:28:03 (4 days ago)	[SunJun1407:27:57.9077792026][security2:error][pid681899:tid682214][client34.38.196.131:0]ModSecurit ... show more [SunJun1407:27:57.9077792026][security2:error][pid681899:tid682214][client34.38.196.131:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"xn--sanierung-alter-huser-schweiz-hqc.ch\"][uri\"/wp-json/gravitysmtp/v1/config\"][unique_id\"ai473bINNUsAiYYESx5e0AAAARU\"] show less	Hacking Web App Attack
🇪🇸 Francisco Vallejo	2026-06-14 05:04:48 (4 days ago)	[Sun Jun 14 07:04:47.051339 2026] [authz_core:error] [pid 6953:tid 130567156766400] [client 34.38.19 ... show more [Sun Jun 14 07:04:47.051339 2026] [authz_core:error] [pid 6953:tid 130567156766400] [client 34.38.196.131:33164] AH01630: client denied by server configuration: proxy:http://giedi:3000/wp-json/gravitysmtp/v1/config [Sun Jun 14 07:04:47.076896 2026] [authz_core:error] [pid 4193621:tid 130566510855872] [client 34.38.196.131:33172] AH01630: client denied by server configuration: proxy:http://giedi:3000/wp-json/wp/v2/settings [Sun Jun 14 07:04:47.224126 2026] [authz_core:error] [pid 4183296:tid 130566032701120] [client 34.38.196.131:33176] AH01630: client denied by server configuration: proxy:http://giedi:3000/wp-json/gravitysmtp/v1/tests/mock-data [Sun Jun 14 07:04:47.319936 2026] [authz_core:error] [pid 4193621:tid 130565965592256] [client 34.38.196.131:33182] AH01630: client denied by server configuration: proxy:http://giedi:3000/wp-json/gravitysmtp/v1/settings [Sun Jun 14 07:04:47.368787 2026] [authz_core:error] [pid 4183296:tid 130566049486528] [client 34.38.196.131:33198] AH01630: cl ... show less	Brute-Force SSH
🇩🇪 excill	2026-06-14 03:12:15 (4 days ago)	Honeypot mesh observed 628 attack events in 24h — cowrie/dionaea/heralding/suricata	Port Scan Hacking Brute-Force SSH
🇮🇹 VHosting	2026-06-14 02:45:03 (4 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 ghostwarriors	2026-06-13 23:20:08 (4 days ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.243.5.246

🇨🇳 139.198.30.179

🇳🇱 72.56.59.164

🇦🇺 2404:6800:4013:400::126

🇷🇴 193.32.162.125

🇺🇸 162.216.149.222

🇺🇸 161.0.2.63

🇨🇴 148.222.199.208

🇱🇹 81.30.98.144

🇳🇱 72.56.59.153

🇳🇱 72.56.59.150

🇳🇱 72.56.59.139

🇳🇱 72.56.59.137

🇩🇪 46.225.23.118

🇩🇪 43.157.46.118

🇺🇸 23.80.158.184

🇨🇳 14.29.184.206

🇨🇳 8.160.179.225

🇨🇦 159.203.20.241

🇺🇸 152.32.236.67