JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.38.231.253

Recent Activity

Abuse Confidence Score

100% Critical

108 reports

100 reporters · latest 36 minutes ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 253.231.38.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇧🇪 Belgium
City: Brussels, Brussels Capital

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

108 from 100 distinct reporters

First reported

November 7th 2026

Most recent report

36 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 35 🇺🇸 United States of America 17 🇳🇱 Netherlands 13

Most common categories Web App Attack 94 Bad Web Bot 33 Hacking 26 Brute-Force 21 Port Scan 8

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 andypiper	2026-11-08 02:01:45 UTC · (36 minutes ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
Anonymous	2026-11-08 01:45:00 UTC · (53 minutes ago)		Web App Attack
Anonymous	2026-11-08 01:40:27 UTC · (57 minutes ago)	34.38.231.253 - - [08/Nov/2026:09:40:26 +0800] "GET /.env.anthropic HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ...	Bad Web Bot Web App Attack
🇩🇪 Viveronese	2026-11-08 01:39:03 UTC · (59 minutes ago)	HTTP vulnerability scanning	Web App Attack
🇳🇱 Alt255	2026-11-08 01:37:53 UTC · (1 hour ago)	[cb-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.38.231.253 - - [08/Nov/2026:02:37:46 +0100] "GET /.amplifyrc HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Appl ... show more [cb-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.38.231.253 - - [08/Nov/2026:02:37:46 +0100] "GET /.amplifyrc HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.38.231.253 - - [08/Nov/2026:02:37:46 +0100] "GET /.aws/config HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.38.231.253 - - [08/Nov/2026:02:37:46 +0100] "GET /.aws/.env HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.38.231.253 - - [08/Nov/2026:02:37:46 +0100] "GET /.aws/credentials.bak HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.38.231.253 - - [08/Nov/2026:02:37:46 +0100] "GET /.aws/credentials HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 34.38.231.253 - - [08/Nov/2026:02: ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-08 01:36:37 UTC · (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.38.231.253 (253.231.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:36:28.854139 2026] [security2:error] [pid 18524:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.38.231.253 (253.231.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:36:28.854139 2026] [security2:error] [pid 18524:tid 18524] [client 34.38.231.253:47710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thegattrells.com"] [uri "/.aws/.env"] [unique_id "au_SHOBMowIqwirbRyqzwAAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-11-08 01:33:16 UTC · (1 hour ago)	2026/11/08 03:33:15 [error] 1843940#1843940: 7939 access forbidden by rule, client: 34.38.231.253, server: siteguide.co.za, request: "GET /.env.anthropic HTTP/2.0", host: "siteguide.co.za" 2026/11/08 03:33:15 [error] 1843940#1843940: 7939 access fo ... show more 2026/11/08 03:33:15 [error] 1843940#1843940: 7939 access forbidden by rule, client: 34.38.231.253, server: siteguide.co.za, request: "GET /.env.anthropic HTTP/2.0", host: "siteguide.co.za" 2026/11/08 03:33:15 [error] 1843940#1843940: 7939 access forbidden by rule, client: 34.38.231.253, server: siteguide.co.za, request: "GET /.env-sample HTTP/2.0", host: "siteguide.co.za" 2026/11/08 03:33:15 [error] 1843940#1843940: *7939 access forbidden by rule, client: 34.38.231.253, server: siteguide.co.za, request: "GET /.env-example HTTP/2.0", host: "siteguide.co.za" ... show less	Hacking Web App Attack
🇺🇸 kosada.com	2026-11-08 01:30:36 UTC · (1 hour ago)	Repeated requests for suspicious nonexistent URLs, for example: /.aws/config (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36")	Web App Attack
🇩🇪 BlueWire Hosting	2026-11-08 01:26:05 UTC · (1 hour ago)	Aggressive scanning resulting into 404	Bad Web Bot
🇺🇸 masterguru	2026-11-08 01:12:14 UTC · (1 hour ago)	Restricted File Access Attempt. Matched phrase ".docker/" at REQUEST_FILENAME. (930130-164)	Hacking Web App Attack
🇳🇱 debestelapp	2026-11-08 01:10:15 UTC · (1 hour ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-11-08 01:05:21 UTC · (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.38.231.253 (253.231.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:05:16.946504 2026] [security2:error] [pid 15894:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.38.231.253 (253.231.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Nov 07 20:05:16.946504 2026] [security2:error] [pid 15894:tid 15894] [client 34.38.231.253:58944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brewcitybros.com"] [uri "/.docker/.env"] [unique_id "au_KzHAk2e71wyxgb-Z3ngAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 netman	2026-11-08 01:03:50 UTC · (1 hour ago)	HTTP: 34.38.231.253 blocked because of 100 failures ...	DDoS Attack Web App Attack
🇺🇸 Lee Daniel	2026-11-08 01:03:40 UTC · (1 hour ago)	34.38.231.253 - - [07/Nov/2026:20:03:40 -0500] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ...	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇺🇸 Mundo Bueno	2026-11-08 01:02:59 UTC · (1 hour ago)	[ISILIA Protection v2.3] Tentative d'accès: /.aws/.env [RATE LIMITED - 1800s quarantine] \| Pays: BE \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36	Hacking Web App Attack

Showing 1 to 15 of 108 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 136.111.241.35

🇺🇸 64.62.197.102

🇺🇸 64.62.197.4

🇺🇸 54.164.1.22

🇺🇦 45.12.24.99

🇺🇸 205.188.101.35

🇫🇷 194.163.149.197

🇷🇴 193.46.255.86

🇷🇺 185.43.5.253

🇨🇳 183.63.125.162

🇩🇪 167.94.146.61

🇵🇱 162.158.172.241

🇩🇪 151.243.11.200

🇮🇳 103.174.103.177

🇳🇱 77.239.124.67

🇳🇱 45.74.28.2

🇺🇸 2a03:2880:f806:30::

🇰🇷 221.163.5.228

🇻🇳 117.4.246.223

🇧🇬 91.148.190.150