JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.38.242.249

34.38.242.249 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	249.242.38.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇪 Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.38.242.249

Whois 34.38.242.249

IP Abuse Reports for 34.38.242.249:

This IP address has been reported a total of 29 times from 25 distinct sources. 34.38.242.249 was first reported on August 30th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 tmiland	2026-09-01 11:25:22 (1 hour ago)	(nginx_404) Dot directory Honeypot Trap 34.38.242.249 (BE/Belgium/249.242.38.34.bc.googleusercontent ... show more (nginx_404) Dot directory Honeypot Trap 34.38.242.249 (BE/Belgium/249.242.38.34.bc.googleusercontent.com): 2 in the last 3600 secs; IP: 34.38.242.249; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.38.242.249 - - [01/Sep/2026:13:25:16 +0200] "GET /.git/config HTTP/1.1" 404 11225 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.38.242.249 - - [01/Sep/2026:13:25:18 +0200] "GET /.env HTTP/1.1" 404 11226 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Brute-Force
🇨🇭 Mario Bretscher	2026-09-01 05:06:09 (7 hours ago)	[Tue Sep 01 07:06:07.655396 2026] [php:error] [pid 3755331] [client 34.38.242.249:48650] script '/va ... show more [Tue Sep 01 07:06:07.655396 2026] [php:error] [pid 3755331] [client 34.38.242.249:48650] script '/var/www/html/phpinfo.php' not found or unable to stat [Tue Sep 01 07:06:07.679666 2026] [php:error] [pid 3755331] [client 34.38.242.249:48650] script '/var/www/html/info.php' not found or unable to stat [Tue Sep 01 07:06:07.709847 2026] [php:error] [pid 3755331] [client 34.38.242.249:48650] script '/var/www/html/php.php' not found or unable to stat ... show less	Web App Attack
🇩🇪 FD-IX	2026-09-01 04:54:24 (7 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
Anonymous	2026-09-01 03:48:23 (9 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.38.242.249 (BE/Belgium/249.242.38.34 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.38.242.249 (BE/Belgium/249.242.38.34.bc.googleusercontent.com) show less	SQL Injection
🇬🇧 andypiper	2026-09-01 01:00:08 (11 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇬🇧 Apache	2026-09-01 00:45:28 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.38.242.249 (BE/Belgium/249.242.38.34.bc.goog ... show more (mod_security) mod_security (id:210492) triggered by 34.38.242.249 (BE/Belgium/249.242.38.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇩🇪 Blexyel	2026-09-01 00:22:56 (12 hours ago)	34.38.242.249 - - [01/Sep/2026:02:22:55 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 ... show more 34.38.242.249 - - [01/Sep/2026:02:22:55 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇬🇧 Aetherweb Ark	2026-09-01 00:16:59 (12 hours ago)	(mod_security) mod_security (id:949110) triggered by 34.38.242.249 (BE/Belgium/249.242.38.34.bc.goog ... show more (mod_security) mod_security (id:949110) triggered by 34.38.242.249 (BE/Belgium/249.242.38.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-31 22:02:45 (14 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-30. show less	Web App Attack SSH Hacking
Anonymous	2026-08-31 10:56:01 (1 day ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇦🇺 2000cn.com.au	2026-08-31 10:23:54 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
Anonymous	2026-08-31 10:05:56 (1 day ago)	34.38.242.249 - - [31/Aug/2026:05:05:54 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macint ... show more 34.38.242.249 - - [31/Aug/2026:05:05:54 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 141.101.69.79 34.38.242.249 - - [31/Aug/2026:05:05:54 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 141.101.69.79 34.38.242.249 - - [31/Aug/2026:05:05:54 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 141.101.69.79 34.38.242.249 - - [31/Aug/2026:05:05:54 -0500] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 141.101.69.79 34.38.242.249 - - [31/Aug/2026:05:05:54 -0500] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; In ... show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-08-31 09:50:55 (1 day ago)	[MonAug3111:50:48.8630392026][security2:error][pid2517444:tid2517556][client34.38.242.249:0]ModSecur ... show more [MonAug3111:50:48.8630392026][security2:error][pid2517444:tid2517556][client34.38.242.249:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"massimilianoparquet.ch.136-243-54-122.cpanel.site\"][uri\"/.env.bak\"][unique_id\"apVOeM_t35DNjTj09cww-wAAAVg\"] show less	Port Scan Brute-Force Web App Attack
🇫🇷 Octopuce	2026-08-31 09:19:04 (1 day ago)	Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...	Web App Attack
🇳🇱 e.fierstra	2026-08-31 09:10:46 (1 day ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.88.98.113

🇳🇱 193.47.62.69

🇺🇸 172.81.132.173

🇲🇦 105.158.192.91

🇺🇸 100.29.192.96

🇸🇬 88.216.56.86

🇰🇿 5.34.16.57

🇱🇰 220.247.224.226

🇨🇳 220.181.108.84

🇳🇱 195.178.110.227

🇺🇦 195.3.128.118

🇳🇱 172.253.95.221

🇨🇳 171.8.7.8

🇺🇸 135.232.224.102

🇨🇳 111.178.163.164

🇹🇭 45.194.70.253

🇬🇧 34.142.117.111

🇺🇸 34.75.250.100

🇺🇦 31.202.186.245

🇺🇸 18.190.15.50