JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.39.168.187

34.39.168.187 was found in our database!

This IP was reported 62 times. Confidence of Abuse is 50%: ?

50%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	187.168.39.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.39.168.187

Whois 34.39.168.187

IP Abuse Reports for 34.39.168.187:

This IP address has been reported a total of 62 times from 45 distinct sources. 34.39.168.187 was first reported on June 8th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-10-13 22:19:33 (3 days ago)		Brute-Force Web App Attack
🇺🇸 snappic	2026-10-12 22:58:50 (4 days ago)	Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 Ap ... show more Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)] show less	Bad Web Bot Web App Attack
🇫🇷 SpaceHost-Server	2026-10-12 22:18:51 (4 days ago)		Brute-Force Web App Attack
🇺🇸 snappic	2026-10-12 22:06:06 (4 days ago)	Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (c ... show more Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)] show less	Bad Web Bot Web App Attack
🇺🇸 snappic	2026-10-12 21:20:22 (4 days ago)	Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (c ... show more Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)] show less	Bad Web Bot Web App Attack
🇺🇸 snappic	2026-10-12 18:08:07 (4 days ago)	Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 Ap ... show more Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot] show less	Bad Web Bot Web App Attack
🇺🇸 Sockets-AR	2026-10-12 13:40:45 (4 days ago)	CrowdSec: aggressive crawler / scraper bot detected (custom/ai-crawlers-ua) at 2026-10-12T13:40:45.1 ... show more CrowdSec: aggressive crawler / scraper bot detected (custom/ai-crawlers-ua) at 2026-10-12T13:40:45.141Z show less	Bad Web Bot
🇺🇸 Sockets-AR	2026-10-12 12:36:12 (4 days ago)	CrowdSec: aggressive crawler / scraper bot detected (custom/ai-crawlers-ua) at 2026-10-12T12:36:12.1 ... show more CrowdSec: aggressive crawler / scraper bot detected (custom/ai-crawlers-ua) at 2026-10-12T12:36:12.129Z show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-12 12:33:17 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 34.39.168.187 (187.168.39.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.39.168.187 (187.168.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 08:33:10.953511 2026] [security2:error] [pid 22848:tid 22848] [client 34.39.168.187:56314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "siedersoft.com.ar"] [uri "/.env.supabase"] [unique_id "aszThq1VWyHuF6kU85CtdwAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-12 11:15:31 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 34.39.168.187 (187.168.39.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.39.168.187 (187.168.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 07:15:24.743696 2026] [security2:error] [pid 19611:tid 19611] [client 34.39.168.187:40898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "escribaniasmith.com.ar"] [uri "/media../.env"] [unique_id "aszBTKLp5QgCrCTjG91IGwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-12 11:05:18 (4 days ago)	apache vulnerability scan	Web App Attack
🇩🇪 macrob	2026-10-12 10:51:49 (4 days ago)	2026/10/12 10:51:47 [error] 2896056#2896056: 43283692 access forbidden by rule, client: 34.39.168.1 ... show more 2026/10/12 10:51:47 [error] 2896056#2896056: 43283692 access forbidden by rule, client: 34.39.168.187, server: binixo.com.ar, request: "GET /.vite/manifest.json HTTP/2.0", host: "binixo.com.ar" 2026/10/12 10:51:47 [error] 2896056#2896056: 43283694 access forbidden by rule, client: 34.39.168.187, server: binixo.com.ar, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "binixo.com.ar" 2026/10/12 10:51:48 [error] 2896056#2896056: 43283702 access forbidden by rule, client: 34.39.168.187, server: binixo.com.ar, request: "GET /wp-content/themes/donna/js/app.js HTTP/2.0", host: "binixo.com.ar" ... show less	Web App Attack
🇬🇧 consul.to	2026-10-12 10:41:51 (4 days ago)	Web attack/malicious scanning detected	Web App Attack
🇦🇷 Bruno	2026-10-12 09:52:25 (4 days ago)	Port Scanner: 34.39.168.187	Port Scan
🇫🇷 masterguru	2026-06-12 03:05:43 (4 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.39.168.187 (BR/Brazil/187.168.39.3 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.39.168.187 (BR/Brazil/187.168.39.34.bc.googleusercontent.com): 2 in the last 3600 secs (0-196) show less	Hacking

Showing 1 to 15 of 62 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇦 179.43.153.2

🇮🇩 103.155.46.254

🇫🇷 91.231.89.165

🇳🇱 77.239.124.130

🇺🇸 68.10.56.2

🇺🇸 66.132.172.113

🇰🇷 59.8.77.118

🇨🇦 51.222.95.164

🇩🇪 4.184.246.230

🇺🇸 192.9.157.186

🇮🇳 171.76.108.59

🇮🇳 103.217.132.209

🇷🇺 46.146.134.59

🇳🇱 45.148.10.157

🇩🇪 34.179.246.117

🇴🇲 5.21.80.2

🇿🇦 197.94.53.33

🇳🇱 195.178.110.26

🇭🇰 193.239.154.248

🇺🇸 162.216.149.57