34.39.181.238

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
55 reports
43 reporters · latest 7 hours ago
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
238.181.39.34.bc.googleusercontent.com
Domain Name
google.com
Country
🇧🇷 Brazil
City
Sao Paulo, Sao Paulo
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
55 from 43 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 10 🇳🇱 Netherlands 8 🇫🇷 France 6
Most common categories Web App Attack 45 Bad Web Bot 18 Brute-Force 16 Hacking 12 Port Scan 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 Rip
Restricted File Access Attempts
Port Scan Web App Attack
🇫🇷 HerrWolf
CrowdSec Detection: crowdsecurity/http-probing
Web App Attack
Anonymous
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸 Rip
Remote Command Execution - Unix Shell Expression Found in URI
Web App Attack
🇳🇱 Alt255
Bad Web Bot Web App Attack
🇫🇷 HerrWolf
CrowdSec Detection: crowdsecurity/http-admin-interface-probing
Web App Attack
🇺🇸 kosada.com
Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36")
Web App Attack
🇦🇺 nzhost.co.nz
$f2bV_matches
Hacking Brute-Force
🇬🇧 Apache
(mod_security) mod_security (id:210730) triggered by 34.39.181.238 (BR/Brazil/238.181.39.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
Brute-Force Web App Attack
Anonymous
Fuzzing/Looking for credentials files.
Brute-Force Web App Attack
🇮🇹 Inartis
34.39.181.238 - - [06/Nov/2026:11:41:37 +0100] "GET /.git/config HTTP/1.1" 403 179 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ...
Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to
Web attack/malicious scanning detected
Web App Attack
🇬🇧 Celtic
Blocked by Fail2Ban with Jail (plesk-modsecurity)
Brute-Force SSH
🇫🇷 masterguru
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking Web App Attack
🇹🇷 ScchutzZ
Fail2Ban banı. Jail: plesk-modsecurity.
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇪🇸 213.235.27.66
🇻🇳 210.245.30.140
🇬🇧 195.96.139.175
🇳🇱 193.47.62.69
🇵🇱 188.212.135.242
🇹🇼 128.14.227.52
🇨🇴 91.148.134.215
🇷🇺 82.162.62.182
🇺🇸 66.132.186.236
🇺🇸 66.66.116.181
🇳🇱 45.148.10.28
🇺🇸 38.178.62.17
🇪🇨 190.99.79.204
🇧🇷 189.90.223.57
🇮🇹 185.15.170.149
🇩🇪 149.224.98.232
🇦🇺 144.138.249.162
🇧🇩 118.179.128.47
🇮🇳 103.201.136.206
🇩🇪 89.246.101.172
feedback