JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.39.206.148

34.39.206.148

Recent Activity

34 reports found in our database

100% ▲ ▲ ▲ Critical

Abuse confidence score ?

ISP

Google LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS396982

Hostname(s)

148.206.39.34.bc.googleusercontent.com

Domain Name

google.com

Country

🇧🇷 Brazil

City

Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.39.206.148:

This IP address has been reported a total of 34 times from 30 distinct sources. 34.39.206.148 was first reported on September 1st 2026, and the most recent report was 43 minutes ago. In the last 60 days, the top reporter locations were: Germany with 16 reports; France with 3 reports; United Kingdom of Great Britain and Northern Ireland with 3 reports. The most common categories in these recent reports were: Web App Attack 27 times; Brute-Force 12 times; Hacking 11 times; Bad Web Bot 5 times; SQL Injection 4 times; Other 20 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇪 cmbplf	2026-09-04 17:05:34 (43 minutes ago)	3.172 requests from abuseipdb.com blacklisted IP (2mos2w6d)	Brute-Force Bad Web Bot
🇳🇱 Site.eu	2026-09-04 14:55:16 (2 hours ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 openstrike.co.uk	2026-09-04 05:14:05 (12 hours ago)	251 attacks on env grabbing URLs, PHP URLs, config grabbing URLs (type 2), VC URLs: GET /config/app/ ... show more 251 attacks on env grabbing URLs, PHP URLs, config grabbing URLs (type 2), VC URLs: GET /config/app/.env HTTP/1.1 GET /includes/phpinfo.php HTTP/1.1 GET /application_default_credentials.json HTTP/1.1 GET /.git/config HTTP/1.1 show less	Hacking Web App Attack
🇬🇧 openstrike.co.uk	2026-09-03 05:13:32 (1 day ago)	251 attacks on env grabbing URLs, PHP URLs, config grabbing URLs (type 2), VC URLs: GET /config/app/ ... show more 251 attacks on env grabbing URLs, PHP URLs, config grabbing URLs (type 2), VC URLs: GET /config/app/.env HTTP/1.1 GET /includes/phpinfo.php HTTP/1.1 GET /application_default_credentials.json HTTP/1.1 GET /.git/config HTTP/1.1 show less	Hacking Web App Attack
🇫🇷 phoenix1jl96	2026-09-03 04:31:32 (1 day ago)	2026/09/03 06:31:31 [error] 3857369#3857369: 57977 open() "/home/user-data/www/default/mailer/.env" ... show more 2026/09/03 06:31:31 [error] 3857369#3857369: 57977 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.39.206.148, server: mta-sts.dsatec.fr, request: "GET /mailer/.env HTTP/1.1", host: "mta-sts.dsatec.fr" 2026/09/03 06:31:31 [error] 3857369#3857369: *57978 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.39.206.148, server: mta-sts.dsatec.info, request: "GET /mailer/.env HTTP/1.1", host: "mta-sts.dsatec.info" ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot SSH Web App Attack
🇩🇪 todix	2026-09-03 04:07:10 (1 day ago)	Web App Attack Exploid from 34.39.206.148	Web App Attack
🇩🇪 dave	2026-09-03 03:44:39 (1 day ago)	threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity ... show more threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity/appsec-vpatch,crowdsecurity/vpatch-env-access,crowdsecurity/vpatch-git-config observed_by=1_hosts hit_count=43 first_seen=2026-09-03T03:44:23Z last_seen=2026-09-03T03:44:39Z show less	Web App Attack
🇩🇪 SwinT	2026-09-03 03:00:04 (1 day ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
Anonymous	2026-09-03 02:30:48 (1 day ago)	34.39.206.148 - - [03/Sep/2026:02:30:47 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT ... show more 34.39.206.148 - - [03/Sep/2026:02:30:47 +0000] "GET / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.39.206.148 - - [03/Sep/2026:02:30:48 +0000] "POST / HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 Charlesiv	2026-09-03 02:27:14 (1 day ago)	Triggered Cloudflare WAF (firewallCustom) from BR. Action taken: BLOCK ASN: 396982 (Google LLC) Prot ... show more Triggered Cloudflare WAF (firewallCustom) from BR. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/1.1 (GET method) Endpoint: /firebase-adminsdk.json Timestamp: 2026-09-03T02:23:35Z Ray ID: a3514b1669c1f1eb UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 show less	Bad Web Bot
🇩🇪 Dominik Lysiak	2026-09-03 01:56:59 (1 day ago)	34.39.206.148 - - [03/Sep/2026:03:56:57 +0200] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 ... show more 34.39.206.148 - - [03/Sep/2026:03:56:57 +0200] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.39.206.148 - - [03/Sep/2026:03:56:57 +0200] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.39.206.148 - - [03/Sep/2026:03:56:58 +0200] "GET /.env HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 ✨	2026-09-03 01:52:11 (1 day ago)	Domain : c7solutions.com Rule : hack 2026-09-03 01:51:24 *hidden-privacy* GET /.env.bak - 443 - ... show more Domain : c7solutions.com Rule : hack 2026-09-03 01:51:24 *hidden-privacy* GET /.env.bak - 443 - 34.39.206.148 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - mta-sts.c7solutions.com 404 0 0 78714 304 406 - - show less	Hacking SQL Injection Brute-Force
🇵🇱 strefapi_com	2026-09-03 01:31:20 (1 day ago)	Brute-force, web ...	Hacking Brute-Force Web App Attack
🇩🇪 auridh	2026-09-03 01:15:08 (1 day ago)	Ip 34.39.206.148 performed 'crowdsecurity/http-admin-interface-probing' (6 events over 42.324437763s ... show more Ip 34.39.206.148 performed 'crowdsecurity/http-admin-interface-probing' (6 events over 42.324437763s) at 2026-09-02 23:58:29.681094897 +0000 UTC show less	Web App Attack
🇩🇪 Blexyel	2026-09-03 00:53:54 (1 day ago)	34.39.206.148 - - [03/Sep/2026:02:53:53 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 ... show more 34.39.206.148 - - [03/Sep/2026:02:53:53 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.231.140.136

🇺🇸 209.101.216.154

🇮🇪 162.158.6.62

🇺🇸 100.53.0.125

🇷🇴 80.94.95.115

🇫🇷 77.239.124.180

🇺🇸 66.132.224.232

🇦🇷 190.11.32.115

🇵🇱 94.26.88.14

🇮🇹 88.147.30.59

🇷🇴 80.94.95.116

🇧🇬 79.124.56.102

🇨🇳 61.132.217.130

🇸🇬 217.216.72.78

🇲🇽 200.68.173.5

🇺🇸 172.70.31.239

🇮🇹 158.47.231.81

🇩🇪 82.152.211.23

🇳🇱 45.148.10.194

🇯🇵 43.130.228.73