JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.39.226.138

Activity Trending Down

Abuse Confidence Score

100% Critical

32 reports

24 reporters · latest 1 week ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 138.226.39.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇧🇷 Brazil
City: Sao Paulo, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

32 from 24 distinct reporters

First reported

November 2nd 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 9 🇨🇿 Czechia 5 🇩🇪 Germany 5

Most common categories Web App Attack 24 Bad Web Bot 13 Brute-Force 8 Hacking 6 SQL Injection 3

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-11-03 12:02:57 UTC · (1 week ago)	IP matched detection query 50 and more bad rqs apache.	Hacking Bad Web Bot Brute-Force Web App Attack
🇩🇪 updown.io	2026-11-02 14:00:12 UTC · (1 week ago)	{"level":"info","ts":1793628009.0444772,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.39.226.138","remote_port":"56662","client_ip":"34.39.226.138","proto":"HTTP/2.0","method":"GET","host":"status.guides.co","uri" ... show more {"level":"info","ts":1793628009.0444772,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.39.226.138","remote_port":"56662","client_ip":"34.39.226.138","proto":"HTTP/2.0","method":"GET","host":"status.guides.co","uri":"/static/manifest.json","headers":{"Sec-Fetch-Mode":["navigate"],"Accept-Language":["en-US,en;q=0.9"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Site":["none"],"Sec-Ch-Ua-Mobile":["?0"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8"],"Upgrade-Insecure-Requests":["1"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Priority":["u=0, i"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Brave\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Accept-Enco ... show less	DDoS Attack Web App Attack
🇦🇹 SchiWaGoA	2026-11-02 13:55:13 UTC · (1 week ago)	fail2ban npm-scanner: Web vulnerability scanning (probing for .env, .git, phpinfo and similar files)	Web App Attack Bad Web Bot
🇳🇱 sernate	2026-11-02 13:45:23 UTC · (1 week ago)	(403blocker) 403 trigger 34.39.226.138 (BR/Brazil/138.226.39.34.bc.googleusercontent.com): 80 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER	Brute-Force
🇬🇧 venus.launch.bz	2026-11-02 12:56:54 UTC · (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 34.39.226.138 (BR/Brazil/138.226.39.34.bc.googleusercontent.com)	SQL Injection
🇳🇱 e.fierstra	2026-11-02 12:50:55 UTC · (1 week ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-02 12:26:36 UTC · (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.39.226.138 (138.226.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 07:26:30.426430 2026] [security2:error] [pid 16686:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.39.226.138 (138.226.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 07:26:30.426430 2026] [security2:error] [pid 16686:tid 16686] [client 34.39.226.138:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.topbrand.co"] [uri "/.env.monorepo"] [unique_id "auiBdkhg5EFPSg-ydbI1jQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 toolbit.online	2026-11-02 12:00:12 UTC · (1 week ago)	Bad web bot activity detected - 57 abusive requests observed within 10 seconds. Auto-banned by CrowdSec.	Bad Web Bot Web App Attack
Anonymous	2026-11-02 11:40:06 UTC · (1 week ago)	Bot / scanning and/or hacking attempts: GET /dist../.env HTTP/2.0, GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0, GET /.env%3Ffoo=bar HTTP/2.0, [305/304] done: stream 603, GET /.aws/credentials%3F.txt, GET /%2E%2E/%2E%2E/%2E%2E/%2E%2 ... show more Bot / scanning and/or hacking attempts: GET /dist../.env HTTP/2.0, GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0, GET /.env%3Ffoo=bar HTTP/2.0, [305/304] done: stream 603, GET /.aws/credentials%3F.txt, GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/2.0, GET /images../.env HTTP/2.0, GET /..%2f.env HTTP/2.0, GET /settings%2F.env HTTP/2.0, GET /admin%2F.env HTTP/2.0, GET /static//.env HTTP/2.0, GET /var/run/secrets/kubernetes.io/serviceaccount/token HTTP/2., GET /proc/self/environ HTTP/2.0, GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fp show less	Hacking Web App Attack
🇩🇪 EGP Abuse Dept	2026-11-02 10:14:14 UTC · (1 week ago)	Scanning for web/db/file exploits on topschuifwanden.nl	SQL Injection Bad Web Bot Web App Attack
🇩🇪 LRob	2026-11-02 10:00:29 UTC · (1 week ago)	Crawler ignoring refusals \| ua: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/), Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/, Mozilla/5.0 Apple ... show more Crawler ignoring refusals \| ua: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/), Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/, Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot (+11 more) \| path: /dist../.env, /img../.env, /assets../.env (+13 more) show less	Bad Web Bot
🇳🇱 Site.eu	2026-11-02 09:59:52 UTC · (1 week ago)	Scanning for secret files (.env, .git, credentials, config backups)	Bad Web Bot Web App Attack
🇫🇷 sthoyer.de	2026-11-02 09:53:14 UTC · (1 week ago)	34.39.226.138 - - [02/Nov/2026:10:53:11 +0100] "GET /sitemap_index.xml HTTP/2" 302 495 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot" 34.39.226.138 - - [02/Nov/2026:10:53:13 +0100] "GE ... show more 34.39.226.138 - - [02/Nov/2026:10:53:11 +0100] "GET /sitemap_index.xml HTTP/2" 302 495 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot" 34.39.226.138 - - [02/Nov/2026:10:53:13 +0100] "GET /admin HTTP/2" 302 495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" ... show less	Web App Attack
🇳🇱 Alt255	2026-11-02 09:31:18 UTC · (1 week ago)	[cb-04al] Excessive 404 errors (web scanning): 29 suspicious requests detected by fail2ban jail nginx-404. Example: 34.39.226.138 - - [02/Nov/2026:10:30:59 +0100] "GET /settings/integrations HTTP/1.0" 404 8563 "-" "Mozilla/5.0 (Linux; Android 10; K) ... show more [cb-04al] Excessive 404 errors (web scanning): 29 suspicious requests detected by fail2ban jail nginx-404. Example: 34.39.226.138 - - [02/Nov/2026:10:30:59 +0100] "GET /settings/integrations HTTP/1.0" 404 8563 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" 34.39.226.138 - - [02/Nov/2026:10:30:59 +0100] "GET /organization HTTP/1.0" 404 3595 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" 34.39.226.138 - - [02/Nov/2026:10:30:59 +0100] "GET /integrations HTTP/1.0" 404 3595 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" 34.39.226.138 - - [02/Nov/2026:10:30:59 +0100] "GET /checkout HTTP/1.0" 404 3595 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobil ... show less	Bad Web Bot Web App Attack
🇳🇱 Alboweb B.V.	2026-11-02 09:11:04 UTC · (1 week ago)	Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail	Bad Web Bot

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇺 212.26.251.235

🇫🇮 194.99.27.116

🇩🇪 136.244.83.169

🇭🇰 65.181.79.60

🇰🇷 61.32.68.66

🇧🇩 203.145.37.35

🇩🇪 167.94.145.23

🇺🇸 162.216.150.99

🇭🇰 112.119.242.61

🇫🇷 85.217.140.40

🇫🇷 78.231.161.42

🇬🇧 45.135.141.55

🇺🇸 20.118.241.250

🇮🇷 5.211.75.121

🇷🇴 2.57.122.209

🇳🇱 204.76.203.4

🇧🇷 201.63.67.250

🇵🇭 136.158.10.138

🇺🇸 104.152.52.149

🇩🇪 85.155.14.245