JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.39.242.172

34.39.242.172 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 77%: ?

77%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	172.242.39.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.39.242.172

Whois 34.39.242.172

IP Abuse Reports for 34.39.242.172:

This IP address has been reported a total of 39 times from 29 distinct sources. 34.39.242.172 was first reported on June 9th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 ConsulHosting	2026-06-12 03:56:02 (3 weeks ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
Anonymous	2026-06-11 20:08:34 (3 weeks ago)	(caddyscan) Scanner path probe from 34.39.242.172 (BR/Brazil/172.242.39.34.bc.googleusercontent.com) ... show more (caddyscan) Scanner path probe from 34.39.242.172 (BR/Brazil/172.242.39.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.39.242.172 - - [11/Jun/2026:20:08:31 +0000] "GET /actuator/logfile HTTP/1.1" [REDACTED] 200 2627 34.39.242.172 - - [11/Jun/2026:20:08:31 +0000] "GET /api/actuator/heapdump HTTP/1.1" [REDACTED] 200 2627 34.39.242.172 - - [11/Jun/2026:20:08:31 +0000] "GET /api/actuator/configprops HTTP/1.1" [REDACTED] 200 2627 34.39.242.172 - - [11/Jun/2026:20:08:31 +0000] "GET /actuator/auditevents HTTP/1.1" [REDACTED] 200 2627 34.39.242.172 - - [11/Jun/2026:20:08:31 +0000] "GET /api/actuator/logfile HTTP/1.1" show less	Port Scan
🇳🇱 Cloud86 B.V.	2026-06-11 14:39:06 (3 weeks ago)	categories: DDoS Attack	DDoS Attack
🇩🇪 big-cloud.nl	2026-06-11 14:15:17 (3 weeks ago)	Try to access /config/.aws/credentials	Web App Attack
Anonymous	2026-06-11 13:28:48 (3 weeks ago)	Scenarios: http-admin-interface-probing, http-bad-user-agent, http-crawl-non_statics, http-probing, ... show more Scenarios: http-admin-interface-probing, http-bad-user-agent, http-crawl-non_statics, http-probing, http-sensitive-files, http-technology-probing Total requests: 382 [11/Jun/2026:13:28:46 +0000] [Client: 34.39.242.172] GET [404] "/actuator/heapdump" User-Agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Ubuntu Chromium/67.0.3396.99 Chrome/67.0.3396.99 Safari/537.36" [11/Jun/2026:13:28:46 +0000] [Client: 34.39.242.172] GET [404] "/dump" User-Agent: "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3875.0 Safari/537.36" [11/Jun/2026:13:28:46 +0000] [Client: 34.39.242.172] GET [404] "/actuator/configprops" User-Agent: "Mozilla/5.0 (Linux; Android 7.0; i1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36" [11/Jun/2026:13:28:46 +0000] [Client: 34.39.242.172] GET [404] "/app/actuator/heapdump" User-Agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:2.0.1) Gecko/20100101 Firefox/4.0.1 Camino/2.2.1" show less	Brute-Force Web App Attack
Anonymous	2026-06-11 11:33:00 (3 weeks ago)	Exceeded the maximum global requests per minute for crawlers or humans.	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-11 08:35:30 (3 weeks ago)	Multiple web server 400 error codes from same source ip	Web App Attack
🇩🇪 Philister11	2026-06-11 00:00:39 (3 weeks ago)	CrowdSec: crowdsecurity/http-sensitive-files (BR/AS396982)	Web App Attack Hacking
🇳🇱 homeshowdomain.nl	2026-06-10 22:01:09 (3 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09. show less	Web App Attack SSH Hacking
🇳🇱 e.fierstra	2026-06-10 18:47:27 (3 weeks ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 todix	2026-06-10 12:55:59 (3 weeks ago)	Web App Attack Exploid from 34.39.242.172	Web App Attack
🇧🇪 cmbplf	2026-06-10 12:39:03 (3 weeks ago)	174 requests with url.path credentials.json 120 requests with url.path compose.yml	Brute-Force Bad Web Bot
Anonymous	2026-06-10 09:10:52 (3 weeks ago)	(mod_security) mod_security triggered on hostname [redacted] 34.39.242.172 (BR/Brazil/172.242.39.34. ... show more (mod_security) mod_security triggered on hostname [redacted] 34.39.242.172 (BR/Brazil/172.242.39.34.bc.googleusercontent.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-06-10 08:57:37 (3 weeks ago)	(mod_security) mod_security (id:210831) triggered by 34.39.242.172 (172.242.39.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210831) triggered by 34.39.242.172 (172.242.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 04:57:30.517586 2026] [security2:error] [pid 30966:tid 30966] [client 34.39.242.172:46278] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|debzy.com\|F\|4"] [data "EmailWolf"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "debzy.com"] [uri "/actuator/trace"] [unique_id "aikm-gmHZ9fy_yJMhjnF5QAAADg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-06-10 08:53:22 (3 weeks ago)	{"level":"info","ts":1781081601.44904,"logger":"http.log.access.log1","msg":"handled request","reque ... show more {"level":"info","ts":1781081601.44904,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.39.242.172","remote_port":"38478","client_ip":"34.39.242.172","proto":"HTTP/1.1","method":"GET","host":"tsrqponmlkjiupdate.aupdate.yxwvutsrutsrmlkjihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/app/actuator/logfile","headers":{"User-Agent":["Mozilla/5.0 (Linux; Android 8.0.0; SM-G935U) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.000091504,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://tsrqponmlkjiupdate.aupdate.yxwvutsrutsrmlkjihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/app/actuator/logfile"],"Content-Type":[]}} {"level":"info","ts":1781081601.4605036,"logger":"http.log.access.log1","msg":"h ... show less	DDoS Attack Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 119.234.157.6

🇹🇼 101.13.5.34

🇰🇿 91.147.111.106

🇦🇱 79.106.123.201

🇧🇪 34.156.121.20

🇮🇹 147.45.51.138

🇧🇷 131.196.79.186

🇮🇩 103.82.92.50

🇻🇳 103.53.231.159

🇵🇹 87.103.126.54

🇩🇪 84.118.20.106

🇨🇭 79.127.184.168

🇺🇸 66.132.172.150

🇲🇾 49.124.159.185

🇳🇱 45.148.10.157

🇻🇳 45.119.81.245

🇮🇷 37.114.205.189

🇺🇸 163.192.193.212

🇩🇪 149.36.50.30

🇨🇳 118.145.144.95