JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.41.244.140

34.41.244.140 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 87%: ?

87%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	140.244.41.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.41.244.140

Whois 34.41.244.140

IP Abuse Reports for 34.41.244.140:

This IP address has been reported a total of 21 times from 16 distinct sources. 34.41.244.140 was first reported on August 31st 2026, and the most recent report was 9 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 WeCloudit-Anti-Abuse	2026-09-01 03:33:23 (9 minutes ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇫🇷 Baking333	2026-09-01 03:15:05 (28 minutes ago)	[redacted] 34.41.244.140 - - [01/Sep/2026:04:15:04 +0100] "GET /.[redacted] HTTP/1.1" 302 6768 0/441 ... show more [redacted] 34.41.244.140 - - [01/Sep/2026:04:15:04 +0100] "GET /.[redacted] HTTP/1.1" 302 6768 0/44187 "-" "crusader-worker/1.0" [redacted] 34.41.244.140 - - [01/Sep/2026:04:15:04 +0100] "GET /.[redacted] HTTP/1.1" 302 6768 0/50393 "-" "crusader-worker/1.0" show less	Bad Web Bot Web App Attack
🇩🇪 dpsbs	2026-09-01 02:57:24 (45 minutes ago)	multiple ips intrustions detected	Hacking
🇺🇸 TPI-Abuse	2026-09-01 02:34:49 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.41.244.140 (140.244.41.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.41.244.140 (140.244.41.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 22:34:41.457091 2026] [security2:error] [pid 1411:tid 1411] [client 34.41.244.140:51348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.beatthegm.com"] [uri "/.env.local"] [unique_id "apY5wfkg7kepiTd-3fmM0gAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 01:19:56 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.41.244.140 (140.244.41.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.41.244.140 (140.244.41.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 21:19:49.529381 2026] [security2:error] [pid 5517:tid 5517] [client 34.41.244.140:56540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "doctorspainmanagement.com"] [uri "/wp-config.php~"] [unique_id "apYoNRmMm9XnGuKvRi2taQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-01 00:59:04 (2 hours ago)	Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env.bak HT ... show more Bot / scanning and/or hacking attempts: GET /.env HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.save HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /wp-config.php.swp HTTP/1.1, GET /.env.prod HTTP/1.1, GET /env HTTP/1.1, GET /wp-config.php.bak HTTP/1.1, GET /.env.local HTTP/1.1, GET /actuator/env HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, GET /actuator/configprops HTTP/1.1, GET /.env.backup HTTP/1.1, GET /crusader-404-probe HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.example HTTP/1.1, GET /_ignition/health-check HTTP/1.1 show less	Hacking Web App Attack
🇬🇧 pinguin	2026-09-01 00:38:24 (3 hours ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: LOG Protocol: HTTP/1.1 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: LOG Protocol: HTTP/1.1 (GET method) Endpoint: /.env.bak UA: crusader-worker/1.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-01 00:14:45 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.41.244.140 (140.244.41.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.41.244.140 (140.244.41.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:14:40.999877 2026] [security2:error] [pid 17003:tid 17003] [client 34.41.244.140:57902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.clarktec.com"] [uri "/.env"] [unique_id "apYY8Mx51dTBV8MqEOzQOAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 auridh	2026-09-01 00:08:45 (3 hours ago)	Ip 34.41.244.140 performed 'crowdsecurity/http-sensitive-files' (5 events over 22.452487ms) at 2026- ... show more Ip 34.41.244.140 performed 'crowdsecurity/http-sensitive-files' (5 events over 22.452487ms) at 2026-08-31 22:11:54.738213126 +0000 UTC show less	Web App Attack
🇿🇦 conure.sh	2026-08-31 23:53:44 (3 hours ago)	csagent: score 20.8: 404 noise floor x3, secrets grab x2; 1 domain(s) in 0s	Web App Attack
🇩🇪 Dominik Lysiak	2026-08-31 23:51:47 (3 hours ago)	34.41.244.140 - - [01/Sep/2026:01:51:46 +0200] "GET /.env HTTP/1.1" 444 0 "-" "crusader-worker/1.0" ... show more 34.41.244.140 - - [01/Sep/2026:01:51:46 +0200] "GET /.env HTTP/1.1" 444 0 "-" "crusader-worker/1.0" 34.41.244.140 - - [01/Sep/2026:01:51:46 +0200] "GET /wp-config.php.bak HTTP/1.1" 444 0 "-" "crusader-worker/1.0" 34.41.244.140 - - [01/Sep/2026:01:51:46 +0200] "GET /.env.backup HTTP/1.1" 444 0 "-" "crusader-worker/1.0" ... show less	Web App Attack
🇫🇷 Octopuce	2026-08-31 23:29:18 (4 hours ago)	Aggressive web search of vulnerable pages: /.env.old /.env.local /.env.dev /.env.bak /.env.save /.en ... show more Aggressive web search of vulnerable pages: /.env.old /.env.local /.env.dev /.env.bak /.env.save /.env /.env.prod /.env.example /.env.production ... show less	Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-08-31 23:27:42 (4 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 auridh	2026-08-31 23:08:14 (4 hours ago)	Ip 34.41.244.140 performed 'crowdsecurity/http-probing' (11 events over 41.248006ms) at 2026-08-31 2 ... show more Ip 34.41.244.140 performed 'crowdsecurity/http-probing' (11 events over 41.248006ms) at 2026-08-31 22:11:54.739099128 +0000 UTC show less	Web App Attack
🇯🇵 ZEROVOX	2026-08-31 22:49:34 (4 hours ago)	CrowdSec: crowdsecurity/http-sensitive-files detected	Web App Attack

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 219.143.40.210

🇺🇸 195.184.76.170

🇬🇧 193.163.125.239

🇲🇽 189.129.149.169

🇨🇳 180.76.235.175

🇸🇦 159.0.75.225

🇸🇪 83.209.250.100

🇺🇸 69.229.227.44

🇺🇸 64.62.156.228

🇺🇸 45.194.67.19

🇭🇰 34.92.131.255

🇹🇼 218.32.150.109

🇩🇪 217.154.120.73

🇺🇸 209.50.161.153

🇨🇳 203.212.9.248

🇺🇸 195.184.76.70

🇬🇧 188.240.59.30

🇨🇳 140.206.194.13

🇨🇦 85.217.149.72

🇺🇸 73.209.18.183