JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.42.228.90

34.42.228.90 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	90.228.42.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.42.228.90

Whois 34.42.228.90

IP Abuse Reports for 34.42.228.90:

This IP address has been reported a total of 35 times from 29 distinct sources. 34.42.228.90 was first reported on August 27th 2026, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 FD-IX	2026-09-02 07:36:21 (19 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-09-02 05:21:57 (21 hours ago)	{"level":"info","ts":1788326517.3005555,"logger":"http.log.access.log0","msg":"handled request","req ... show more {"level":"info","ts":1788326517.3005555,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.42.228.90","remote_port":"47396","client_ip":"34.42.228.90","proto":"HTTP/1.1","method":"GET","host":"zq72.status.updown.io","uri":"/actuator/configprops","headers":{"Accept":["/"],"User-Agent":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"zq72.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000064233,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1788326517.3013673,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.42.228.90","remote_port":"47510","client_ip":"34.42.228.90","proto":"HTTP/1.1","method":"GET","host":"zq72.status.updown.io","uri":"/access.log","headers":{"Ac ... show less	DDoS Attack Web App Attack
🇩🇪 LRob	2026-09-02 04:45:45 (22 hours ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /wordpress/.git/config (+11 more) \| 2026-09-02 04:45 UTC show less	Hacking Web App Attack
🇩🇪 Philister11	2026-09-02 02:15:51 (1 day ago)	CrowdSec: crowdsecurity/http-sensitive-files (US/AS396982)	Web App Attack Hacking
🇫🇷 masterguru	2026-09-02 01:07:01 (1 day ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)	Hacking Web App Attack
Anonymous	2026-09-01 21:04:22 (1 day ago)	CrowdSec ban: crowdsecurity/http-sensitive-files	Port Scan
Anonymous	2026-09-01 21:03:12 (1 day ago)	Bot / seems abusive / Apache connections: 31	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 09:57:39 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.42.228.90 (90.228.42.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.42.228.90 (90.228.42.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:57:33.584542 2026] [security2:error] [pid 8495:tid 8495] [client 34.42.228.90:40168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.menafert.com"] [uri "/app/.git/config"] [unique_id "apahjWlfwsPmv5PSY6Qg1AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 08:40:31 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.42.228.90 (90.228.42.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.42.228.90 (90.228.42.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:40:27.438545 2026] [security2:error] [pid 25779:tid 25779] [client 34.42.228.90:55032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "integrabroadcast.com"] [uri "/html/.git/config"] [unique_id "apaPe3eFkeKDfIUbpzVvXQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-09-01 07:59:53 (1 day ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
Anonymous	2026-09-01 07:54:58 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 34.42.228.90 (US/United States/90.228.4 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.42.228.90 (US/United States/90.228.42.34.bc.googleusercontent.com) show less	SQL Injection
🇺🇸 CollideTech	2026-09-01 07:19:23 (1 day ago)	probing for vulnerabilities	Web App Attack
🇬🇧 consul.to	2026-09-01 06:25:24 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 raph	2026-09-01 05:48:05 (1 day ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-09-01 05:15:28 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 34.42.228.90 (US/United States/90.228.42.34.bc. ... show more (mod_security) mod_security (id:949110) triggered by 34.42.228.90 (US/United States/90.228.42.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.46

🇲🇽 189.219.16.249

🇺🇸 162.216.150.62

🇺🇸 162.216.149.74

🇺🇸 159.223.102.72

🇫🇷 91.231.89.224

🇳🇱 45.148.10.157

🇳🇱 45.148.10.21

🇳🇱 195.178.110.232

🇧🇷 189.57.204.50

🇺🇸 162.216.150.225

🇺🇸 147.185.132.204

🇩🇪 93.215.231.152

🇱🇹 62.60.130.219

🇺🇸 47.85.84.61

🇮🇪 40.113.76.150

🇧🇪 35.241.225.74

🇺🇸 2604:a880:400:d1:0:4:e8e8:7001

🇳🇱 204.76.203.4

🇮🇳 182.95.106.118