JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.61.60.40

34.61.60.40 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	40.60.61.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.61.60.40

Whois 34.61.60.40

IP Abuse Reports for 34.61.60.40:

This IP address has been reported a total of 31 times from 24 distinct sources. 34.61.60.40 was first reported on August 1st 2026, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 payincog	2026-08-01 18:00:11 (15 hours ago)	Date: Aug 01 20:06:20 2026 EAT \| Reported IP: 34.61.60.40 mod_security \| id: 920440 930130 949110 \| ... show more Date: Aug 01 20:06:20 2026 EAT \| Reported IP: 34.61.60.40 mod_security \| id: 920440 930130 949110 \| US/pay.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; URL file extension is restricted by policy; URL file extension is restricted by policy; URL file extension is restricted by policy; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Restricted File Access Attempt; Inbound Anomaly Score Exceeded (Total Score: 10); Inbound Anomaly Score Exceeded (Total Score: 10); Inbound Anomaly Score Exceeded (Total Score: 5); Inbound Anomaly Score Exceeded (Total Score: 5); Inbound Anomaly Score Exceeded (Total Score: 5); Inbound Anomaly Score Exceeded (Total Score: 5); Inbound Anomaly show less	SQL Injection Brute-Force Bad Web Bot
Anonymous	2026-08-01 17:29:03 (16 hours ago)	Bot / scanning and/or hacking attempts: GET /.env.bak HTTP/1.1, GET /.env.production HTTP/1.1	Hacking Web App Attack
🇩🇪 LRob	2026-08-01 17:07:34 (16 hours ago)	CrowdSec: crowdsecurity/http-sensitive-files \| req: /.env.dev \| 5 distinct paths \| UA: crusader-work ... show more CrowdSec: crowdsecurity/http-sensitive-files \| req: /.env.dev \| 5 distinct paths \| UA: crusader-worker/1.0 show less	Hacking
🇺🇸 mnsf	2026-08-01 17:05:20 (16 hours ago)	Abuse Detected (10)	Brute-Force Web App Attack
🇺🇸 kosada.com	2026-08-01 17:02:48 (16 hours ago)	Web vulnerability probing: /.env.save	Web App Attack
🇫🇷 LoneRider	2026-08-01 16:48:23 (17 hours ago)	[01/Aug/2026:18:48:23.375988 +0200] am4jV9VUO3wD6AEEbNR1tQAAAAY 34.61.60.40 48856 127.0.0.1 7081 [01 ... show more [01/Aug/2026:18:48:23.375988 +0200] am4jV9VUO3wD6AEEbNR1tQAAAAY 34.61.60.40 48856 127.0.0.1 7081 [01/Aug/2026:18:48:23.380254 +0200] am4jV1fQFvFThiKrLx32kgAAAAM 34.61.60.40 48868 127.0.0.1 7081 [01/Aug/2026:18:48:23.381344 +0200] am4jV1h8RswdUKO1GnzO1QAAAAA 34.61.60.40 48872 127.0.0.1 7081 ... show less	Hacking
🇩🇪 hidemail.app	2026-08-01 16:37:25 (17 hours ago)	Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto ... show more Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto-banned by fail2ban. show less	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-01 16:30:42 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.61.60.40 (40.60.61.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.61.60.40 (40.60.61.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:30:36.323048 2026] [security2:error] [pid 2991105:tid 2991105] [client 34.61.60.40:53914] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smogsandiego.com"] [uri "/.env.prod"] [unique_id "am4fLCH3Bf1JHgGyzFrSfgAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-08-01 16:17:04 (17 hours ago)	Try to access /.env	Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 16:15:14 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.61.60.40 (40.60.61.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.61.60.40 (40.60.61.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:15:09.340826 2026] [security2:error] [pid 2376028:tid 2376028] [client 34.61.60.40:56048] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.ashtangayogamelbourne.com"] [uri "/.env.save"] [unique_id "am4bjdjjyoQ-m4gFHwUXHwAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-08-01 16:13:33 (17 hours ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇨🇭 zynex	2026-08-01 16:06:54 (17 hours ago)	URL Probing: /.env	Web App Attack
🇳🇱 e.fierstra	2026-08-01 16:01:36 (17 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇫🇮 as211431.net	2026-08-01 15:47:44 (18 hours ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.env.production UA: crusader-worker/1.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇳🇱 WeCloudit-Anti-Abuse	2026-08-01 15:30:38 (18 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇪 190.153.18.195

🇦🇷 186.23.209.47

🇦🇷 181.99.33.184

🇺🇸 135.237.127.54

🇵🇱 91.219.209.17

🇺🇸 65.49.1.111

🇺🇸 15.204.101.211

🇩🇪 213.209.159.238

🇨🇳 180.76.177.88

🇮🇳 177.177.116.102

🇮🇩 157.15.67.253

🇺🇸 147.182.225.86

🇵🇱 145.239.91.0

🇩🇪 141.11.32.54

🇺🇸 135.233.112.24

🇨🇳 123.160.223.73

🇷🇺 94.243.8.208

🇳🇱 89.248.172.12

🇺🇸 89.187.170.143

🇧🇪 34.140.20.118