JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.82.170.141

Neutral Activity

Abuse Confidence Score

0% Low Risk

46 reports

37 reporters · latest 2 months ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 141.170.82.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: The Dalles, Oregon

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

34.82.170.141 has been reported 46 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

46 from 37 distinct reporters

First reported

September 7th 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-09-09 21:59:13 UTC · (2 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-08.	Web App Attack SSH Hacking
🇳🇱 Site.eu	2026-09-09 12:38:56 UTC · (2 months ago)	Excessive multi-domain requests	Brute-Force
🇮🇳 evicky2002	2026-09-09 00:01:20 UTC · (2 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 Dominik Lysiak	2026-09-08 13:10:39 UTC · (2 months ago)	34.82.170.141 - - [08/Sep/2026:15:10:38 +0200] "GET /.env.production HTTP/1.1" 200 1140 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 34.82.170.141 - - [08/Sep/2026:15:10:38 +0200] "GET /.env HTTP/1.1" 2 ... show more 34.82.170.141 - - [08/Sep/2026:15:10:38 +0200] "GET /.env.production HTTP/1.1" 200 1140 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot)" 34.82.170.141 - - [08/Sep/2026:15:10:38 +0200] "GET /.env HTTP/1.1" 200 1140 "-" "Mozilla/5.0 (compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 34.82.170.141 - - [08/Sep/2026:15:10:38 +0200] "GET /.env.local HTTP/1.1" 200 1140 "-" "Mozilla/5.0 (compatible; Slackbot-LinkExpanding/1.0; +https://api.slack.com/robots)" ... show less	Web App Attack
🇳🇱 e.fierstra	2026-09-08 13:09:37 UTC · (2 months ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇳🇱 ConsulHosting	2026-09-08 13:07:06 UTC · (2 months ago)	Automatically blocked due to distributed attack	Hacking
🇺🇦 URAN Publishing Service	2026-09-08 12:45:16 UTC · (2 months ago)	[08/Sep/2026:15:45:16 +0300] -- 34.82.170.141 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /@fs/../../.env?raw?? HTTP/1.1	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-08 12:11:09 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.82.170.141 (141.170.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 08:11:01.944168 2026] [security2:error] [pid 3524068:ti ... show more (mod_security) mod_security (id:210492) triggered by 34.82.170.141 (141.170.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 08:11:01.944168 2026] [security2:error] [pid 3524068:tid 3524068] [client 34.82.170.141:2390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eastsidenotary.com"] [uri "/@fs/root/.env"] [unique_id "ap_7VZ7Nv-XmfFGtTVoP6QAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Christopher Hughes	2026-09-08 12:04:04 UTC · (2 months ago)	[Tue Sep 08 13:03:31.309334 2026] [authz_core:error] [pid 3849974:tid 140112100849216] [client 34.82.170.141:52206] AH01630: client denied by server configuration: /srv/stats/config/.env [Tue Sep 08 13:03:37.412526 2026] [authz_core:error] [pid 38499 ... show more [Tue Sep 08 13:03:31.309334 2026] [authz_core:error] [pid 3849974:tid 140112100849216] [client 34.82.170.141:52206] AH01630: client denied by server configuration: /srv/stats/config/.env [Tue Sep 08 13:03:37.412526 2026] [authz_core:error] [pid 3849919:tid 140112084063808] [client 34.82.170.141:17820] AH01630: client denied by server configuration: /srv/stats/core/.env [Tue Sep 08 13:03:54.306603 2026] [authz_core:error] [pid 3849974:tid 140113661105728] [client 34.82.170.141:57030] AH01630: client denied by server configuration: /srv/stats/config/database.yml [Tue Sep 08 13:03:54.307624 2026] [authz_core:error] [pid 3849974:tid 140112990017088] [client 34.82.170.141:57046] AH01630: client denied by server configuration: /srv/stats/config/secrets.yml [Tue Sep 08 13:04:03.853725 2026] [authz_core:error] [pid 3849974:tid 140113040373312] [client 34.82.170.141:27742] AH01630: client denied by server configuration: /srv/stats/.htpasswd ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-08 10:59:39 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.82.170.141 (141.170.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 06:59:35.305222 2026] [security2:error] [pid 22083:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.82.170.141 (141.170.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 06:59:35.305222 2026] [security2:error] [pid 22083:tid 22083] [client 34.82.170.141:29646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thekingofweed.com"] [uri "/@fs/.env"] [unique_id "ap_ql3mlNRqr72INhF1tWAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 cybertailor	2026-09-08 10:23:57 UTC · (2 months ago)	34.82.170.141 - - [08/Sep/2026:15:23:53 +0500] "GET /@fs/.env?raw?? HTTP/1.1" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Twitterbot/1.0" 34.82.170.141 - - [08/Sep/2026:15:23:53 +0500] "GET /@fs/..%252f..%252f..%252f. ... show more 34.82.170.141 - - [08/Sep/2026:15:23:53 +0500] "GET /@fs/.env?raw?? HTTP/1.1" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Twitterbot/1.0" 34.82.170.141 - - [08/Sep/2026:15:23:53 +0500] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.82.170.141 - - [08/Sep/2026:15:23:53 +0500] "GET /@fs/root/.env?raw?? HTTP/1.1" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot" 34.82.170.141 - - [08/Sep/2026:15:23:53 +0500] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected]) Chrome/91.0.3821.159 Safari/537.36" 34.82.170.141 - - [08/Sep/2026:15:23:53 +0500] "GET /@fs/.env.staging?raw?? HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-08 10:02:35 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.82.170.141 (141.170.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 06:02:28.347754 2026] [security2:error] [pid 10188:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.82.170.141 (141.170.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 06:02:28.347754 2026] [security2:error] [pid 10188:tid 10188] [client 34.82.170.141:14724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.oposicionesyconcursos.es"] [uri "/@fs/.env"] [unique_id "ap_dNMg5zpimlSO8c9QChgAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 Aetherweb Ark	2026-09-08 10:02:08 UTC · (2 months ago)	(mod_security) mod_security (id:949110) triggered by 34.82.170.141 (US/United States/141.170.82.34.bc.googleusercontent.com): N in the last X secs	Web App Attack
🇺🇸 TPI-Abuse	2026-09-08 09:43:54 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.82.170.141 (141.170.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 05:43:49.128317 2026] [security2:error] [pid 1714235:ti ... show more (mod_security) mod_security (id:210492) triggered by 34.82.170.141 (141.170.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 05:43:49.128317 2026] [security2:error] [pid 1714235:tid 1714279] [client 34.82.170.141:32834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saskiarose.m3sxa.com"] [uri "/@fs/root/.env"] [unique_id "ap_Y1S4xGzxztlzDx71-DAAAAMM"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-08 08:19:51 UTC · (2 months ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇪 207.175.218.17

🇹🇼 114.32.19.171

🇳🇱 45.144.212.158

🇺🇸 147.185.132.236

🇳🇱 77.239.124.35

🇺🇸 70.183.226.12

🇨🇳 59.45.17.50

🇦🇷 201.180.180.57

🇸🇬 194.5.82.37

🇺🇸 193.56.117.22

🇳🇱 185.218.86.31

🇬🇧 165.154.129.151

🇺🇸 136.108.54.95

🇰🇷 121.133.167.123

🇺🇸 94.72.112.44

🇧🇬 79.124.59.10

🇩🇿 41.104.255.124

🇦🇷 206.0.118.189

🇻🇪 186.91.192.95

🇮🇳 106.205.174.94