JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.95.138.40

Activity Trending Down

Abuse Confidence Score

30% Elevated

19 reports

14 reporters · latest 1 month ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 40.138.95.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇧🇷 Brazil
City: Sao Paulo, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

19 from 14 distinct reporters

First reported

September 30th 2026

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 5 🇫🇮 Finland 4 🇫🇷 France 3

Most common categories Web App Attack 15 Brute-Force 9 Bad Web Bot 8 Hacking 2 Port Scan 2

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-09-30 22:25:01 UTC · (1 month ago)		Brute-Force Web App Attack
🇩🇪 itsolon	2026-09-30 18:12:05 UTC · (1 month ago)	[30/Sep/2026:20:12:01 +0200] 179079192119.895116 34.95.138.40 51118 217.154.7.177 443 [30/Sep/2026:20:12:04 +0200] 179079192436.731536 34.95.138.40 51114 217.154.7.177 443 [30/Sep/2026:20:12:04 +0200] 179079192439.557558 34.95.138.40 51118 217.154.7. ... show more [30/Sep/2026:20:12:01 +0200] 179079192119.895116 34.95.138.40 51118 217.154.7.177 443 [30/Sep/2026:20:12:04 +0200] 179079192436.731536 34.95.138.40 51114 217.154.7.177 443 [30/Sep/2026:20:12:04 +0200] 179079192439.557558 34.95.138.40 51118 217.154.7.177 443 [30/Sep/2026:20:12:04 +0200] 17907919248.536023 34.95.138.40 51114 217.154.7.177 443 [30/Sep/2026:20:12:05 +0200] 179079192589.052323 34.95.138.40 51118 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇳🇱 sernate	2026-09-30 17:40:16 UTC · (1 month ago)	(404blocker) 404 trigger 34.95.138.40 (BR/Brazil/40.138.95.34.bc.googleusercontent.com): 80 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER	Brute-Force
🇫🇮 Christopher Hughes	2026-09-30 16:54:05 UTC · (1 month ago)	34.95.138.40 - - [30/Sep/2026:17:54:05 +0100] "GET /css../.env HTTP/2.0" 401 410 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ...	Web App Attack
🇳🇱 Savvii	2026-09-30 16:19:00 UTC · (1 month ago)	31 attempts against mh_ha-misbehave-ban on boron	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-30 15:12:43 UTC · (1 month ago)	34.95.138.40 - - [30/Sep/2026:06:21:55 -0500] "GET /.env.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.95.138.40 34.95.138.40 - - [30/Sep/2026:06:21:56 -0500] "GET /.env.js HTTP/1.1" 403 199 " ... show more 34.95.138.40 - - [30/Sep/2026:06:21:55 -0500] "GET /.env.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.95.138.40 34.95.138.40 - - [30/Sep/2026:06:21:56 -0500] "GET /.env.js HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)" 34.95.138.40 34.95.138.40 - - [30/Sep/2026:07:17:06 -0500] "GET /.env.js HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.95.138.40 34.95.138.40 - - [30/Sep/2026:07:17:09 -0500] "GET /.env.local?.svg?.wasm?init HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 34.95.138.40 34.95.138.40 - - [30/Sep/2026:10:12:41 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 34.95.138.40 34.95.138.40 - - [30/Sep/2026:10:12:41 -0500] "GET /.env.js HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like G ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-30 12:53:20 UTC · (1 month ago)	Portscan: TCP/8080 (2x), TCP/8443 (2x), TCP/80, TCP/443	Port Scan
Anonymous	2026-09-30 12:07:06 UTC · (1 month ago)	Automated web scanner. Requested suspicious paths: /dist/.vite/manifest.json \| /config.json \| /dist/manifest.json \| /.vite/manifest.json \| /build/manifest.json, /z9x8c7v6b5-debug-trigger-status.tigzig.com \| /config.json \| /dist/manifest.json \| /.vite ... show more Automated web scanner. Requested suspicious paths: /dist/.vite/manifest.json \| /config.json \| /dist/manifest.json \| /.vite/manifest.json \| /build/manifest.json, /z9x8c7v6b5-debug-trigger-status.tigzig.com \| /config.json \| /dist/manifest.json \| /.vite/manifest.json \| /build/manifest.json. UTC: 2026-09-30 12:02:42. show less	Web App Attack
🇺🇸 snappic	2026-09-30 11:38:26 UTC · (1 month ago)	Scanning for config [GET /config.json.js] [Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)]	Bad Web Bot Web App Attack
🇫🇮 Christopher Hughes	2026-09-30 11:27:16 UTC · (1 month ago)	34.95.138.40 - - [30/Sep/2026:12:27:15 +0100] "GET /_profiler/open HTTP/2.0" 401 410 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ...	Web App Attack
🇫🇮 Christopher Hughes	2026-09-30 11:10:07 UTC · (1 month ago)	34.95.138.40 - - [30/Sep/2026:12:10:06 +0100] "GET /server-info HTTP/2.0" 401 410 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ...	Web App Attack
🇫🇷 masterguru	2026-09-30 11:09:49 UTC · (1 month ago)	BAD BOT - Detected and Blocked.. Matched phrase "baidu" at REQUEST_HEADERS:User-Agent. (1100000-195)	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-30 11:01:42 UTC · (1 month ago)	(mod_security) mod_security (id:210730) triggered by 34.95.138.40 (40.138.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 07:01:34.095999 2026] [security2:error] [pid 9366:tid 936 ... show more (mod_security) mod_security (id:210730) triggered by 34.95.138.40 (40.138.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 07:01:34.095999 2026] [security2:error] [pid 9366:tid 9366] [client 34.95.138.40:32830] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|rddeckerphotography.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rddeckerphotography.com"] [uri "/z9x8c7v6b5-debug-trigger-rddeckerphotography.com"] [unique_id "arzsDrsVwb74MIQTiTRWMAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-09-30 10:18:24 UTC · (1 month ago)	34 attempts against mh-misbehave-ban on boron	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Christopher Hughes	2026-09-30 10:16:04 UTC · (1 month ago)	34.95.138.40 - - [30/Sep/2026:11:16:04 +0100] "GET /config.json HTTP/2.0" 401 410 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" ...	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇽 2600:1f17:4e23:6200:2c5b:2044:b7f6:e12b

🇬🇧 213.166.84.35

🇦🇷 181.164.109.38

🇺🇸 162.216.149.193

🇺🇸 152.163.3.201

🇺🇸 152.163.3.200

🇺🇸 142.248.83.111

🇨🇳 124.31.105.165

🇨🇳 118.81.204.113

🇹🇷 88.247.35.189

🇬🇧 87.236.176.58

🇻🇬 85.155.14.60

🇺🇦 85.114.214.16

🇷🇴 80.94.95.211

🇳🇱 45.115.26.92

🇺🇸 45.79.67.28

🇹🇭 43.133.116.104

🇺🇸 40.74.211.29

🇺🇸 35.236.86.211

🇺🇸 20.168.116.252