JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.39.136.42

Activity Trending Down

Abuse Confidence Score

100% Critical

83 reports

64 reporters · latest 2 weeks ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 42.136.39.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇧🇷 Brazil
City: Sao Paulo, Sao Paulo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

83 from 64 distinct reporters

First reported

October 22nd 2026

Most recent report

2 weeks ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 23 🇩🇪 Germany 13 🇳🇱 Netherlands 11

Most common categories Web App Attack 57 Brute-Force 30 Bad Web Bot 26 Hacking 15 Port Scan 5

Old reports The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 IVski.com	2026-10-31 17:23:29 UTC · (2 weeks ago)	IVski WAF \| Webshell probe detected - requesting common script extensions	Hacking Brute-Force Web App Attack
🇲🇾 Rizzy	2026-10-26 13:04:48 UTC · (2 weeks ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2026-10-26 12:42:55 UTC · (2 weeks ago)	34.39.136.42 - - [25/Oct/2026:06:01:10 -0500] "GET /.env.local?raw HTTP/1.1" 301 261 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 104.22.10.176 34.39.136.42 - - [25/Oct/2026:06:01:10 -0500] "GET /.env.local?import&raw HTTP/ ... show more 34.39.136.42 - - [25/Oct/2026:06:01:10 -0500] "GET /.env.local?raw HTTP/1.1" 301 261 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 104.22.10.176 34.39.136.42 - - [25/Oct/2026:06:01:10 -0500] "GET /.env.local?import&raw HTTP/1.1" 301 272 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 104.22.10.176 34.39.136.42 - - [25/Oct/2026:06:01:13 -0500] "GET /.env.production?raw HTTP/1.1" 301 266 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 104.22.10.176 34.39.136.42 - - [25/Oct/2026:06:01:13 -0500] "GET /.env.development?raw HTTP/1.1" 301 267 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 104.22.10.176 34.39.136.42 - - [25/Oct/2026:06:01:13 -0500] "GET /.env.production::$DATA?raw HTTP/1.1" 301 ... show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 SwinT	2026-10-26 12:00:06 UTC · (2 weeks ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇺🇸 iwle	2026-10-26 11:48:15 UTC · (2 weeks ago)	[Mon Oct 26 07:48:13.259326 2026] [:error] [pid 62798:tid 62850] [client 34.39.136.42:0] [client 34.39.136.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^\|/)(?:\\\\.env(?:\\\\.[^/])?\|\\\\.git(?:/\|$)\|phpinfo(?:\\\\.php ... show more [Mon Oct 26 07:48:13.259326 2026] [:error] [pid 62798:tid 62850] [client 34.39.136.42:0] [client 34.39.136.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^\|/)(?:\\\\.env(?:\\\\.[^/])?\|\\\\.git(?:/\|$)\|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak\|old\|save\|tmp\|swp\|~))?\|php-info\\\\.php\|phpversion\\\\.php\|info\\\\.php\|debug\\\\.php\|pinfo\\\\.php\|pi\\\\.php\|php\\\\.php\|i\\\\.php\|application_default_credentials\\\\.json\|(?:firebase\|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "www.uvscards.com"] [uri "/@fs/.env"] [unique_id "at89_WDE4C_KI1U9TV89jAAAAVc"] [Mon Oct 26 07:48:13.269746 2026] [:error] [pid 62710:tid 62756] [client 34.39.136.42:0] [client 34.39.136.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^\|/)(?:\\\\.env(?:\\\\.[ ... show less	Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-10-26 11:04:53 UTC · (2 weeks ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 ut-addicted.com	2026-10-26 10:51:21 UTC · (2 weeks ago)	\[Mon Oct 26 11:51:20.011227 2026\] \[:error\] \[pid 15448:tid 140077244049152\] \[client 34.39.136.42:51776\] \[client 34.39.136.42\] ModSecurity: Access denied with code 403 $phase 2$. Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local ... show more \[Mon Oct 26 11:51:20.011227 2026\] \[:error\] \[pid 15448:tid 140077244049152\] \[client 34.39.136.42:51776\] \[client 34.39.136.42\] ModSecurity: Access denied with code 403 $phase 2$. Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded $Total Score: 5$"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "ut-addicted.com"\] \[uri "/z9x8c7v6b5-debug-trigger-ut-addicted.com"\] \[unique_id "at8wqBQL6s42eXUw0wSSqQAAAEk"\] show less	Brute-Force Web App Attack
🇩🇪 rh24	2026-10-26 06:03:28 UTC · (2 weeks ago)	(badbots) Bad bot user-agent [redacted] from 34.39.136.42 (BR/Brazil/42.136.39.34.bc.googleusercontent.com)	Hacking
🇩🇪 Marc	2026-10-26 05:30:02 UTC · (2 weeks ago)	34.39.136.42 - - [26/Oct/2026:06:30:01 +0100] "GET /sitemap.xml HTTP/2.0" 404 314 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; ... show more 34.39.136.42 - - [26/Oct/2026:06:30:01 +0100] "GET /sitemap.xml HTTP/2.0" 404 314 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.39.136.42 - - [26/Oct/2026:06:30:01 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 34.39.136.42 - - [26/Oct/2026:06:30:01 +0100] "GET /z9x8c7v6b5-debug-trigger-accounting.uwe-simon.com HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" show less	Brute-Force
🇺🇸 TPI-Abuse	2026-10-25 19:11:51 UTC · (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 34.39.136.42 (42.136.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 15:11:46.226210 2026] [security2:error] [pid 24219:tid 24 ... show more (mod_security) mod_security (id:210730) triggered by 34.39.136.42 (42.136.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 15:11:46.226210 2026] [security2:error] [pid 24219:tid 24219] [client 34.39.136.42:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|sportsbookcommission.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sportsbookcommission.com"] [uri "/z9x8c7v6b5-debug-trigger-sportsbookcommission.com"] [unique_id "at5UckrxgvTjJ2QWnEXcFAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Gabriel Camargo	2026-10-25 11:15:21 UTC · (2 weeks ago)	34.39.136.42 - - [25/Oct/2026:06:14:58 -0500] "GET /app/ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.39.136.42 - - [25/Oct/2026:06:15:18 -0500] "GET ... show more 34.39.136.42 - - [25/Oct/2026:06:14:58 -0500] "GET /app/ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.39.136.42 - - [25/Oct/2026:06:15:18 -0500] "GET /app/ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.39.136.42 - - [25/Oct/2026:06:15:21 -0500] "GET /app/ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" ... show less	Brute-Force SSH
🇮🇪 Coolnagour	2026-10-25 05:22:37 UTC · (2 weeks ago)	http-probing: /sitemap.xml	Web App Attack
🇲🇽 octageeks.com	2026-10-25 04:17:50 UTC · (2 weeks ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇧🇷 ICS Labs	2026-10-25 01:39:55 UTC · (2 weeks ago)	ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-10-25 UTC.	Hacking
Anonymous	2026-10-25 00:44:49 UTC · (2 weeks ago)	Aggressive web scan	Web App Attack

Showing 1 to 15 of 83 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.90.74

🇹🇼 198.235.24.44

🇩🇪 217.181.84.145

🇷🇺 188.232.212.2

🇷🇴 92.118.39.78

🇮🇳 49.207.182.187

🇹🇭 223.204.220.190

🇷🇺 193.232.93.60

🇲🇽 187.144.128.243

🇦🇷 181.166.57.79

🇻🇳 113.174.13.239

🇹🇷 78.186.54.65

🇳🇱 77.91.71.82

🇩🇪 217.181.85.84

🇩🇪 193.98.114.26

🇺🇸 162.216.149.23

🇨🇳 124.229.180.12

🇨🇳 119.45.176.165

🇺🇸 68.237.161.71

🇺🇸 38.135.49.152