JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.139.129.69

Activity Trending Down

Abuse confidence score ?

100% Critical

271 reports

126 reporters · latest 1 week ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	69.129.139.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	North Charleston, South Carolina

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.139.129.69

Export CSV

This IP address has been reported a total of 271 times from 126 distinct sources. 34.139.129.69 was first reported on August 30th 2026, and the most recent report was 1 week ago. In the last 60 days, the top reporter locations were: Germany with 61 reports; United States of America with 59 reports; Netherlands with 31 reports. The most common categories in these recent reports were: Web App Attack 231 times; Bad Web Bot 111 times; Brute-Force 89 times; Hacking 35 times; Port Scan 13 times; Other 27 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 e.fierstra	2026-10-15 06:49:10 (1 week ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-10-15 02:35:02 (1 week ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇫🇷 baphomet	2026-10-15 00:34:09 (1 week ago)	Probed planted web canary URI (not a real app path). HTTP request completed against planted URIs (.e ... show more Probed planted web canary URI (not a real app path). HTTP request completed against planted URIs (.env/wp-login/xmlrpc/phpmyadmin/.git). jail=nginx-canary proto=tcp port=80,443 failures>=2 class=web-app-probe these paths are not real apps on this host; hit is hostile recon when=2026-10-15T00:34:08Z sensor=fail2ban role=web-canary src=34.139.129.69 show less	Web App Attack
🇳🇱 Alt255	2026-10-14 08:47:14 (1 week ago)	[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.139.129.69 - - [14/Oct/2026:10:46:58 +0200] "GET /.env HTTP/1.1" 404 6252 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" ... show less	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-10-14 05:35:58 (1 week ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 consul.to	2026-10-14 00:49:14 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 suble.org	2026-10-13 21:40:05 (1 week ago)	[Tue Oct 13 23:40:00.221293 2026] [access_compat:error] [pid 650606:tid 650606] [client 34.139.129.6 ... show more [Tue Oct 13 23:40:00.221293 2026] [access_compat:error] [pid 650606:tid 650606] [client 34.139.129.69:11928] AH01797: client denied by server configuration: /var/www/vhosts/suble.org/cloud/config/environment.js [Tue Oct 13 23:40:00.926777 2026] [access_compat:error] [pid 650603:tid 650603] [client 34.139.129.69:60220] AH01797: client denied by server configuration: /var/www/vhosts/suble.org/cloud/config/environment.js [Tue Oct 13 23:40:01.422313 2026] [access_compat:error] [pid 650603:tid 650603] [client 34.139.129.69:60220] AH01797: client denied by server configuration: /var/www/vhosts/suble.org/cloud/config/config.json [Tue Oct 13 23:40:02.753204 2026] [access_compat:error] [pid 650603:tid 650603] [client 34.139.129.69:60220] AH01797: client denied by server configuration: /var/www/vhosts/suble.org/cloud/config/config.json ... show less	Web App Attack
🇳🇱 e.fierstra	2026-10-13 18:22:59 (1 week ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-10-13 17:24:32 (1 week ago)	20 attempts against mh-misbehave-ban on solar	Brute-Force Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-10-13 17:14:05 (1 week ago)	[13/Oct/2026:20:14:05 +0300] -- 34.139.129.69 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET / ... show more [13/Oct/2026:20:14:05 +0300] -- 34.139.129.69 Ban reason: Scanner [SENSITIVE_FILES] \| Request: GET /.env HTTP/1.1 show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-13 16:43:49 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: k8s.astropot.tech \| URI: /.env \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 TAY	2026-10-13 12:14:14 (1 week ago)	34.139.129.69 - - [13/Oct/2026:20:14:10 +0800] "GET /wp-config.php.bak HTTP/1.1" 500 6205 "-" "Mozil ... show more 34.139.129.69 - - [13/Oct/2026:20:14:10 +0800] "GET /wp-config.php.bak HTTP/1.1" 500 6205 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 34.139.129.69 - - [13/Oct/2026:20:14:11 +0800] "GET /wp-config.php.old HTTP/1.1" 500 6205 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" 34.139.129.69 - - [13/Oct/2026:20:14:11 +0800] "GET /wp-config.php.save HTTP/1.1" 500 6205 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 34.139.129.69 - - [13/Oct/2026:20:14:11 +0800] "GET /wp-config.php.swp HTTP/1.1" 500 6205 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" 34.139.129.69 - - [13/Oct/2026:20:14:13 +0800] "GET /wp-config.php~ HTTP/1.1" 301 463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" 34.139.129.69 - - [13/Oct/2026:20:14:14 +0800] "GET /wp-config.php~ ... show less	Brute-Force
🇩🇪 hmt	2026-10-13 11:47:23 (1 week ago)	34.139.129.69 - - [13/Oct/2026:13:46:25 +0200] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (iPhone ... show more 34.139.129.69 - - [13/Oct/2026:13:46:25 +0200] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1" host="vps.hmt.ovh" 34.139.129.69 - - [13/Oct/2026:13:46:29 +0200] "GET /.env.local HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" host="vps.hmt.ovh" 34.139.129.69 - - [13/Oct/2026:13:46:33 +0200] "GET /.env.production HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" host="vps.hmt.ovh" 34.139.129.69 - - [13/Oct/2026:13:46:37 +0200] "GET /.env.staging HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" host="vps.hmt.ovh" 34.139.129.69 - - [13/Oct/2026:13:46:41 +0200] "GET /.env.development HTTP/ ... show less	Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-13 08:23:52 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cluster.teddypot.space \| URI: /.env \| UA: Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇳🇱 ReyhZhao	2026-10-13 01:43:56 (1 week ago)	BunkerWeb alert: A request for a sensitive path (/.env) was detected and served with a 301 redirect, ... show more BunkerWeb alert: A request for a sensitive path (/.env) was detected and served with a 301 redirect, indicating a potential attempt to access environment configuration files. show less	Brute-Force

Showing 1 to 15 of 271 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.26

🇳🇱 185.136.15.80

🇺🇸 166.248.28.191

🇩🇪 138.124.106.103

🇨🇳 111.225.148.182

🇹🇼 111.70.47.22

🇨🇮 102.212.190.11

🇬🇧 86.38.187.242

🇸🇬 85.203.21.213

🇦🇷 45.181.45.238

🇧🇷 45.177.158.123

🇧🇷 45.173.134.62

🇧🇷 45.5.252.250

🇸🇬 43.153.244.144

🇺🇸 20.83.172.77

🇺🇸 217.177.128.229

🇨🇭 209.99.190.200

🇷🇺 194.85.210.81

🇺🇦 188.191.23.45

🇺🇦 178.136.47.232