JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.104.130.239

34.104.130.239 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	239.130.104.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.104.130.239

Whois 34.104.130.239

IP Abuse Reports for 34.104.130.239:

This IP address has been reported a total of 20 times from 20 distinct sources. 34.104.130.239 was first reported on October 17th 2026, and the most recent report was 42 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 screwlooseit.com.au	2026-10-17 20:15:03 (42 minutes ago)	Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/239.130.104.34.bc.googleuserconte ... show more Blocked by CSF 13 firewall - Rule: config-dotfile US/United States/239.130.104.34.bc.googleusercontent.com show less	Web App Attack
🇩🇪 Mein-ChatServer	2026-10-17 20:07:05 (50 minutes ago)	34.104.130.239 - - [17/Oct/2026:22:07:04 +0200] "GET /.env.supabase HTTP/1.1" 403 118 "-" "Mozilla/5 ... show more 34.104.130.239 - - [17/Oct/2026:22:07:04 +0200] "GET /.env.supabase HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.104.130.239 - - [17/Oct/2026:22:07:04 +0200] "GET /.env.secret HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 34.104.130.239 - - [17/Oct/2026:22:07:04 +0200] "GET /.env.credentials HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" ... show less	Web App Attack Bad Web Bot
🇳🇱 Alt255	2026-10-17 20:05:41 (51 minutes ago)	[ti-01ov] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 34. ... show more [ti-01ov] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 34.104.130.239 - - \[17/Oct/2026:22:05:31 +0200\] "GET /@fs/root/.env\?raw\?\? HTTP/1.1" 403 616 "-" "Mozilla/5.0 \(compatible\; Bytespider\; [email protected]\) AppleWebKit/537.36" 34.104.130.239 - - \[17/Oct/2026:22:05:31 +0200\] "GET /_nuxt/../.env HTTP/1.1" 403 5903 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; Claude-User/1.0\; [email protected]\)" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-10-17 19:50:27 (1 hour ago)	IP matched detection query Detection of too many failed responses.	Brute-Force Bad Web Bot Hacking
🇩🇪 rh24	2026-10-17 19:50:09 (1 hour ago)	(badbots) Bad bot user-agent [redacted] from 34.104.130.239 (JP/Japan/239.130.104.34.bc.googleuserco ... show more (badbots) Bad bot user-agent [redacted] from 34.104.130.239 (JP/Japan/239.130.104.34.bc.googleusercontent.com) show less	Hacking
🇮🇹 VHosting	2026-10-17 11:05:03 (9 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 interbiznw.com	2026-10-17 10:50:24 (10 hours ago)	malicious-web-requests-vulnerability-scanning	Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 deskpass.com	2026-10-17 10:42:21 (10 hours ago)	POST /icecoder/lib/file-control.php	Web App Attack
🇳🇱 Site.eu	2026-10-17 09:38:14 (11 hours ago)	Excessive multi-domain requests	Brute-Force
🇬🇧 relianoid.com	2026-10-17 08:43:07 (12 hours ago)	404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com	Web App Attack
🇺🇸 ambor	2026-10-17 07:50:06 (13 hours ago)	Honeypot triggered: /secrets.env on ifebridge.com. User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML ... show more Honeypot triggered: /secrets.env on ifebridge.com. User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot). Method: GET show less	Web App Attack
🇫🇷 dynamix	2026-10-17 07:36:51 (13 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-10-17 06:33:05 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.104.130.239 (239.130.104.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.104.130.239 (239.130.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 02:32:57.115947 2026] [security2:error] [pid 20890:tid 20890] [client 34.104.130.239:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.rodelife.com"] [uri "/.env.supabase"] [unique_id "atMWmV1sDVs2InVeju3WDwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-10-17 05:29:20 (15 hours ago)	Aggressive web scan	Web App Attack
Anonymous	2026-10-17 05:11:13 (15 hours ago)	34.104.130.239 - - [17/Oct/2026:00:11:11 -0500] "GET /.env.supabase HTTP/1.1" 403 199 "-" "Mozilla/5 ... show more 34.104.130.239 - - [17/Oct/2026:00:11:11 -0500] "GET /.env.supabase HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" 34.104.130.239 34.104.130.239 - - [17/Oct/2026:00:11:12 -0500] "GET /.env.credentials HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" 34.104.130.239 34.104.130.239 - - [17/Oct/2026:00:11:12 -0500] "GET /.env.secret HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" 34.104.130.239 34.104.130.239 - - [17/Oct/2026:00:11:12 -0500] "GET /.env.keys HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" 34.104.130.239 34.104.130.239 - - [17/Oct/2026:00:11:12 -0500] "GET /.env.dev.local HTTP/ ... show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 176.112.110.191

🇨🇦 172.69.130.113

🇵🇰 154.208.48.171

🇺🇸 142.93.179.172

🇨🇳 124.88.113.158

🇺🇦 37.221.131.235

🇺🇸 16.216.88.0

🇺🇸 172.90.1.117

🇩🇪 172.69.150.101

🇩🇪 172.69.150.100

🇰🇿 109.201.58.27

🇮🇳 103.170.215.118

🇺🇸 52.234.6.48

🇬🇧 35.203.211.191

🇨🇱 190.114.35.227

🇩🇪 172.71.148.87

🇩🇪 172.71.148.86

🇺🇸 147.185.132.149

🇨🇳 116.230.222.67

🇨🇳 110.249.201.168