JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.104.239.166

34.104.239.166 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 83%: ?

83%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	166.239.104.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.104.239.166

Whois 34.104.239.166

IP Abuse Reports for 34.104.239.166:

This IP address has been reported a total of 17 times from 14 distinct sources. 34.104.239.166 was first reported on August 31st 2026, and the most recent report was 29 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 clauss	2026-09-02 06:05:07 (29 minutes ago)	34.104.239.166 - - [02/Sep/2026:09:05:07 +0300] "GET /var/www/.git/config HTTP/1.1" 403 146 "-" "cru ... show more 34.104.239.166 - - [02/Sep/2026:09:05:07 +0300] "GET /var/www/.git/config HTTP/1.1" 403 146 "-" "crusader-worker/1.0" 34.104.239.166 - - [02/Sep/2026:09:05:07 +0300] "GET /public/.git/config HTTP/1.1" 403 146 "-" "crusader-worker/1.0" ... show less	Web App Attack
🇺🇸 Charlesiv	2026-09-02 06:01:55 (32 minutes ago)	Triggered Cloudflare WAF (firewallCustom) from JP. Action taken: BLOCK ASN: 396982 (Google LLC) Prot ... show more Triggered Cloudflare WAF (firewallCustom) from JP. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/1.1 (GET method) Endpoint: /app/.git/config Timestamp: 2026-09-02T04:06:35Z Ray ID: a349a49a4c0bc9ef UA: crusader-worker/1.0 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-02 05:26:38 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.104.239.166 (166.239.104.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.104.239.166 (166.239.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:26:30.905692 2026] [security2:error] [pid 1931:tid 1931] [client 34.104.239.166:42860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.dushaun.com"] [uri "/public/.git/config"] [unique_id "apezhgof5LRmQvNKdnJ8SAAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-09-02 04:32:54 (2 hours ago)	Multiple WAF Violations	Web App Attack
🇳🇱 e.fierstra	2026-09-02 03:31:37 (3 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇮🇹 abuseiphack	2026-09-02 00:53:57 (5 hours ago)	Automatic report for brute force attack	Web App Attack
Anonymous	2026-09-02 00:32:34 (6 hours ago)	IP matched detection query 20 more in short time bad rqs.	Brute-Force Web App Attack Hacking
🇨🇭 4server	2026-09-01 20:56:02 (9 hours ago)	[TueSep0122:55:59.5410892026][security2:error][pid698652:tid698809][client34.104.239.166:0]ModSecuri ... show more [TueSep0122:55:59.5410892026][security2:error][pid698652:tid698809][client34.104.239.166:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"comarcosa.com.81-17-25-250.cpanel.site\"][uri\"/.git/config\"][unique_id\"apc731TNSZq1J8fWrOEe7wAAAAk\"] show less	Hacking Web App Attack
🇲🇾 Rizzy	2026-09-01 19:04:19 (11 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
Anonymous	2026-09-01 17:52:06 (12 hours ago)	apache-auth	Brute-Force Web App Attack
🇫🇷 LRob	2026-09-01 14:51:13 (15 hours ago)	Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: ... show more Malicious web request: probing for secrets, traversal or a known exploit path \| method: GET \| path: /app/.git/config \| 2026-09-01 14:51 UTC show less	Hacking Web App Attack
🇨🇭 Origon	2026-09-01 13:52:17 (16 hours ago)	http-sensitive-files - IP: 34.104.239.166 - time="2026-09-01T15:52:17+02:00" level=info msg="(555f6 ... show more http-sensitive-files - IP: 34.104.239.166 - time="2026-09-01T15:52:17+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.104.239.166 (JP/396982) : 4h ban on Ip 34.104.239.166" module=db show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 13:23:33 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.104.239.166 (166.239.104.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.104.239.166 (166.239.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:23:29.569067 2026] [security2:error] [pid 485:tid 485] [client 34.104.239.166:47644] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "base86com.epetsure.co"] [uri "/src/.git/config"] [unique_id "apbR0US0tMWp6nlUUoLHmQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 09:54:14 (20 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.104.239.166 (166.239.104.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.104.239.166 (166.239.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:54:07.831215 2026] [security2:error] [pid 1112:tid 1112] [client 34.104.239.166:39228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.villagestoner.com"] [uri "/html/.git/config"] [unique_id "apagv2E61Qeryi-tUEk9VgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-01 08:48:49 (21 hours ago)	[server.tmg.gr] httpd-config-scan: sites=www.ird2019.gr; logs=/var/log/httpd/domains/ird2019.gr.log; ... show more [server.tmg.gr] httpd-config-scan: sites=www.ird2019.gr; logs=/var/log/httpd/domains/ird2019.gr.log; samples=/htdocs/.git/config \| /var/www/.git/config \| /.git/config show less	Hacking Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇿 212.47.134.140

🇸🇬 103.187.147.214

🇫🇷 91.231.89.77

🇦🇷 38.51.21.193

🇨🇳 223.95.24.201

🇰🇷 211.223.107.86

🇺🇸 195.184.76.50

🇸🇬 184.168.124.1

🇺🇸 147.185.132.93

🇫🇷 141.101.97.85

🇨🇳 110.179.80.232

🇮🇳 110.173.190.221

🇸🇬 103.187.146.253

🇸🇬 103.187.146.90

🇸🇬 103.187.146.72

🇫🇷 91.231.89.107

🇫🇷 91.231.89.104

🇫🇷 91.196.152.45

🇺🇸 52.167.144.236

🇳🇱 45.148.10.141