JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.116.223.139

34.116.223.139 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 65%: ?

65%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	139.223.116.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.116.223.139

Whois 34.116.223.139

IP Abuse Reports for 34.116.223.139:

This IP address has been reported a total of 16 times from 11 distinct sources. 34.116.223.139 was first reported on September 15th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 01:11:32 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.116.223.139 (139.223.116.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.116.223.139 (139.223.116.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 21:11:24.633867 2026] [security2:error] [pid 3139:tid 3139] [client 34.116.223.139:44510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hacemostuvideoia.com.verdadesreales.com"] [uri "/.git/config"] [unique_id "aqnsvEMpJJl9qZoa2_-WOgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 22:54:06 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.116.223.139 (139.223.116.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.116.223.139 (139.223.116.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 18:54:02.119991 2026] [security2:error] [pid 14460:tid 14460] [client 34.116.223.139:50216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "debzy.com"] [uri "/.git/config"] [unique_id "aqnMikvKCMdjiKfQ59DUpwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-15 20:45:02 (2 days ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-09-15 20:26:52 (2 days ago)	Try to access /.git/config	Web App Attack
Anonymous	2026-09-15 20:25:01 (2 days ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 20:24:34 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.116.223.139 (139.223.116.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.116.223.139 (139.223.116.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:24:29.097743 2026] [security2:error] [pid 22855:tid 22855] [client 34.116.223.139:33524] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deborbonfoundation.org"] [uri "/.git/config"] [unique_id "aqmpfVJUR-nh-X976EzB5QAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 18:40:07 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.116.223.139 (139.223.116.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.116.223.139 (139.223.116.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 14:40:00.517590 2026] [security2:error] [pid 2484:tid 2484] [client 34.116.223.139:39688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "debhill.alhill.com"] [uri "/.git/config"] [unique_id "aqmRAOPidewW0ZP5yAXrRgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-09-15 18:25:10 (2 days ago)		Web App Attack
Anonymous	2026-09-15 18:15:02 (2 days ago)	Bot / scanning and/or hacking attempts: GET /.env.test HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.en ... show more Bot / scanning and/or hacking attempts: GET /.env.test HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.env.development HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.backup HTTP/1.1, POST / HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.sample HTTP/1.1, GET /.env.staging HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 18:12:44 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.116.223.139 (139.223.116.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.116.223.139 (139.223.116.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 14:12:38.143452 2026] [security2:error] [pid 7586:tid 7650] [client 34.116.223.139:45652] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "debeneesse.com"] [uri "/.git/config"] [unique_id "aqmKln3sfWBT6yGvxtOIxwAAAMM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 middelkoopcc	2026-09-15 18:03:02 (2 days ago)	2026-09-15 20:01:43 AH01071: Got error 'Primary script unknown' && 2026-09-15 20:01:43 AH01071: Got ... show more 2026-09-15 20:01:43 AH01071: Got error 'Primary script unknown' && 2026-09-15 20:01:43 AH01071: Got error 'Primary script unknown' && 2026-09-15 20:01:43 AH01071: Got error 'Primary script unknown' && 292 more within 20 minutes show less	Web App Attack
🇳🇱 Alt255	2026-09-15 18:01:34 (2 days ago)	[ti-30al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-30al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.116.223.139 - - [15/Sep/2026:20:01:33 +0200] "GET /.git/config HTTP/1.1" 404 25341 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.116.223.139 - - [15/Sep/2026:20:01:33 +0200] "GET /.git/config HTTP/1.1" 404 25341 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 17:46:37 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.116.223.139 (139.223.116.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.116.223.139 (139.223.116.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:46:31.731201 2026] [security2:error] [pid 14693:tid 14693] [client 34.116.223.139:43270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ferzliaudit.org.easternimport.com"] [uri "/.git/config"] [unique_id "aqmEd-gidN709e6luTI68QAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-09-15 12:38:27 (2 days ago)	Web attack/malicious scanning detected	Web App Attack
🇿🇦 conure.sh	2026-09-15 11:12:28 (2 days ago)	csagent: score 20.4: secrets grab x2, 404 noise floor x2; 1 domain(s) in 5s	Web App Attack

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 130.12.182.194

🇺🇸 108.54.147.26

🇨🇦 85.217.149.59

🇷🇺 81.28.191.235

🇩🇪 69.5.169.34

🇩🇪 69.5.169.25

🇺🇸 66.132.172.206

🇺🇸 45.3.49.160

🇨🇳 42.179.10.69

🇺🇸 34.134.119.38

🇳🇱 213.177.179.166

🇮🇩 202.152.201.166

🇬🇧 193.163.125.121

🇺🇦 185.38.218.160

🇺🇸 162.216.149.41

🇨🇦 147.182.150.51

🇰🇷 116.125.120.27

🇸🇮 102.220.161.102

🇸🇬 85.203.21.156

🇳🇱 77.239.124.121