JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.12.239.220

34.12.239.220 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 64%: ?

64%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	220.239.12.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.12.239.220

Whois 34.12.239.220

IP Abuse Reports for 34.12.239.220:

This IP address has been reported a total of 52 times from 29 distinct sources. 34.12.239.220 was first reported on May 15th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 genokrad	2026-05-19 00:33:09 (3 weeks ago)	Unauthorized connection attempt on TCP/9200 (Elasticsearch)	Port Scan
🇳🇱 homeshowdomain.nl	2026-05-16 22:08:34 (4 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-15. show less	Web App Attack SSH Hacking
🇩🇪 4server	2026-05-16 17:00:22 (4 weeks ago)	[SatMay1619:00:19.7857932026][security2:error][pid2607516:tid2607649][client34.12.239.220:0]ModSecur ... show more [SatMay1619:00:19.7857932026][security2:error][pid2607516:tid2607649][client34.12.239.220:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"autodiscover.serban.ch\"][uri\"/.env\"][unique_id\"agiio7Zxb-UyooevHdfQzgAAARM\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 pltcldvlpr	2026-05-16 16:54:38 (4 weeks ago)	CMS/framework probe: 34.12.239.220 - - [16/May/2026:18:54:37 +0200] "GET /.env HTTP/2.0" 404 162 "-" ... show more CMS/framework probe: 34.12.239.220 - - [16/May/2026:18:54:37 +0200] "GET /.env HTTP/2.0" 404 162 "-" "Mozilla/5.0 (compatible; Crusader/1.0)" asn=396982 org="Google LLC" country=NL ... show less	Web App Attack
🇳🇱 enpepet	2026-05-16 16:13:51 (4 weeks ago)	GENERAL: parametres: [url:env=] UA:Mozilla/5.0 (compatible; Crusader/1.0) URL:/ca/.env	Port Scan Hacking Brute-Force Bad Web Bot
🇧🇪 voormedia	2026-05-16 15:42:28 (4 weeks ago)	Accessed trap at '/.env'	Web App Attack
🇫🇷 Little Iguana	2026-05-16 13:03:49 (4 weeks ago)	Attempt to hack Wordpress Login, XMLRPC or other login	Hacking
🇺🇸 lavnet.net	2026-05-16 10:05:07 (4 weeks ago)	34.12.239.220 - - [16/May/2026:10:05:05 +0000] "GET /build/static/js/main.js.map HTTP/2.0" 404 214 " ... show more 34.12.239.220 - - [16/May/2026:10:05:05 +0000] "GET /build/static/js/main.js.map HTTP/2.0" 404 214 "-" "Mozilla/5.0 (compatible; Crusader/1.0)" 34.12.239.220 - - [16/May/2026:10:05:05 +0000] "GET /static/js/main.js.map HTTP/2.0" 404 74 "-" "Mozilla/5.0 (compatible; Crusader/1.0)" 34.12.239.220 - - [16/May/2026:10:05:05 +0000] "GET /app.js.map HTTP/2.0" 404 74 "-" "Mozilla/5.0 (compatible; Crusader/1.0)" 34.12.239.220 - - [16/May/2026:10:05:05 +0000] "GET /vendor.js.map HTTP/2.0" 404 74 "-" "Mozilla/5.0 (compatible; Crusader/1.0)" 34.12.239.220 - - [16/May/2026:10:05:05 +0000] "GET /bundle.js.map HTTP/2.0" 404 74 "-" "Mozilla/5.0 (compatible; Crusader/1.0)" 34.12.239.220 - - [16/May/2026:10:05:05 +0000] "GET /main.js.map HTTP/2.0" 404 74 "-" "Mozilla/5.0 (compatible; Crusader/1.0)" ... show less	Brute-Force
🇩🇪 strxmpp	2026-05-16 09:34:45 (4 weeks ago)	34.12.239.220 - - [16/May/2026:11:34:44 +0200] "GET /.env HTTP/1.1" 404 4736 "-" "Mozilla/5.0 (compa ... show more 34.12.239.220 - - [16/May/2026:11:34:44 +0200] "GET /.env HTTP/1.1" 404 4736 "-" "Mozilla/5.0 (compatible; Crusader/1.0)" ... show less	Bad Web Bot
🇬🇧 Axel	2026-05-16 09:32:37 (4 weeks ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env Server: ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env Server: UK-01 show less	Web App Attack Hacking SQL Injection
Anonymous	2026-05-16 09:20:04 (4 weeks ago)	Bot / scanning and/or hacking attempts: GET /build/static/js/main.js.map HTTP/1.1, GET /bundle.js.ma ... show more Bot / scanning and/or hacking attempts: GET /build/static/js/main.js.map HTTP/1.1, GET /bundle.js.map HTTP/1.1, GET /app.js.map HTTP/1.1, GET /.env HTTP/1.1, GET /static/js/main.js.map HTTP/1.1, GET / HTTP/1.1 show less	Hacking Web App Attack
🇫🇷 Baking333	2026-05-16 08:01:46 (4 weeks ago)	[redacted] 34.12.239.220 - - [16/May/2026:09:01:44 +0100] "GET /.env HTTP/1.1" 302 5273 0/170904 "-" ... show more [redacted] 34.12.239.220 - - [16/May/2026:09:01:44 +0100] "GET /.env HTTP/1.1" 302 5273 0/170904 "-" "Mozilla/5.0 (compatible; Crusader/1.0)" [redacted] 34.12.239.220 - - [16/May/2026:09:01:44 +0100] "GET /.env HTTP/1.1" 302 1544 0/142939 "-" "Mozilla/5.0 (compatible; Crusader/1.0)" show less	Bad Web Bot Web App Attack
🇨🇭 4server	2026-05-16 07:56:46 (4 weeks ago)	[SatMay1609:56:43.6935632026][security2:error][pid779770:tid780053][client34.12.239.220:0]ModSecurit ... show more [SatMay1609:56:43.6935632026][security2:error][pid779770:tid780053][client34.12.239.220:0]ModSecurity:Accessdeniedwithcode403$phase1$.Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"autodiscover.inserzioniticino.ch\"][uri\"/.env\"][unique_id\"aggjO9yaIU8mQkPFkTvSuwAAAEY\"] show less	Hacking Web App Attack
🇩🇪 todix	2026-05-16 06:51:28 (4 weeks ago)	Web App Attack Exploid from 34.12.239.220	Web App Attack
🇺🇸 TPI-Abuse	2026-05-16 04:10:12 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.12.239.220 (220.239.12.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.12.239.220 (220.239.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 16 00:10:05.977641 2026] [security2:error] [pid 26765:tid 26765] [client 34.12.239.220:50190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jazzycatty.com"] [uri "/.env"] [unique_id "agfuHVy6v-yo_iyLSNftIwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇳🇱 176.65.139.94

🇩🇪 165.22.82.165

🇺🇸 147.185.132.79

🇺🇸 66.132.224.30

🇮🇹 188.241.66.227

🇸🇬 165.22.254.227

🇺🇸 165.22.180.136

🇨🇳 111.228.10.226

🇩🇪 82.165.109.70

🇸🇿 69.63.77.146

🇩🇪 69.5.169.117

🇬🇧 62.60.130.234

🇱🇹 62.60.130.186

🇱🇹 62.60.130.82

🇳🇱 45.148.10.152

🇨🇦 34.118.184.123

🇺🇸 34.86.192.214

🇨🇳 14.29.214.161

🇨🇳 222.186.68.153