JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.138.241.239

34.138.241.239 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	239.241.138.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	North Charleston, South Carolina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.138.241.239

Whois 34.138.241.239

IP Abuse Reports for 34.138.241.239:

This IP address has been reported a total of 28 times from 18 distinct sources. 34.138.241.239 was first reported on September 3rd 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇷🇴 iulianh	2026-09-04 00:05:50 (1 minute ago)	80,443	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-09-03 23:35:25 (31 minutes ago)	(mod_security) mod_security (id:210492) triggered by 34.138.241.239 (239.241.138.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.138.241.239 (239.241.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 19:35:21.632075 2026] [security2:error] [pid 13073:tid 13097] [client 34.138.241.239:52174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.aafmglobal.com"] [uri "/@fs/root/.env"] [unique_id "apoEObZurtoo54Tq2ASRWQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 maxxsense	2026-09-03 23:21:23 (45 minutes ago)	(mod_security) mod_security triggered on hostname [redacted] 34.138.241.239 (US/United States/239.24 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.138.241.239 (US/United States/239.241.138.34.bc.googleusercontent.com) show less	SQL Injection
🇺🇸 WellSpring	2026-09-03 23:18:32 (48 minutes ago)	env leak on 423.today/@fs/home/ubuntu/.env — WellSpr.ing/NetSentinel civic-AI security layer	Web App Attack
🇳🇱 SysAdmin Dylan	2026-09-03 23:04:31 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.138.241.239 (US/United States/239.241.138.34 ... show more (mod_security) mod_security (id:210492) triggered by 34.138.241.239 (US/United States/239.241.138.34.bc.googleusercontent.com): 10 in the last 3600 secs show less	Brute-Force
🇩🇪 Tamsy	2026-09-03 22:14:13 (1 hour ago)	HTTPD - 4xx scan	Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 22:07:11 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.138.241.239 (239.241.138.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.138.241.239 (239.241.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 18:07:03.125741 2026] [security2:error] [pid 22736:tid 22736] [client 34.138.241.239:24038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.radixtx.com"] [uri "/@fs/.env"] [unique_id "apnvh_SdPscMhSY8Yq0pawAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 21:28:45 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.138.241.239 (239.241.138.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.138.241.239 (239.241.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 17:28:38.122447 2026] [security2:error] [pid 18670:tid 18670] [client 34.138.241.239:25274] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blue-attitude.net"] [uri "/@fs/app/.env"] [unique_id "apnmhlQa5wMsLHBP7bnzUgAAAEE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 21:01:44 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.138.241.239 (239.241.138.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.138.241.239 (239.241.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 17:01:39.469746 2026] [security2:error] [pid 9145:tid 9145] [client 34.138.241.239:9438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.palmatrader.com"] [uri "/@fs/src/.env"] [unique_id "apngMwCkXqG69e-SqOII2QAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 20:14:12 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.138.241.239 (239.241.138.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.138.241.239 (239.241.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 16:14:07.104396 2026] [security2:error] [pid 9103:tid 9103] [client 34.138.241.239:53004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.iworklife.org"] [uri "/@fs/.env"] [unique_id "apnVD4HGKXsF0rxCpfBXAwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-09-03 20:05:17 (4 hours ago)	Scanning/Probing (26)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 19:46:18 (4 hours ago)	(mod_security) mod_security (id:949110) triggered by 34.138.241.239 (239.241.138.34.bc.googleusercon ... show more (mod_security) mod_security (id:949110) triggered by 34.138.241.239 (239.241.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 15:46:14.799977 2026] [security2:error] [pid 4707:tid 4707] [client 34.138.241.239:37692] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "autodiscover.letahaabooking.com"] [uri "/@fs/.env"] [unique_id "apnOhl1tm2zMOMusnzlKMwAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 19:21:14 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.138.241.239 (239.241.138.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.138.241.239 (239.241.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 15:21:11.093441 2026] [security2:error] [pid 1600440:tid 1600466] [client 34.138.241.239:37166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.strengthlink.com"] [uri "/@fs/src/.env"] [unique_id "apnIp6CyJIsNKL9klsE9zwAAAM4"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 19:04:47 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.138.241.239 (239.241.138.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.138.241.239 (239.241.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 15:04:40.997014 2026] [security2:error] [pid 15101:tid 15101] [client 34.138.241.239:8034] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.maverickhousellc.com"] [uri "/@fs/.env"] [unique_id "apnEyGnGEK-nn_eD3pT4cwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-09-03 18:44:22 (5 hours ago)	20 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 172.71.82.58

172.18.130.72

🇺🇸 162.216.149.91

🇺🇸 146.190.41.214

🇳🇱 93.123.109.6

🇺🇸 47.47.181.146

🇨🇦 34.95.28.12

🇺🇸 20.115.99.68

🇺🇸 12.182.125.210

🇺🇸 2a03:2880:f802::

🇨🇦 207.102.243.78

192.168.75.227

🇨🇳 175.167.160.194

🇺🇸 165.154.206.157

🇺🇸 162.216.149.87

🇺🇸 159.223.173.125

🇮🇳 128.185.194.162

🇮🇳 117.195.68.51

100.93.195.142

100.79.213.162