JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.138.68.139

Neutral Activity

Abuse Confidence Score

0% Low Risk

23 reports

16 reporters · latest 2 months ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 139.68.138.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇺🇸 United States of America
City: North Charleston, South Carolina

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

34.138.68.139 has been reported 23 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

23 from 16 distinct reporters

First reported

August 28th 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-08-29 22:00:15 UTC · (2 months ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-28.	Web App Attack SSH Hacking
🇺🇸 mnsf	2026-08-29 00:09:03 UTC · (2 months ago)	Abuse Detected (14)	Brute-Force Web App Attack
🇩🇪 FeG Deutschland	2026-08-28 17:09:27 UTC · (2 months ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 17:06:10 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.138.68.139 (139.68.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:06:02.326108 2026] [security2:error] [pid 22976:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.138.68.139 (139.68.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:06:02.326108 2026] [security2:error] [pid 22976:tid 22976] [client 34.138.68.139:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.luisguacache.com"] [uri "/.env.old"] [unique_id "apG_-rOol_MMZT7CWfbmPAAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 16:45:55 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.138.68.139 (139.68.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 12:45:48.976927 2026] [security2:error] [pid 21371:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.138.68.139 (139.68.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 12:45:48.976927 2026] [security2:error] [pid 21371:tid 21371] [client 34.138.68.139:46616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "al-hafeeztrust.net"] [uri "/.env.dev"] [unique_id "apG7PLk75b1uZREAWnzOIAAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 tpjg	2026-08-28 16:26:30 UTC · (2 months ago)	Automated: 15 requests with error status in 120s window from 34.138.68.139. Evidence: /_ignition/health-check:404,/wp-config.php~:404,/.env.backup:404,/env:404,/wp-config.php.swp:404,/.env.save:404,/.env.dev:404,/.env.local:404,/.env.bak:404,/actuato ... show more Automated: 15 requests with error status in 120s window from 34.138.68.139. Evidence: /_ignition/health-check:404,/wp-config.php~:404,/.env.backup:404,/env:404,/wp-config.php.swp:404,/.env.save:404,/.env.dev:404,/.env.local:404,/.env.bak:404,/actuator/env:404,/.env.old:404,/.env.example:404,/wp-config.php.bak:404,/.env:404,/.env.prod:404 show less	Web App Attack
Anonymous	2026-08-28 16:22:06 UTC · (2 months ago)	[ns65.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.env.prod \| /.env.backup \| /.env.example	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 15:57:31 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.138.68.139 (139.68.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 11:57:25.144289 2026] [security2:error] [pid 6566:tid 6 ... show more (mod_security) mod_security (id:210492) triggered by 34.138.68.139 (139.68.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 11:57:25.144289 2026] [security2:error] [pid 6566:tid 6566] [client 34.138.68.139:59012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.thebestac.com"] [uri "/.env"] [unique_id "apGv5dcqAQgJ58CyBoEB4AAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 14:46:17 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.138.68.139 (139.68.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 10:46:11.030819 2026] [security2:error] [pid 16395:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.138.68.139 (139.68.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 10:46:11.030819 2026] [security2:error] [pid 16395:tid 16395] [client 34.138.68.139:38276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "st-maarten-fishing.com"] [uri "/.env.save"] [unique_id "apGfM2ijtLWoiRPz0awd-QAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-08-28 14:04:39 UTC · (2 months ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-08-28 14:02:03 UTC · (2 months ago)	Bot / scanning and/or hacking attempts: GET /.env.old HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env HTTP/1.1, GET /env HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.example HTTP/1.1, ... show more Bot / scanning and/or hacking attempts: GET /.env.old HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env HTTP/1.1, GET /env HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.example HTTP/1.1, GET /_ignition/health-check HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.backup HTTP/1.1, GET /crusader-404-probe HTTP/1.1, GET /.env.local HTTP/1.1, GET /actuator/env HTTP/1.1, GET /wp-config.php.bak HTTP/1.1, GET /wp-config.php.swp HTTP/1.1, GET /.env.production HTTP/1.1, GET /actuator/configprops HTTP/1.1, GET /.env.bak HTTP/1.1 show less	Hacking Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-08-28 14:00:57 UTC · (2 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-28 13:34:07 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.138.68.139 (139.68.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 09:33:59.780916 2026] [security2:error] [pid 23391:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.138.68.139 (139.68.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 09:33:59.780916 2026] [security2:error] [pid 23391:tid 23391] [client 34.138.68.139:49630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jesusthechristministry.org.halotoys.com"] [uri "/wp-config.php.bak"] [unique_id "apGOR98bFY8wWfawK2n9-AAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 pixelboost.kr	2026-08-28 13:25:03 UTC · (2 months ago)	34.138.68.139 - - [28/Aug/2026:22:25:02 +0900] "GET /.env.production HTTP/1.1" 444 0 "-" "crusader-worker/1.0" ...	Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-08-28 12:53:57 UTC · (2 months ago)	cloudlinux2 fail2ban: 2026-08-28 14:49:00,359 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 103.248.121.201 - 2026-08-28 14:49:00cloudlinux2 fail2ban: 2026-08-28 14:49:28,049 fail2ban.actions [1478]: NOTICE [plesk-modsecur ... show more cloudlinux2 fail2ban: 2026-08-28 14:49:00,359 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 103.248.121.201 - 2026-08-28 14:49:00cloudlinux2 fail2ban: 2026-08-28 14:49:28,049 fail2ban.actions [1478]: NOTICE [plesk-modsecurity] Unban 34.122.117.202cloudlinux2 fail2ban: 2026-08-28 14:49:33,125 fail2ban.filter [1478]: INFO [plesk-wordpress] Found 136.144.43.17 - 2026-08-28 14:49:32cloudlinux2 fail2ban: 2026-08-28 14:49:29,356 fail2ban.filter [1478]: INFO [plesk-wordpress] Found 136.144.43.16 - 2026-08-28 14:49:28cloudlinux2 fail2ban: 2026-08-28 14:49:29,199 fail2ban.filter [1478]: INFO [plesk-wordpress] Found 136.144.43.17 - 2026-08-28 14:49:28cloudlinux2 fail2ban: 2026-08-28 14:49:29,417 fail2ban.filter [1478]: INFO [plesk-wordpress] Found 136.144.43.34 - 2026-08-28 14:49:28cloudlinux2 fail2ban: 2026-08-28 14:50:05,305 fail2ban.actions [1478]: NOTICE [plesk-modsecurity] Ban 103.248.121.201cloudlinux2 fail2ban: 2026-08-28 14:50:05,31 show less	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 204.76.203.214

🇦🇷 181.26.123.176

🇺🇸 64.23.130.129

🇸🇬 34.126.97.247

🇬🇧 5.102.169.101

🇺🇸 216.25.90.117

🇹🇭 203.170.192.251

🇺🇸 185.94.32.141

🇮🇶 169.224.21.156

🇺🇸 157.245.232.101

🇪🇸 88.148.93.130

🇺🇸 66.132.195.69

🇳🇱 45.148.10.157

🇳🇱 45.148.10.141

🇳🇱 35.214.210.177

🇧🇪 34.76.174.27

🇿🇦 20.87.198.19

🇷🇴 2.57.121.112

🇺🇸 162.216.149.38

🇨🇳 121.46.244.20