JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.139.168.84

34.139.168.84 was found in our database!

This IP was reported 67 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	84.168.139.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	North Charleston, South Carolina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.139.168.84

Whois 34.139.168.84

IP Abuse Reports for 34.139.168.84:

This IP address has been reported a total of 67 times from 47 distinct sources. 34.139.168.84 was first reported on October 10th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 sc user	2026-10-15 20:11:33 (1 day ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇬🇧 sc user	2026-10-13 21:37:31 (2 days ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇬🇧 sc user	2026-10-12 05:52:10 (4 days ago)	Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ... show more Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy. show less	Bad Web Bot Web App Attack Port Scan
🇩🇪 Mein-ChatServer	2026-10-11 11:09:06 (5 days ago)	Probing for .env/.git/wp-login/phpmyadmin (fail2ban nginx)	Web App Attack Bad Web Bot
🇳🇱 hostmach	2026-10-11 09:02:27 (5 days ago)	(cpanel) Failed cPanel login from 34.139.168.84 (US/United States/84.168.139.34.bc.googleusercontent ... show more (cpanel) Failed cPanel login from 34.139.168.84 (US/United States/84.168.139.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-10-11 09:02:16 +0000] info [cphttpd] 34.139.168.84 - - "GET /manifest.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-10-11 09:02:16 +0000] info [cphttpd] 34.139.168.84 - - "GET /z9x8c7v6b5-debug-trigger-cpanel.nx2.tdnx.net HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-10-11 09:02:16 +0000] info [cphttpd] 34.139.168.84 - - "GET /asset-manifest.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-10-11 09:02:16 +0000] info [cphttpd] 34.139.168.84 - - "GET /lp3n1h4cn5ax1tl7m6pf HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username [2026-10-11 09:02:16 +0000] info [cphttpd] 34.139.168.84 - - "GET /assets/manifest.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username show less	Brute-Force SSH
🇧🇪 cmbplf	2026-10-11 07:37:03 (5 days ago)	604 requests with url.path *.env	Brute-Force Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-11 07:31:13 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.139.168.84 (84.168.139.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.139.168.84 (84.168.139.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 03:31:08.596911 2026] [security2:error] [pid 27755:tid 27779] [client 34.139.168.84:56060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.7sons.net"] [uri "/static//.env"] [unique_id "ass7PH1NLonkDpduR2obKAAAABE"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 ciccio diddo	2026-10-11 06:55:12 (5 days ago)	High Burst multiple 40X port:Tcp/80,443	Brute-Force Web App Attack
🇳🇱 Alt255	2026-10-11 06:53:47 (5 days ago)	[mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ... show more [mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.139.168.84 - - [11/Oct/2026:08:53:29 +0200] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 1841 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" ... show less	Bad Web Bot Web App Attack
🇩🇪 webanyone	2026-10-11 06:53:43 (5 days ago)	Wordlist path sweep \| method: GET \| path: /manifest.json, /static/manifest.json, /dist/manifest.json ... show more Wordlist path sweep \| method: GET \| path: /manifest.json, /static/manifest.json, /dist/manifest.json (+3 more) \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 show less	Port Scan Web App Attack
🇺🇸 nasset	2026-10-11 06:52:58 (5 days ago)	34.139.168.84 - - [10/Oct/2026:23:52:57 -0700] "GET /.env?raw HTTP/1.1" 403 584 "-" "Mozilla/5.0 (co ... show more 34.139.168.84 - - [10/Oct/2026:23:52:57 -0700] "GET /.env?raw HTTP/1.1" 403 584 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" TLSv1.3 TLS_AES_256_GCM_SHA384 34.139.168.84 - - [10/Oct/2026:23:52:57 -0700] "GET /.env.local?raw HTTP/1.1" 403 584 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" TLSv1.3 TLS_AES_256_GCM_SHA384 34.139.168.84 - - [10/Oct/2026:23:52:57 -0700] "GET /.env?.svg?.wasm?init HTTP/1.1" 403 584 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" TLSv1.3 TLS_AES_256_GCM_SHA384 34.139.168.84 - - [10/Oct/2026:23:52:57 -0700] "GET /.env.production?raw HTTP/1.1" 403 584 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" TLSv1.3 TLS_AES_256_GCM_SHA384 34.139.168.84 - - [10/Oct/2026:23:52:57 -0700] "GET /.env.production?import&raw HTTP/1.1" 403 584 "-" "Mozilla/5.0 (c ... show less	Bad Web Bot Web App Attack
🇩🇪 EGP Abuse Dept	2026-10-11 04:56:55 (5 days ago)	Scanning for port/service exploits on offshore.bengrimm.net	Port Scan Hacking
🇩🇪 itsolon	2026-10-11 04:40:37 (5 days ago)	[11/Oct/2026:06:40:36 +0200] 17916936368.410454 34.139.168.84 43642 217.154.7.177 443 [11/Oct/2026:0 ... show more [11/Oct/2026:06:40:36 +0200] 17916936368.410454 34.139.168.84 43642 217.154.7.177 443 [11/Oct/2026:06:40:36 +0200] 179169363654.961438 34.139.168.84 43642 217.154.7.177 443 [11/Oct/2026:06:40:36 +0200] 179169363653.510507 34.139.168.84 43642 217.154.7.177 443 [11/Oct/2026:06:40:36 +0200] 179169363687.360169 34.139.168.84 43642 217.154.7.177 443 [11/Oct/2026:06:40:36 +0200] 179169363628.915075 34.139.168.84 43642 217.154.7.177 443 ... show less	Port Scan Hacking Brute-Force Web App Attack
🇬🇧 andypiper	2026-10-11 01:02:32 (5 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 Charlesiv	2026-10-11 00:12:02 (5 days ago)	Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 396982 (Google LLC) Prot ... show more Triggered Cloudflare WAF (firewallCustom) from US. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/2 (GET method) Endpoint: /@fs/app/.env Query: ?import&raw?? Timestamp: 2026-10-10T23:01:51Z Ray ID: a4893fd60dc77d4e UA: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot) show less	Bad Web Bot

Showing 1 to 15 of 67 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 222.116.34.23

🇧🇷 167.249.140.81

🇸🇮 102.220.160.115

🇬🇧 31.14.254.78

🇳🇴 20.251.194.156

🇰🇷 218.51.148.194

🇧🇷 191.251.11.18

🇷🇺 94.77.164.107

🇳🇱 85.203.42.137

🇳🇱 85.203.42.130

🇳🇱 45.148.10.157

🇩🇪 36.255.97.234

🇬🇧 35.203.211.239

🇬🇧 35.203.210.101

🇳🇱 213.177.179.109

🇺🇸 207.90.244.17

🇺🇸 195.184.76.11

🇺🇸 147.185.132.158

🇺🇸 147.185.132.47

🇺🇸 147.185.132.46