JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.139.238.53

34.139.238.53 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	53.238.139.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	North Charleston, South Carolina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.139.238.53

Whois 34.139.238.53

IP Abuse Reports for 34.139.238.53:

This IP address has been reported a total of 26 times from 18 distinct sources. 34.139.238.53 was first reported on August 1st 2026, and the most recent report was 8 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 lns.bz	2026-08-01 21:00:08 (8 hours ago)	.env scanning [DOPP]	Web App Attack
🇳🇱 lns.bz	2026-08-01 17:14:50 (11 hours ago)	Too many 404 requests [DOPP]	Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 17:12:52 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.139.238.53 (53.238.139.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.139.238.53 (53.238.139.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 13:12:44.649177 2026] [security2:error] [pid 267010:tid 267010] [client 34.139.238.53:43004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.staging.gracebaptisthartsville.com"] [uri "/.env"] [unique_id "am4pDBxLBwdfA0rbT7rsJAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 paissangroup	2026-08-01 17:02:13 (12 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 16:51:56 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.139.238.53 (53.238.139.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.139.238.53 (53.238.139.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:51:49.369721 2026] [security2:error] [pid 17488:tid 17488] [client 34.139.238.53:40234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.nightowlprinting.com"] [uri "/.env.save"] [unique_id "am4kJTCPtl3ivYE91d5gtQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 16:22:29 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.139.238.53 (53.238.139.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.139.238.53 (53.238.139.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 12:22:21.111601 2026] [security2:error] [pid 2298532:tid 2298554] [client 34.139.238.53:50240] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theaquifer.org"] [uri "/.env.production"] [unique_id "am4dPUFRTfSvsx8WqZAumgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-08-01 16:05:28 (13 hours ago)	Scanning/Probing (20)	Brute-Force Web App Attack
🇲🇾 Rizzy	2026-08-01 15:35:12 (13 hours ago)	Multiple WAF Violations	Brute-Force Web App Attack
🇫🇷 masterguru	2026-08-01 15:00:14 (14 hours ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-195)	Hacking Web App Attack
🇮🇹 CoreTech srl	2026-08-01 14:33:56 (14 hours ago)	cloudlinux2 fail2ban: 2026-08-01 16:28:52,608 fail2ban.filter [1838]: INFO [plesk-wordpre ... show more cloudlinux2 fail2ban: 2026-08-01 16:28:52,608 fail2ban.filter [1838]: INFO [plesk-wordpress] Found 173.239.214.194 - 2026-08-01 16:28:52cloudlinux2 fail2ban: 2026-08-01 16:28:49,780 fail2ban.filter [1838]: INFO [plesk-wordpress] Found 173.239.214.194 - 2026-08-01 16:28:49cloudlinux2 fail2ban: 2026-08-01 16:28:53,045 fail2ban.filter [1838]: INFO [recidive] Found 173.239.214.194 - 2026-08-01 16:28:52cloudlinux2 fail2ban: 2026-08-01 16:28:44,361 fail2ban.filter [1838]: INFO [plesk-wordpress] Found 173.239.214.194 - 2026-08-01 16:28:43cloudlinux2 fail2ban: 2026-08-01 16:28:52,941 fail2ban.actions [1838]: NOTICE [plesk-wordpress] Ban 173.239.214.194cloudlinux2 fail2ban: 2026-08-01 16:29:24,187 fail2ban.actions [1838]: NOTICE [plesk-wordpress] Unban 173.239.214.232cloudlinux2 fail2ban: 2026-08-01 16:29:24,371 fail2ban.filter [1838]: INFO [plesk-modsecurity] Found 34.139.238.53 - 2026-08-01 16:29:24cloudlinux2 fail2ban: 2026-08-01 16:29:24,434 fa show less	Web App Attack
🇺🇸 its101	2026-08-01 14:30:06 (14 hours ago)	Automated detection by LockdownAccess security system. Attack type(s): env_grab. Reason: Nginx: env_ ... show more Automated detection by LockdownAccess security system. Attack type(s): env_grab. Reason: Nginx: env_grab attack. Path targeted: unknown. Blocked in Cloudflare. show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 14:01:50 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.139.238.53 (53.238.139.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.139.238.53 (53.238.139.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 10:01:42.135922 2026] [security2:error] [pid 824656:tid 824656] [client 34.139.238.53:33356] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.mthoodautoandtire.com"] [uri "/.env.old"] [unique_id "am38RnUZPTRsg7MrZaBoRwAAADg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 13:36:17 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.139.238.53 (53.238.139.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.139.238.53 (53.238.139.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 09:36:09.679616 2026] [security2:error] [pid 340837:tid 340837] [client 34.139.238.53:41408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "7319atwood.com"] [uri "/.env.old"] [unique_id "am32STuE5Z4av00cP_A5LAAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-01 13:14:57 (15 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.139.238.53 (53.238.139.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.139.238.53 (53.238.139.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 01 09:14:52.850837 2026] [security2:error] [pid 2260802:tid 2260802] [client 34.139.238.53:45784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "colbygrenier.com"] [uri "/.env.production"] [unique_id "am3xTGGf9QIbqTGmaCJGagAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-08-01 12:50:05 (16 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2604:a880:400:d1:0:4:c5f9:e001

🇧🇪 207.175.65.66

🇷🇺 155.212.164.246

🇲🇰 146.255.75.13

🇺🇦 141.101.26.59

🇸🇬 136.85.57.170

🇹🇷 94.154.43.185

🇪🇸 85.152.105.112

🇮🇹 72.146.20.230

🇺🇸 65.49.1.106

🇫🇷 62.210.220.46

🇨🇳 42.194.226.229

🇵🇱 23.230.91.173

🇳🇱 213.176.26.23

🇷🇴 193.32.162.103

🇲🇽 189.239.147.166

🇺🇸 164.92.109.155

🇷🇴 162.158.19.121

🇷🇴 162.158.19.37

🇫🇷 91.231.89.53