JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.151.198.239

34.151.198.239 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	239.198.151.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.151.198.239

Whois 34.151.198.239

IP Abuse Reports for 34.151.198.239:

This IP address has been reported a total of 48 times from 38 distinct sources. 34.151.198.239 was first reported on September 10th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 wHosts	2026-09-15 03:15:36 (2 days ago)	Blocked by Fail2Ban	Web App Attack
🇫🇷 Lacrimosa99	2026-09-15 02:44:26 (2 days ago)	34.151.198.239 - - [15/Sep/2026:04:44:25 +0200] "GET / HTTP/1.1" 403 6360 "-" "Mozilla/5.0 (Windows ... show more 34.151.198.239 - - [15/Sep/2026:04:44:25 +0200] "GET / HTTP/1.1" 403 6360 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.151.198.239 - - [15/Sep/2026:04:44:25 +0200] "POST / HTTP/1.1" 404 418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.151.198.239 - - [15/Sep/2026:04:44:25 +0200] "POST / HTTP/1.1" 404 418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web Spam
🇷🇴 clauss	2026-09-14 19:05:26 (2 days ago)	34.151.198.239 - - [14/Sep/2026:22:05:25 +0300] "GET /.git/config HTTP/1.1" 400 63 "-" "Mozilla/5.0 ... show more 34.151.198.239 - - [14/Sep/2026:22:05:25 +0300] "GET /.git/config HTTP/1.1" 400 63 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.151.198.239 - - [14/Sep/2026:22:05:25 +0300] "GET /.env.local HTTP/1.1" 400 63 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇩🇪 seal	2026-09-14 18:25:26 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	SSH Brute-Force
🇺🇸 TPI-Abuse	2026-09-14 17:39:27 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.151.198.239 (239.198.151.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.151.198.239 (239.198.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 13:39:22.582379 2026] [security2:error] [pid 27711:tid 27711] [client 34.151.198.239:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.livingawakenedbook.com"] [uri "/.git/config"] [unique_id "aqgxSrBMgosNBu2Bo_zI3AAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-09-14 17:02:50 (2 days ago)	[Mon Sep 14 11:02:45.538977 2026] [authz_core:error] [pid 417804:tid 139766272087616] [client 34.151 ... show more [Mon Sep 14 11:02:45.538977 2026] [authz_core:error] [pid 417804:tid 139766272087616] [client 34.151.198.239:55816] AH01630: client denied by server configuration: /var/www/horde/.env.bak [Mon Sep 14 11:02:50.634207 2026] [authz_core:error] [pid 417804:tid 139763998778944] [client 34.151.198.239:55816] AH01630: client denied by server configuration: /var/www/horde/.env.dist [Mon Sep 14 11:02:50.770830 2026] [authz_core:error] [pid 417804:tid 139763990386240] [client 34.151.198.239:55816] AH01630: client denied by server configuration: /var/www/horde/.env.swp ... show less	Bad Web Bot
🇦🇺 rubixstudios	2026-09-14 16:01:02 (2 days ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack
🇫🇷 Catalin Negru	2026-09-14 15:01:56 (2 days ago)	Recidive ban by fail2ban on server.blackbit.ro	Brute-Force
🇫🇷 phoenix1jl96	2026-09-14 14:32:12 (2 days ago)	2026/09/14 16:32:11 [error] 4744#4744: 156524 open() "/home/user-data/www/default/mailer/.env" fail ... show more 2026/09/14 16:32:11 [error] 4744#4744: 156524 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.151.198.239, server: autodiscover.lhbiogaz.com, request: "GET /mailer/.env HTTP/1.1", host: "autodiscover.lhbiogaz.com" 2026/09/14 16:32:11 [error] 4744#4744: *156524 open() "/usr/local/lib/roundcubemail/.env" failed (2: No such file or directory), client: 34.151.198.239, server: autodiscover.lhbiogaz.com, request: "GET /mail/.env HTTP/1.1", host: "autodiscover.lhbiogaz.com" ... show less	DNS Compromise DNS Poisoning DDoS Attack Ping of Death Web Spam Email Spam Blog Spam Port Scan Hacking Brute-Force Bad Web Bot SSH Web App Attack
🇦🇹 René Hickersberger	2026-09-13 19:02:22 (3 days ago)	malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; ... show more malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Web App Attack
🇦🇺 Proxay Fox	2026-09-13 17:36:58 (3 days ago)	34.151.198.239 - - [14/Sep/2026:03:36:53 +1000] "GET /.git/config HTTP/1.1" 404 832 "-" "Mozilla/5.0 ... show more 34.151.198.239 - - [14/Sep/2026:03:36:53 +1000] "GET /.git/config HTTP/1.1" 404 832 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 718 1883 TLSv1.3/TLS_AES_256_GCM_SHA384 . 64320a38449527b20b507e8d71fd7fef99393624fe2bd8cbd63830bc07725c85 34.151.198.239 - - [14/Sep/2026:03:36:54 +1000] "GET /.env HTTP/1.1" 404 832 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 711 1883 TLSv1.3/TLS_AES_256_GCM_SHA384 . 64320a38449527b20b507e8d71fd7fef99393624fe2bd8cbd63830bc07725c85 34.151.198.239 - - [14/Sep/2026:03:36:54 +1000] "GET /.env.local HTTP/1.1" 404 832 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" 717 1883 TLSv1.3/TLS_AES_256_GCM_SHA384 . 64320a38449527b20b507e8d71fd7fef99393624fe2bd8cbd63830bc07725c85 34.151.198.239 - - [14/Sep/2026:03:36:55 +1000] "GET /.env.product ... show less	Brute-Force Web App Attack
🇬🇧 Apache	2026-09-13 16:13:40 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.151.198.239 (BR/Brazil/239.198.151.34.bc.goo ... show more (mod_security) mod_security (id:210492) triggered by 34.151.198.239 (BR/Brazil/239.198.151.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
Anonymous	2026-09-13 13:09:29 (3 days ago)	Aggressive web scan	Web App Attack
🇮🇳 evicky2002	2026-09-13 06:00:01 (3 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇬🇧 consul.to	2026-09-12 12:45:09 (4 days ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 2a13:f43:6d8a:a06e:3f17:a72a:a800:2fe4

🇧🇪 207.175.112.214

🇫🇮 147.185.133.81

🇩🇪 118.193.59.10

🇩🇪 43.228.157.62

🇫🇷 2a13:f45:3f35:77bd:c3a3:d727:bf7a:dbf7

🇫🇷 2a13:f43:200:3d6d:95e7:9d4f:ad24:6f07

🇺🇸 2a10:7b04:4e6d:247c:dd6d:6aed:d0d2:744a

🇧🇷 179.191.223.22

🇰🇷 119.200.229.33

🇨🇦 85.217.149.74

🇺🇸 66.132.186.251

🇮🇳 49.14.120.28

🇨🇦 34.124.116.44

🇺🇸 2a10:7b05:b9c4:80b5:57de:156e:a538:4fe5

🇺🇸 2a10:4a00:7b74:fbb5:8022:4567:65ad:66a2

🇩🇪 186.247.176.19

🇷🇺 185.94.111.1

🇧🇩 161.248.57.58

🇺🇸 152.32.183.236