JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.165.240.139

34.165.240.139 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	139.240.165.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇮🇱 Israel
City	Tel Aviv, Tel Aviv

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.165.240.139

Whois 34.165.240.139

IP Abuse Reports for 34.165.240.139:

This IP address has been reported a total of 40 times from 33 distinct sources. 34.165.240.139 was first reported on September 15th 2026, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 srtzero	2026-09-19 08:56:20 (11 hours ago)	34.165.240.139 - - [19/Sep/2026:10:56:19 +0200] "GET /.git/config HTTP/1.1" 404 1382 "-" "Mozilla/5. ... show more 34.165.240.139 - - [19/Sep/2026:10:56:19 +0200] "GET /.git/config HTTP/1.1" 404 1382 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.165.240.139 - - [19/Sep/2026:10:56:20 +0200] "GET /.env.local HTTP/1.1" 404 1382 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.165.240.139 - - [19/Sep/2026:10:56:20 +0200] "GET /.env.production HTTP/1.1" 404 1382 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Port Scan Bad Web Bot Web App Attack
🇧🇷 dominioz	2026-09-19 05:52:57 (14 hours ago)	2026-09-19 05:51:53 GET /.env - - 34.165.240.139 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKi ... show more 2026-09-19 05:51:53 GET /.env - - 34.165.240.139 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245 2026-09-19 05:51:54 GET /.env.local - - 34.165.240.139 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245 2026-09-19 05:51:54 GET /.env.local - - 34.165.240.139 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245 2026-09-19 05:51:56 GET /.env.production - - 34.165.240.139 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245 ... show less	Web App Attack
🇧🇷 dominioz	2026-09-19 04:42:57 (15 hours ago)	2026-09-19 04:41:51 GET /.env - - 34.165.240.139 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKi ... show more 2026-09-19 04:41:51 GET /.env - - 34.165.240.139 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245 2026-09-19 04:41:53 GET /.env.local - - 34.165.240.139 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245 2026-09-19 04:41:54 GET /.env.production - - 34.165.240.139 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245 2026-09-19 04:41:55 GET /.env.staging - - 34.165.240.139 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245 2026-09-19 04:41:57 GET /.env.development - - 34.165.240.139 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245 ... show less	Web App Attack
🇳🇱 debestelapp	2026-09-19 03:30:12 (16 hours ago)		Web App Attack
🇺🇸 abuse-opdc	2026-09-18 20:45:44 (23 hours ago)	Malicious HTTP requests matching injection/exploit signatures.	Web App Attack Brute-Force
Anonymous	2026-09-18 19:50:01 (1 day ago)	suspicious request in access.log	Web App Attack
Anonymous	2026-09-18 16:56:03 (1 day ago)	Bot / scanning and/or hacking attempts: GET /mysql/.env HTTP/1.1, GET /postmark/.env HTTP/1.1, GET / ... show more Bot / scanning and/or hacking attempts: GET /mysql/.env HTTP/1.1, GET /postmark/.env HTTP/1.1, GET /kafka/.env HTTP/1.1, GET /rabbitmq/.env HTTP/1.1, GET /ansible/.env HTTP/1.1, GET /mongodb/.env HTTP/1.1, GET /redis/.env HTTP/1.1, GET /actions/.env HTTP/1.1, GET /aws/.env HTTP/1.1, GET /cd/.env HTTP/1.1, GET /.git/.env HTTP/1.1, GET /brevo/.env HTTP/1.1, GET /buildkite/.env HTTP/1.1, GET /sitemaps/.env HTTP/1.1, GET /gitlab/.env HTTP/1.1, GET /elasticsearch/.env HTTP/1.1, GET /kubernetes/.env HTTP/1.1, GET /worker/.env HTTP/1.1, GET /queue/.env HTTP/1.1, GET /postgres/.env HTTP/1.1, GET /qa/.env HTTP/1.1, GET /info.php HTTP/1.1, GET /test.php HTTP/1.1, GET /beta/.env HTTP/1.1, GET /pinfo.php HTTP/1.1, GET /production/.env HTTP/1.1, GET /uat/.env HTTP/1.1, GET /phpinfo.php HTTP/1.1, GET /job/.env HTTP/1.1, GET /config/app/.env HTTP/1.1, GET /php.php HTTP/1.1, GET /pi.php HTTP/1.1, GET /stage/.env HTTP/1.1, GET /preview/.env HTTP/1.1, GET /i.php HTTP/1.1, GET /development/.env HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 15:44:41 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.165.240.139 (139.240.165.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.165.240.139 (139.240.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 11:44:36.622909 2026] [security2:error] [pid 15410:tid 15410] [client 34.165.240.139:36786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "continuity.productions"] [uri "/.git/config"] [unique_id "aq1cZD5NoBuEpWcF3OqdfAAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-09-18 14:48:41 (1 day ago)	csagent: score 20.4: secrets grab x2, 404 noise floor x2; 1 domain(s) in 4s	Web App Attack
🇬🇧 consul.to	2026-09-18 14:35:09 (1 day ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 14:29:16 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.165.240.139 (139.240.165.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.165.240.139 (139.240.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 10:29:12.613758 2026] [security2:error] [pid 26597:tid 26597] [client 34.165.240.139:55878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "contiautos.com"] [uri "/.git/config"] [unique_id "aq1KuDZKloy-FMjGFPUeEwAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-18 14:26:51 (1 day ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config \| 2026-09-18 14:26 UTC show less	Hacking Web App Attack
🇵🇱 lns.bz	2026-09-18 13:54:13 (1 day ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-09-18 12:56:37 (1 day ago)	34.165.240.139 - - [18/Sep/2026:06:56:36 -0600] "GET /.git/config HTTP/1.1" 300 4478 "-" "Mozilla/5. ... show more 34.165.240.139 - - [18/Sep/2026:06:56:36 -0600] "GET /.git/config HTTP/1.1" 300 4478 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack
🇳🇱 Site.eu	2026-09-18 12:28:00 (1 day ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.25.89.99

🇺🇸 208.126.194.62

🇧🇷 45.165.244.235

🇭🇰 45.120.216.232

🇬🇪 213.131.33.2

🇨🇱 181.161.254.16

🇩🇪 167.94.146.36

🇱🇹 62.60.130.253

🇺🇸 50.88.130.102

🇨🇳 49.72.111.25

🇧🇷 45.4.115.200

🇺🇸 40.119.45.136

🇰🇷 222.107.156.227

🇧🇷 190.89.55.250

🇨🇳 117.172.231.240

🇦🇺 103.208.219.38

🇬🇧 31.127.128.87

🇳🇱 213.177.179.176

🇵🇭 122.52.218.227

🇸🇬 43.134.96.20