JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.17.139.254

34.17.139.254 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	254.139.17.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇮🇹 Italy
City	Turin, Piedmont

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.17.139.254

Whois 34.17.139.254

IP Abuse Reports for 34.17.139.254:

This IP address has been reported a total of 30 times from 24 distinct sources. 34.17.139.254 was first reported on September 15th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Savvii	2026-09-18 22:13:24 (6 hours ago)	20 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-18 17:44:16 (11 hours ago)	34.17.139.254 - - [18/Sep/2026:19:44:05 +0200] "GET /.git/config HTTP/1.1" 403 616 "-" "Mozilla/5.0 ... show more 34.17.139.254 - - [18/Sep/2026:19:44:05 +0200] "GET /.git/config HTTP/1.1" 403 616 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.17.139.254 - - [18/Sep/2026:19:44:05 +0200] "GET /.env HTTP/1.1" 403 616 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.17.139.254 - - [18/Sep/2026:19:44:05 +0200] "GET /.env.local HTTP/1.1" 403 616 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.17.139.254 - - [18/Sep/2026:19:44:05 +0200] "GET /.env.production HTTP/1.1" 403 616 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.17.139.254 - - [18/Sep/2026:19:44:05 +0200] "GET /.env.staging HTTP/1.1" 403 616 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.17.139.254 - - [18/Sep/2026:19:44:05 +0200] " ... show less	DDoS Attack
🇵🇱 lns.bz	2026-09-18 15:43:18 (13 hours ago)	Web app attack [PL.Lu]	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 12:31:52 (16 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.17.139.254 (254.139.17.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.17.139.254 (254.139.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 08:31:46.777695 2026] [security2:error] [pid 19543:tid 19543] [client 34.17.139.254:36986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "destructionstudios.com"] [uri "/.git/config"] [unique_id "aq0vMqR-Cia-iHI-dcX1ZAAAAGI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 11:08:38 (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.17.139.254 (254.139.17.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.17.139.254 (254.139.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 07:08:33.106293 2026] [security2:error] [pid 28910:tid 28910] [client 34.17.139.254:57196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "destintoday.com"] [uri "/.git/config"] [unique_id "aq0bsf9XpWOGLoOS0Q-OWAAAABg"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-18 10:10:02 (18 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇫🇷 Lunix	2026-09-18 09:13:33 (19 hours ago)		Brute-Force Web App Attack
🇳🇱 Site.eu	2026-09-18 08:14:08 (20 hours ago)	Excessive multi-domain requests	Brute-Force
🇫🇮 paissangroup	2026-09-18 07:48:17 (21 hours ago)	Multiple WAF Violations	Web App Attack
🇩🇪 neckaralb-admin.de	2026-09-18 07:44:04 (21 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇳🇱 e.fierstra	2026-09-18 07:28:27 (21 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 07:19:52 (21 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.17.139.254 (254.139.17.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.17.139.254 (254.139.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 03:19:48.032079 2026] [security2:error] [pid 22380:tid 22380] [client 34.17.139.254:56450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "despojosocial.com"] [uri "/.git/config"] [unique_id "aqzmFBLCUswx1xuw-c6_kwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-18 06:31:46 (22 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.17.139.254 (IT/Italy/254.139.17.34.b ... show more (mod_security) mod_security triggered on hostname [redacted] 34.17.139.254 (IT/Italy/254.139.17.34.bc.googleusercontent.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-09-18 06:17:37 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.17.139.254 (254.139.17.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.17.139.254 (254.139.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 02:17:32.411412 2026] [security2:error] [pid 22577:tid 22577] [client 34.17.139.254:58450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desotopresbyterian.church"] [uri "/.git/config"] [unique_id "aqzXfP8Ner_LZzoS83QvqgAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 🇨🇭 Hosting	2026-09-18 05:10:24 (23 hours ago)	Automated WAF report: 400-500 blocked requests from this IP detected by our WAF.	Bad Web Bot Web App Attack

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.237

🇮🇩 103.10.120.162

🇧🇬 79.124.56.222

🇮🇳 223.181.21.234

🇺🇸 216.180.246.18

🇺🇸 216.25.89.154

🇳🇱 193.233.210.232

🇧🇪 130.211.107.33

🇺🇸 130.131.220.95

🇨🇳 112.3.101.213

🇺🇸 20.163.58.236

🇺🇸 20.38.35.148

🇳🇱 193.176.31.200

🇳🇱 193.47.62.69

🇫🇷 169.58.224.74

🇺🇸 167.99.168.244

🇩🇪 149.233.168.187

🇩🇪 135.125.235.107

🇧🇬 79.124.40.142

🇺🇸 72.212.176.78