JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.29.40.139

34.29.40.139 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	139.40.29.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.29.40.139

Whois 34.29.40.139

IP Abuse Reports for 34.29.40.139:

This IP address has been reported a total of 28 times from 23 distinct sources. 34.29.40.139 was first reported on September 15th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-09-16 04:30:31 (1 hour ago)	[Tue Sep 15 22:30:29.103843 2026] [authz_core:error] [pid 73670:tid 140601785837120] [client 34.29.4 ... show more [Tue Sep 15 22:30:29.103843 2026] [authz_core:error] [pid 73670:tid 140601785837120] [client 34.29.40.139:36868] AH01630: client denied by server configuration: /var/www/horde/.env.bak [Tue Sep 15 22:30:30.348948 2026] [authz_core:error] [pid 73670:tid 140601467045440] [client 34.29.40.139:36868] AH01630: client denied by server configuration: /var/www/horde/.env.dist [Tue Sep 15 22:30:30.382566 2026] [authz_core:error] [pid 73670:tid 140601752266304] [client 34.29.40.139:36868] AH01630: client denied by server configuration: /var/www/horde/.env.swp ... show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-16 03:59:33 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.29.40.139 (139.40.29.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.29.40.139 (139.40.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 23:59:25.610979 2026] [security2:error] [pid 20547:tid 20547] [client 34.29.40.139:57826] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.binfieldresources.com"] [uri "/.git/config"] [unique_id "aqoUHa3CXPt0IQqDAtBB1QAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 LRob	2026-09-16 00:20:55 (6 hours ago)	Enumerating paths that do not exist (scanning) \| method: GET \| path: /.git/config (+8 more) \| ua: Mo ... show more Enumerating paths that do not exist (scanning) \| method: GET \| path: /.git/config (+8 more) \| ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| 2026-09-16 00:20 UTC show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 00:18:59 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.29.40.139 (139.40.29.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.29.40.139 (139.40.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:18:54.456257 2026] [security2:error] [pid 11788:tid 11788] [client 34.29.40.139:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.betiqos.com"] [uri "/.git/config"] [unique_id "aqngbrY10evQdHW_NZuvrQAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇳 evicky2002	2026-09-16 00:02:04 (6 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 TPI-Abuse	2026-09-15 23:24:55 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.29.40.139 (139.40.29.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.29.40.139 (139.40.29.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 19:24:51.156489 2026] [security2:error] [pid 22864:tid 22864] [client 34.29.40.139:35690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.bestcommerciallaundry.net"] [uri "/.git/config"] [unique_id "aqnTw7nltUYQflvitvLHeAAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-15 23:00:05 (7 hours ago)	Unauthorized SSH login attempts	Brute-Force SSH
🇨🇭 ca	2026-09-15 22:56:52 (7 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-probing	Web App Attack Hacking
🇩🇪 rh24	2026-09-15 22:23:39 (8 hours ago)	(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.29.40.139 (US/United States/139.40.29. ... show more (secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.29.40.139 (US/United States/139.40.29.34.bc.googleusercontent.com) show less	Hacking
🇩🇪 FD-IX	2026-09-15 22:23:27 (8 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
Anonymous	2026-09-15 21:54:33 (8 hours ago)	(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.29.40.139 (US/United States/139.40.29.34. ... show more (config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.29.40.139 (US/United States/139.40.29.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.29.40.139 - - [15/Sep/2026:23:54:28 +0200] "GET /.env HTTP/1.1" 406 518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.29.40.139 - - [15/Sep/2026:23:54:28 +0200] "GET /.env.local HTTP/1.1" 406 4887 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.29.40.139 - - [15/Sep/2026:23:54:28 +0200] "GET /.env.production HTTP/1.1" 406 4886 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Port Scan
🇳🇱 Mangelot Hosting	2026-09-15 21:41:50 (8 hours ago)	(modsecurity) srv104 ModSecurity 34.29.40.139 (US/United States/139.40.29.34.bc.googleusercontent.co ... show more (modsecurity) srv104 ModSecurity 34.29.40.139 (US/United States/139.40.29.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇺🇸 abenage	2026-09-15 21:39:33 (8 hours ago)	34.29.40.139 - - [15/Sep/2026:15:39:32 -0600] "GET /phpinfo.php HTTP/1.1" 404 564 "-" "Mozilla/5.0 ( ... show more 34.29.40.139 - - [15/Sep/2026:15:39:32 -0600] "GET /phpinfo.php HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" show less	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-15 20:22:23 (10 hours ago)	[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ... show more [mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.29.40.139 - - [15/Sep/2026:22:22:22 +0200] "GET /.git/config HTTP/1.1" 404 1434 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇳🇱 SysAdmin Dylan	2026-09-15 19:58:01 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.29.40.139 (US/United States/139.40.29.34.bc. ... show more (mod_security) mod_security (id:210492) triggered by 34.29.40.139 (US/United States/139.40.29.34.bc.googleusercontent.com): 10 in the last 3600 secs show less	Brute-Force

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:80d:1007::39

🇦🇿 158.181.41.10

🇧🇬 79.124.59.186

🇮🇪 54.171.82.116

🇸🇬 47.84.139.78

🇭🇰 223.197.231.77

🇨🇳 223.15.242.225

🇨🇴 179.15.163.239

🇺🇸 143.198.180.174

🇮🇳 114.143.201.158

🇹🇷 94.154.43.71

🇺🇦 91.208.194.40

🇵🇰 39.52.9.229

🇬🇧 35.242.161.65

🇩🇪 34.185.217.74

🇹🇳 196.224.117.82

🇳🇱 195.178.110.228

🇺🇦 194.146.189.79

🇺🇸 192.169.233.115

🇺🇸 184.186.73.106