JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.39.208.220

34.39.208.220 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	220.208.39.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.39.208.220

Whois 34.39.208.220

IP Abuse Reports for 34.39.208.220:

This IP address has been reported a total of 32 times from 27 distinct sources. 34.39.208.220 was first reported on July 23rd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-07-25 06:00:00 (1 day ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 cwytech	2026-07-24 10:18:10 (2 days ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tactical-rmm-lockdown-high.	Hacking
🇫🇷 Guardian	2026-07-24 07:12:20 (2 days ago)	Multi abuses [2]: Unauthorized connection attempt / Port scanning (x19), Unauthorized attempt to ret ... show more Multi abuses [2]: Unauthorized connection attempt / Port scanning (x19), Unauthorized attempt to retrieve configuration file 34.39.208.220 [24/Jul/2026:07:12:17] "GET / HTTP/1.1" 34.39.208.220 [24/Jul/2026:07:12:17] "GET /api/settings HTTP/1.1" 34.39.208.220 [24/Jul/2026:07:12:18] "GET /api/graphql HTTP/1.1" 34.39.208.220 [24/Jul/2026:07:12:18] "GET /env.js HTTP/1.1" 34.39.208.220 [24/Jul/2026:07:12:18] "GET /z9x8c7v6b5-debug-trigger-api.****.* HTTP/1.1" 34.39.208.220 [24/Jul/2026:07:12:18] "GET /api/config HTTP/1.1" 34.39.208.220 [24/Jul/2026:07:12:18] "GET /api/v1/settings HTTP/1.1" 34.39.208.220 [24/Jul/2026:07:12:19] "GET /firebase-config.json HTTP/1.1" 34.39.208.220 [24/Jul/2026:07:12:19] "GET /config.js HTTP/1.1" 34.39.208.220 [24/Jul/2026:07:12:19] "GET /.ssh/authorized_keys HTTP/1.1" 34.39.208.220 [24/Jul/2026:07:12:19] "GET /graphql/console HTTP/1.1" 34.39.208.220 [24/Jul/2026:07:12:19] "GET /wp-json HTTP/1.1" 34.39.208.220 [24/Jul/2026:07:12:19] "GET /settings.json HTTP/1.1" 34.39.208.220 [24/J show less	Port Scan Web App Attack
Anonymous	2026-07-24 05:10:52 (2 days ago)	[Fri Jul 24 07:10:50.913246 2026] [proxy_fcgi:error] [pid 336722:tid 336770] [client 34.39.208.220:4 ... show more [Fri Jul 24 07:10:50.913246 2026] [proxy_fcgi:error] [pid 336722:tid 336770] [client 34.39.208.220:44264] AH01071: Got error 'Primary script unknown' [Fri Jul 24 07:10:50.920612 2026] [proxy_fcgi:error] [pid 178354:tid 178444] [client 34.39.208.220:44266] AH01071: Got error 'Primary script unknown' [Fri Jul 24 07:10:50.920612 2026] [proxy_fcgi:error] [pid 178354:tid 178444] [client 34.39.208.220:44266] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
Anonymous	2026-07-24 04:40:47 (2 days ago)	[Fri Jul 24 06:08:54.905179 2026] [proxy_fcgi:error] [pid 256812:tid 256843] [client 34.39.208.220:5 ... show more [Fri Jul 24 06:08:54.905179 2026] [proxy_fcgi:error] [pid 256812:tid 256843] [client 34.39.208.220:53168] AH01071: Got error 'Primary script unknown' [Fri Jul 24 06:08:55.736638 2026] [proxy_fcgi:error] [pid 178356:tid 178457] [client 34.39.208.220:53134] AH01071: Got error 'Primary script unknown' [Fri Jul 24 06:08:55.736638 2026] [proxy_fcgi:error] [pid 178356:tid 178457] [client 34.39.208.220:53134] AH01071: Got error 'Primary script unknown' [Fri Jul 24 06:40:45.890036 2026] [proxy_fcgi:error] [pid 178355:tid 178515] [client 34.39.208.220:52868] AH01071: Got error 'Primary script unknown' [Fri Jul 24 06:40:45.890036 2026] [proxy_fcgi:error] [pid 178355:tid 178515] [client 34.39.208.220:52868] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇩🇪 todix	2026-07-24 04:13:54 (2 days ago)	Web App Attack Exploid from 34.39.208.220	Web App Attack
Anonymous	2026-07-24 04:08:56 (2 days ago)	[Fri Jul 24 06:08:50.296361 2026] [proxy_fcgi:error] [pid 336722:tid 336755] [client 34.39.208.220:5 ... show more [Fri Jul 24 06:08:50.296361 2026] [proxy_fcgi:error] [pid 336722:tid 336755] [client 34.39.208.220:53216] AH01071: Got error 'Primary script unknown' [Fri Jul 24 06:08:51.189565 2026] [proxy_fcgi:error] [pid 178355:tid 178527] [client 34.39.208.220:53080] AH01071: Got error 'Primary script unknown' [Fri Jul 24 06:08:52.226157 2026] [proxy_fcgi:error] [pid 336722:tid 336762] [client 34.39.208.220:53202] AH01071: Got error 'Primary script unknown' [Fri Jul 24 06:08:53.123075 2026] [proxy_fcgi:error] [pid 178532:tid 178568] [client 34.39.208.220:53232] AH01071: Got error 'Primary script unknown' [Fri Jul 24 06:08:54.625146 2026] [proxy_fcgi:error] [pid 336722:tid 336767] [client 34.39.208.220:53120] AH01071: Got error 'Primary script unknown' ... show less	Brute-Force Web App Attack
🇩🇰 HostingGroup	2026-07-24 03:06:53 (2 days ago)	Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ... show more Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 4. First blocked: 2026-07-24. show less	Bad Web Bot Web App Attack
Anonymous	2026-07-24 02:51:38 (2 days ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇬🇧 gws-hostmaster	2026-07-24 02:18:34 (2 days ago)	ModSecurity OWASP CRS (Anomaly Score: 10): Restricted File Access Attempt;URL file extension is rest ... show more ModSecurity OWASP CRS (Anomaly Score: 10): Restricted File Access Attempt;URL file extension is restricted by policy; show less	Web App Attack
🇫🇷 dynamix	2026-07-24 02:16:11 (2 days ago)	Multiple WAF Violations	Web App Attack
🇳🇱 Site.eu	2026-07-24 02:03:20 (2 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 Blexyel	2026-07-23 23:16:14 (3 days ago)	34.39.208.220 - - [24/Jul/2026:01:16:14 +0200] "GET /.git/config HTTP/2.0" 200 3069 "-" "Mozilla/5.0 ... show more 34.39.208.220 - - [24/Jul/2026:01:16:14 +0200] "GET /.git/config HTTP/2.0" 200 3069 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)" ... show less	Brute-Force Web App Attack
🇩🇪 Hazzard	2026-07-23 22:08:45 (3 days ago)	(PERMBLOCK) 34.39.208.220 (BR/Brazil/São Paulo/São Paulo/220.208.39.34.bc.googleusercontent.com/[red ... show more (PERMBLOCK) 34.39.208.220 (BR/Brazil/São Paulo/São Paulo/220.208.39.34.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks show less	Hacking
🇩🇪 Marc	2026-07-23 21:03:53 (3 days ago)	34.39.208.220 - - [23/Jul/2026:23:03:53 +0200] "GET /.git-credentials HTTP/2.0" 404 314 "-" "Mozilla ... show more 34.39.208.220 - - [23/Jul/2026:23:03:53 +0200] "GET /.git-credentials HTTP/2.0" 404 314 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 34.39.208.220 - - [23/Jul/2026:23:03:53 +0200] "GET /.git/config HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.39.208.220 - - [23/Jul/2026:23:03:53 +0200] "GET /.git/HEAD HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0" show less	Brute-Force

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇱 51.68.151.167

🇳🇱 45.148.10.141

🇨🇳 42.81.126.27

🇰🇷 1.214.214.114

🇵🇾 186.16.59.246

🇦🇲 91.231.202.108

🇩🇪 213.209.159.227

🇺🇸 198.98.53.213

🇨🇴 181.129.41.162

🇲🇾 172.197.168.125

🇮🇳 103.208.231.173

🇹🇷 94.154.43.56

🇷🇺 81.211.72.167

🇲🇾 47.250.159.245

🇳🇱 45.148.10.147

🇮🇳 34.14.169.119

🇺🇸 20.127.245.101

🇷🇴 2.57.121.25

🇩🇪 194.187.176.212

🇩🇪 139.59.208.49