JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.39.220.251

34.39.220.251 was found in our database!

This IP was reported 30 times. Confidence of Abuse is 78%: ?

78%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	251.220.39.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.39.220.251

Whois 34.39.220.251

IP Abuse Reports for 34.39.220.251:

This IP address has been reported a total of 30 times from 18 distinct sources. 34.39.220.251 was first reported on June 28th 2026, and the most recent report was 21 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇦 URAN Publishing Service	2026-09-17 21:12:49 (21 minutes ago)	[18/Sep/2026:00:12:49 +0300] -- 34.39.220.251 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git ... show more [18/Sep/2026:00:12:49 +0300] -- 34.39.220.251 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/config HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 15:38:43 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.39.220.251 (251.220.39.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.39.220.251 (251.220.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 11:38:37.293447 2026] [security2:error] [pid 21816:tid 21816] [client 34.39.220.251:53608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "phantomquailkennel.com"] [uri "/.git/config"] [unique_id "aqwJffW5HoEBbDBKLpQdIQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 13:42:39 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.39.220.251 (251.220.39.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.39.220.251 (251.220.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 09:42:35.691135 2026] [security2:error] [pid 31983:tid 31983] [client 34.39.220.251:44158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "phalanxemail.axiomemail.net"] [uri "/.git/config"] [unique_id "aqvuS07HwWE6HRtD-A0suQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-09-17 12:11:41 (9 hours ago)	csagent: score 21.4: 404 noise floor x6, secrets grab x2; 1 domain(s) in 2s	Web App Attack
🇩🇪 MSC IT for Business GmbH	2026-09-17 09:40:10 (11 hours ago)	GASTO/CrowdSec: gasto/modsec-critical triggered (via crowdsec-agent, categories 15,21)	Hacking Web App Attack
Anonymous	2026-09-17 09:18:45 (12 hours ago)	[server.tmg.gr] httpd-config-scan: sites=www.ph-achd2024.com; logs=/var/log/httpd/domains/ph-achd202 ... show more [server.tmg.gr] httpd-config-scan: sites=www.ph-achd2024.com; logs=/var/log/httpd/domains/ph-achd2024.com.log; samples=/.git/config \| /.env \| /.env.local show less	Hacking Web App Attack
🇳🇱 Site.eu	2026-09-17 08:40:15 (12 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 TPI-Abuse	2026-09-17 03:30:01 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.39.220.251 (251.220.39.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.39.220.251 (251.220.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 23:29:55.568154 2026] [security2:error] [pid 31690:tid 31707] [client 34.39.220.251:39868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rosicrucian.net"] [uri "/.git/config"] [unique_id "aqtes1hrG2cPjbNPUt6UHwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 03:04:55 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.39.220.251 (251.220.39.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.39.220.251 (251.220.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 23:04:46.457950 2026] [security2:error] [pid 28540:tid 28542] [client 34.39.220.251:38614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rosendalsateri.com"] [uri "/.git/config"] [unique_id "aqtYzjLuXLjl46lGPRHlaQAAAUA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 02:42:40 (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.39.220.251 (251.220.39.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.39.220.251 (251.220.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 22:42:33.991487 2026] [security2:error] [pid 10521:tid 10521] [client 34.39.220.251:43352] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rosecityexpress.com"] [uri "/.git/config"] [unique_id "aqtTmQgXkpRdR85R1UH0BQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-16 19:09:16 (1 day ago)	Web application attack detected.	Web App Attack
Anonymous	2026-09-16 19:00:04 (1 day ago)	\| [Dangerous/Brazil] Aggressive IP 34.39.220.251 (~30 hits). Type: DoS Defender- Web server 400 erro ... show more \| [Dangerous/Brazil] Aggressive IP 34.39.220.251 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇩🇪 LRob	2026-09-16 18:18:10 (1 day ago)	Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: ... show more Probing for secret files (.git, .env, credentials, database dumps, wp-config) \| method: GET \| path: /.git/config (+2 more) \| 2026-09-16 18:18 UTC show less	Hacking Web App Attack
🇳🇱 Savvii	2026-09-16 16:33:16 (1 day ago)	20 attempts against mh-misbehave-ban on onion	Brute-Force Bad Web Bot Web App Attack
🇬🇧 venus.launch.bz	2026-09-16 16:15:37 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 34.39.220.251 (BR/Brazil/251.220.39.34. ... show more (mod_security) mod_security triggered on hostname [redacted] 34.39.220.251 (BR/Brazil/251.220.39.34.bc.googleusercontent.com) show less	SQL Injection

Showing 1 to 15 of 30 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.154

🇵🇭 202.69.171.60

🇺🇸 162.216.150.98

🇺🇸 147.185.132.33

🇨🇳 112.86.225.71

🇷🇺 109.195.21.220

🇺🇸 104.222.51.161

🇫🇷 92.152.66.72

🇳🇱 91.92.40.43

🇺🇸 66.132.186.140

🇳🇱 34.91.161.118

🇳🇬 152.32.140.20

🇺🇸 66.132.195.107

🇺🇸 52.180.137.18

🇮🇳 20.244.28.141

🇺🇸 20.84.43.77

🇺🇸 216.25.89.129

🇳🇱 193.47.62.69

🇮🇹 172.70.216.142

🇩🇪 150.241.113.163