JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.39.249.68

34.39.249.68 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	68.249.39.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.39.249.68

Whois 34.39.249.68

IP Abuse Reports for 34.39.249.68:

This IP address has been reported a total of 39 times from 31 distinct sources. 34.39.249.68 was first reported on October 18th 2026, and the most recent report was 34 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Halux	2026-10-22 09:03:22 (34 minutes ago)	34.39.249.68 Web Application Firewall multiple violations	Hacking Web App Attack
Anonymous	2026-10-22 03:06:18 (6 hours ago)	Bloqueado automaticamente por CrowdSec escenario crowdsecurity/http-sensitive-files	Brute-Force
🇳🇱 Site.eu	2026-10-22 02:54:09 (6 hours ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 FD-IX	2026-10-21 14:24:59 (19 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇺🇸 dot.mg	2026-10-21 11:31:29 (22 hours ago)	Bad behaviour	Web Spam
🇩🇪 LRob	2026-10-21 11:18:38 (22 hours ago)	Secret file probe \| method: GET \| path: /.git/config \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ... show more Secret file probe \| method: GET \| path: /.git/config \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| 2026-10-21 11:18 UTC show less	Hacking Web App Attack
🇬🇧 consul.to	2026-10-21 10:56:29 (22 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇳🇱 ams_sec_user	2026-10-21 06:05:19 (1 day ago)	Automated requests against a hosted website: 48 requests between 05:00 and 05:59 UTC; 31 probes for ... show more Automated requests against a hosted website: 48 requests between 05:00 and 05:59 UTC; 31 probes for exposed secrets/config files (/phpinfo, /_profiler/phpinfo, /.env.local). Reported automatically. show less	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 04:41:29 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.39.249.68 (68.249.39.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.39.249.68 (68.249.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 00:41:20.568639 2026] [security2:error] [pid 12404:tid 12404] [client 34.39.249.68:50624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "recorplast.com"] [uri "/.git/config"] [unique_id "athCcNcZMn1L74VBuH9WSQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 03:01:12 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.39.249.68 (68.249.39.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.39.249.68 (68.249.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 23:01:07.519951 2026] [security2:error] [pid 2724:tid 2724] [client 34.39.249.68:59502] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reconsideringfear.com"] [uri "/.git/config"] [unique_id "atgq8xGc62PwgjCk_h6FDgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 baphomet	2026-10-21 01:02:44 (1 day ago)	Probed planted web canary URI (not a real app path). HTTP request completed against planted URIs (.e ... show more Probed planted web canary URI (not a real app path). HTTP request completed against planted URIs (.env/wp-login/xmlrpc/phpmyadmin/.git). jail=nginx-canary proto=tcp port=80,443 failures>=2 class=web-app-probe these paths are not real apps on this host; hit is hostile recon when=2026-10-21T01:02:44Z sensor=fail2ban role=web-canary src=34.39.249.68 show less	Web App Attack
🇩🇪 EGP Abuse Dept	2026-10-21 00:22:08 (1 day ago)	Scanning for web/db/file exploits on reclameloods.nl	SQL Injection Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-20 23:59:55 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.39.249.68 (68.249.39.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.39.249.68 (68.249.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 19:59:48.065135 2026] [security2:error] [pid 19669:tid 19827] [client 34.39.249.68:44402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "reclaimingspirituality.com"] [uri "/.git/config"] [unique_id "atgAdFkCXMH_yG9JyfiBpAAAAYQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 antlac1	2026-10-20 21:27:49 (1 day ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇳🇱 maxxsense	2026-10-20 20:17:05 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 34.39.249.68 (BR/Brazil/68.249.39.34.bc ... show more (mod_security) mod_security triggered on hostname [redacted] 34.39.249.68 (BR/Brazil/68.249.39.34.bc.googleusercontent.com) show less	SQL Injection

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 223.123.104.116

🇺🇸 66.206.39.42

🇺🇦 213.111.148.10

🇿🇦 197.89.157.9

🇪🇸 185.183.106.3

🇳🇱 176.65.148.167

🇺🇸 162.216.149.237

🇬🇧 86.38.187.239

🇷🇺 80.247.110.206

🇬🇧 77.67.26.165

🇸🇦 51.39.60.21

🇬🇧 46.101.41.55

🇮🇳 42.104.155.135

🇨🇳 42.52.219.118

🇬🇧 35.203.211.150

🇬🇧 200.138.46.199

🇳🇱 93.123.109.178

🇬🇧 86.38.187.156

🇬🇧 64.205.72.179

🇮🇳 13.203.210.157