JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.39.249.80

34.39.249.80 was found in our database!

This IP was reported 36 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	80.249.39.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.39.249.80

Whois 34.39.249.80

IP Abuse Reports for 34.39.249.80:

This IP address has been reported a total of 36 times from 22 distinct sources. 34.39.249.80 was first reported on September 15th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-17 12:46:09 (3 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.39.249.80 (80.249.39.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.39.249.80 (80.249.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 08:46:02.189812 2026] [security2:error] [pid 7262:tid 7262] [client 34.39.249.80:48106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pilgrimpastor.my1611.com"] [uri "/.git/config"] [unique_id "aqvhCvyV-le7llaTuGakSgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-17 11:24:57 (4 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.39.249.80 (BR/Brazil/80.249.39.34.bc ... show more (mod_security) mod_security triggered on hostname [redacted] 34.39.249.80 (BR/Brazil/80.249.39.34.bc.googleusercontent.com) show less	SQL Injection
🇫🇷 masterguru	2026-09-17 10:40:04 (5 hours ago)	Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ... show more Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195) show less	Hacking
🇺🇸 TPI-Abuse	2026-09-17 10:39:41 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.39.249.80 (80.249.39.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.39.249.80 (80.249.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 06:39:34.176723 2026] [security2:error] [pid 15318:tid 15336] [client 34.39.249.80:43362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pilargarciamanzanares.com"] [uri "/.git/config"] [unique_id "aqvDZhr4JmB6hjw70SNGfgAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-17 09:42:38 (6 hours ago)	[da.kdns.gr] httpd-config-scan: sites=www.pikoulis.gr; logs=/var/log/httpd/domains/pikoulis.gr.log; ... show more [da.kdns.gr] httpd-config-scan: sites=www.pikoulis.gr; logs=/var/log/httpd/domains/pikoulis.gr.log; samples=/.git/config \| /.env \| /.env.local show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 08:58:17 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.39.249.80 (80.249.39.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.39.249.80 (80.249.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 04:58:12.911498 2026] [security2:error] [pid 17207:tid 17207] [client 34.39.249.80:50920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pikespeakjazz.com.infinityartistsgroup.com"] [uri "/.git/config"] [unique_id "aqurpM3IvymQ_CKKaLw0qQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-17 08:21:03 (7 hours ago)	[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.39.249.80 - - [17/Sep/2026:10:20:47 +0200] "GET /.git/config HTTP/1.1" 301 568 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-09-17 08:10:48 (8 hours ago)	\| [Dangerous/Brazil] Aggressive IP 34.39.249.80 (~30 hits). Type: DoS Defender- Web server 400 error ... show more \| [Dangerous/Brazil] Aggressive IP 34.39.249.80 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇳🇱 Site.eu	2026-09-17 07:42:50 (8 hours ago)	Excessive multi-domain requests	Brute-Force
🇸🇪 vaia.cloud	2026-09-16 19:40:05 (20 hours ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇩🇪 outputblog.de	2026-09-16 17:53:29 (22 hours ago)	apache-noscript	Hacking Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 17:39:24 (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.39.249.80 (80.249.39.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.39.249.80 (80.249.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 13:39:18.233069 2026] [security2:error] [pid 4221:tid 4221] [client 34.39.249.80:51952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "outofthebluephotography.com"] [uri "/.git/config"] [unique_id "aqrURplB0QrHKJX0-7H-OgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-16 15:35:03 (1 day ago)	crowdsecurity/http-probing	Brute-Force Web App Attack
🇩🇪 big-cloud.nl	2026-09-16 15:26:59 (1 day ago)	Try to access /.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 13:57:42 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.39.249.80 (80.249.39.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.39.249.80 (80.249.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:57:36.190169 2026] [security2:error] [pid 22711:tid 22711] [client 34.39.249.80:50314] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ourhotmail.com"] [uri "/.git/config"] [unique_id "aqqgUKTdcb1RiudkCJSo5gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 36 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇽 189.194.140.170

🇺🇬 129.205.31.68

🇰🇷 121.188.248.94

🇺🇸 66.132.195.39

🇺🇸 54.85.135.190

🇨🇦 24.84.69.251

🇩🇪 213.209.159.11

🇳🇱 213.177.179.92

🇭🇰 199.45.154.184

🇩🇪 194.88.98.124

🇪🇨 181.196.24.37

🇭🇰 154.198.162.234

🇬🇪 88.218.94.33

🇫🇷 85.217.140.6

🇺🇸 57.144.252.3

🇵🇰 39.34.231.131

🇳🇱 34.13.138.0

🇨🇳 223.241.214.127

🇻🇳 210.245.30.140

🇧🇷 200.168.117.238