JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.39.255.130

34.39.255.130 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 81%: ?

81%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	130.255.39.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇧🇷 Brazil
City	Sao Paulo, Sao Paulo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.39.255.130

Whois 34.39.255.130

IP Abuse Reports for 34.39.255.130:

This IP address has been reported a total of 31 times from 23 distinct sources. 34.39.255.130 was first reported on June 13th 2026, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-15 21:59:36 (2 weeks ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14. show less	Web App Attack SSH Hacking
Anonymous	2026-06-15 11:12:10 (2 weeks ago)	Honeypot trap fired (Cloudflare Worker). IP requested non-existent credential/admin/scanner-bait pat ... show more Honeypot trap fired (Cloudflare Worker). IP requested non-existent credential/admin/scanner-bait paths: /.git/config, /admin/.git/config, /api/.git/config, /app/.git/config, /assets/.git/config. None of these endpoints exist on our service - matched bait pattern. First seen UTC: 2026-06-15 07:16:43. show less	Web App Attack
🇳🇴 jad-abuse	2026-06-15 09:21:59 (2 weeks ago)	ThreatFeed automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure ... show more ThreatFeed automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 30 hits. show less	Web App Attack
🇦🇺 screwlooseit.com.au	2026-06-15 09:00:33 (2 weeks ago)	Blocked by CSF 13 firewall - Rule: US/United States/130.255.39.34.bc.googleusercontent.com	Web App Attack
🇩🇪 todix	2026-06-15 08:30:39 (2 weeks ago)	WebAttack or semilar from 34.39.255.130	Web App Attack
🇨🇭 Cybercat	2026-06-15 08:18:57 (2 weeks ago)	CrowdSec detection: crowdsecurity/http-sensitive-files	Hacking
🇺🇸 TPI-Abuse	2026-06-15 07:34:53 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.39.255.130 (130.255.39.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.39.255.130 (130.255.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:34:44.527036 2026] [security2:error] [pid 3064:tid 3064] [client 34.39.255.130:46948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.christianconsulting.hendersonhomes.com"] [uri "/admin/.git/config"] [unique_id "ai-rFBHkjk-0yn36ktj_kgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 07:07:18 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.39.255.130 (130.255.39.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.39.255.130 (130.255.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:07:12.160073 2026] [security2:error] [pid 22092:tid 22092] [client 34.39.255.130:51564] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "analytics.searchenginesubmit.org"] [uri "/app/.git/config"] [unique_id "ai-koKCcQ9A7_oq6sG1UCgAAAGQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-15 06:27:05 (2 weeks ago)	Bot / scanning and/or hacking attempts: GET /blog/.git/config HTTP/1.1, GET /v2/.git/config HTTP/1.1 ... show more Bot / scanning and/or hacking attempts: GET /blog/.git/config HTTP/1.1, GET /v2/.git/config HTTP/1.1, GET /www/.git/config HTTP/1.1, GET /app/.git/config HTTP/1.1, GET /portal/.git/config HTTP/1.1, GET /htdocs/.git/config HTTP/1.1, GET /backend/.git/config HTTP/1.1, GET /.git/config HTTP/1.1, GET /admin/.git/config HTTP/1.1, GET /site/.git/config HTTP/1.1, GET /laravel/.git/config HTTP/1.1, GET /code/.git/config HTTP/1.1, GET /dashboard/.git/config HTTP/1.1, GET /wordpress/.git/config HTTP/1.1, GET /dist/.git/config HTTP/1.1, GET /frontend/.git/config HTTP/1.1, GET /wp-content/.git/config HTTP/1.1, GET /web/.git/config HTTP/1.1, GET /build/.git/config HTTP/1.1, GET /static/.git/config HTTP/1.1, GET /symfony/.git/config HTTP/1.1, GET /v3/.git/config HTTP/1.1, GET /assets/.git/config HTTP/1.1, GET /shop/.git/config HTTP/1.1, GET /api/.git/config HTTP/1.1, GET /project/.git/config HTTP/1.1, GET /html/.git/config HTTP/1.1, GET /src/.git/config HTTP/1.1, GET /public/.git/config HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 excill	2026-06-15 03:11:56 (2 weeks ago)	Honeypot mesh observed 624 attack events in 24h — cowrie/dionaea/heralding/suricata	Port Scan Hacking Brute-Force SSH
🇩🇪 Skyrider	2026-06-15 02:29:04 (2 weeks ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
🇰🇷 doll.gl	2026-06-15 01:56:54 (2 weeks ago)	CrowdSec: Ip 34.39.255.130 performed 'crowdsecurity/http-sensitive-files' (5 events over 103.986603m ... show more CrowdSec: Ip 34.39.255.130 performed 'crowdsecurity/http-sensitive-files' (5 events over 103.986603ms) at 2026-06-15 01:56:52.539032018 +0000 UTC (scenario: crowdsecurity/http-sensitive-files) show less	Port Scan Web App Attack
🇳🇱 e.fierstra	2026-06-15 01:52:56 (2 weeks ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-06-15 00:59:55 (2 weeks ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 00:32:12 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.39.255.130 (130.255.39.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.39.255.130 (130.255.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:32:04.283621 2026] [security2:error] [pid 14768:tid 14768] [client 34.39.255.130:51742] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.amaia.portalvasco.com"] [uri "/backend/.git/config"] [unique_id "ai9IBCj2XjJQ2Y5CwVC1AgAAABw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 119.63.138.192

🇺🇸 107.167.34.125

🇺🇸 152.32.182.41

🇮🇳 139.59.83.32

🇻🇳 116.99.174.55

🇨🇳 106.75.185.227

🇳🇱 104.28.163.183

🇭🇰 46.247.61.28

🇨🇳 8.138.15.98

🇩🇪 185.242.3.215

🇸🇬 143.198.85.89

🇧🇷 138.99.80.102

🇨🇦 85.217.149.23

🇧🇷 200.108.174.4

🇺🇸 154.28.229.228

🇺🇸 87.99.140.236

🇱🇹 46.29.234.126

🇺🇸 23.151.8.10

🇨🇦 184.70.24.70

🇫🇷 151.80.61.151