JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.40.239.99

Recent Activity

Abuse Confidence Score

100% Critical

28 reports

18 reporters · latest 2 minutes ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 99.239.40.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇦🇺 Australia
City: Sydney, New South Wales

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

28 from 18 distinct reporters

First reported

November 12th 2026

Most recent report

2 minutes ago

Last 60 days

Top reporter locations 🇺🇸 United States of America 14 🇳🇱 Netherlands 3 🇨🇿 Czechia 2

Most common categories Web App Attack 27 Bad Web Bot 16 Brute-Force 15 Hacking 3 SQL Injection 3

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Site.eu	2026-11-14 10:29:20 UTC · (2 minutes ago)	Scanning for secret files (.env, .git, credentials, config backups)	Bad Web Bot Web App Attack
🇦🇺 Klaverstyn	2026-11-14 09:51:16 UTC · (40 minutes ago)	Cross-vhost secrets/RCE probing campaign	Web App Attack Hacking
🇳🇱 homeshowdomain.nl	2026-11-13 22:59:59 UTC · (11 hours ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-12.	Web App Attack SSH Hacking
Anonymous	2026-11-13 17:06:51 UTC · (17 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: AU, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-13 16:54:22 UTC · (17 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.40.239.99 (99.239.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:54:15.957928 2026] [security2:error] [pid 1544:tid 154 ... show more (mod_security) mod_security (id:210492) triggered by 34.40.239.99 (99.239.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:54:15.957928 2026] [security2:error] [pid 1544:tid 1544] [client 34.40.239.99:46146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "noscentpro.com"] [uri "/.git/config"] [unique_id "avdAt_B2dFHwIBcTTdLs9gAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-11-13 16:44:55 UTC · (17 hours ago)	Multiple WAF Violations	Web App Attack
🇺🇸 TPI-Abuse	2026-11-13 16:23:39 UTC · (18 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.40.239.99 (99.239.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:23:32.129596 2026] [security2:error] [pid 9868:tid 986 ... show more (mod_security) mod_security (id:210492) triggered by 34.40.239.99 (99.239.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 11:23:32.129596 2026] [security2:error] [pid 9868:tid 9868] [client 34.40.239.99:50618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "phalanxemail.net"] [uri "/.git/config"] [unique_id "avc5hE_IHGbGv7S3jbXW4QAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 konseptit	2026-11-13 15:35:45 UTC · (18 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.40.239.99 (AU/Australia/99.239.40.34.bc.googleusercontent.com)	SQL Injection
🇳🇱 Mangelot Hosting	2026-11-13 14:22:32 UTC · (20 hours ago)	(modsec_attack) srv101 ModSecurity attack 34.40.239.99 (AU/Australia/99.239.40.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:	Web App Attack
🇺🇸 TPI-Abuse	2026-11-13 12:30:11 UTC · (22 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.40.239.99 (99.239.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:30:05.787012 2026] [security2:error] [pid 860861:tid 8 ... show more (mod_security) mod_security (id:210492) triggered by 34.40.239.99 (99.239.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 07:30:05.787012 2026] [security2:error] [pid 860861:tid 860861] [client 34.40.239.99:53934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "northwestarbor-culture.com"] [uri "/.git/config"] [unique_id "avcCzV4PsSRv5_ff4DWNZgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇴 jad-abuse	2026-11-13 11:47:24 UTC · (22 hours ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 4 hits.	Web App Attack
🇺🇸 TPI-Abuse	2026-11-13 10:35:19 UTC · (23 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.40.239.99 (99.239.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:35:14.054725 2026] [security2:error] [pid 24624:tid 24 ... show more (mod_security) mod_security (id:210492) triggered by 34.40.239.99 (99.239.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 05:35:14.054725 2026] [security2:error] [pid 24624:tid 24624] [client 34.40.239.99:51510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "northstar-village.org"] [uri "/.git/config"] [unique_id "avbn4r5gOvn8zYMDgGyVlgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 nyt	2026-11-13 08:16:37 UTC · (1 day ago)	Sensitive File Probe	Web App Attack
🇺🇸 TPI-Abuse	2026-11-13 06:09:48 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.40.239.99 (99.239.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:09:43.742423 2026] [security2:error] [pid 4153:tid 415 ... show more (mod_security) mod_security (id:210492) triggered by 34.40.239.99 (99.239.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 01:09:43.742423 2026] [security2:error] [pid 4153:tid 4153] [client 34.40.239.99:38110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "northgatepark.odessatexas.us"] [uri "/.git/config"] [unique_id "avapp_Tw6Uob0u4Y_powogAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-11-13 05:54:07 UTC · (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.40.239.99 (99.239.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:54:00.530840 2026] [security2:error] [pid 24834:tid 24 ... show more (mod_security) mod_security (id:210492) triggered by 34.40.239.99 (99.239.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 00:54:00.530840 2026] [security2:error] [pid 24834:tid 24834] [client 34.40.239.99:57624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "northfortworthalliance.com"] [uri "/.git/config"] [unique_id "aval-B1FoBHkny1ck4bvCgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇦 195.66.192.18

🇳🇱 193.176.31.203

🇳🇱 193.47.62.69

🇬🇧 192.248.150.180

🇺🇸 162.158.91.99

🇩🇪 144.31.25.162

🇧🇬 79.124.40.150

🇺🇸 73.34.204.194

🇺🇸 66.80.39.103

🇻🇪 190.72.87.237

🇨🇦 174.89.224.10

🇧🇷 128.201.0.208

🇵🇰 124.29.214.132

🇲🇩 92.115.29.111

🇮🇳 45.120.57.50

🇻🇪 38.188.232.126

🇸🇪 13.49.243.151

🇰🇷 222.97.112.179

🇳🇱 185.223.235.62

🇨🇳 119.166.29.95