JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.41.107.139

34.41.107.139 was found in our database!

This IP was reported 57 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	139.107.41.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.41.107.139

Whois 34.41.107.139

IP Abuse Reports for 34.41.107.139:

This IP address has been reported a total of 57 times from 26 distinct sources. 34.41.107.139 was first reported on August 30th 2026, and the most recent report was 41 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Peregrine	2026-09-03 22:55:25 (41 minutes ago)	Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 34.41.107.139 172.71.120.146 - - [03/Sep/2026:19:55 ... show more Fail2Ban ct101 Jail: tomcat-honeypot \| Evidence: 34.41.107.139 172.71.120.146 - - [03/Sep/2026:19:55:22 -0300] "GET /.git/config HTTP/1.1" 404 18193 show less	Bad Web Bot
🇦🇺 paulshipley.com.au	2026-09-03 22:52:23 (44 minutes ago)	[Fri Sep 04 08:52:22.790331 2026] [security2:error] [pid 573484] [client 34.41.107.139:58170] [clien ... show more [Fri Sep 04 08:52:22.790331 2026] [security2:error] [pid 573484] [client 34.41.107.139:58170] [client 34.41.107.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dance4fitness.com.au"] [uri "/.git/config"] [unique_id "apn6JnlceTjuXdlr3sK46wAAAFQ"] ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 22:46:06 (51 minutes ago)	(mod_security) mod_security (id:210492) triggered by 34.41.107.139 (139.107.41.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.41.107.139 (139.107.41.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 18:46:00.453573 2026] [security2:error] [pid 28336:tid 28336] [client 34.41.107.139:51318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goldenfrytech.net"] [uri "/.git/config"] [unique_id "apn4qAOvEgUW6rk2vnU8pQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇿 ddw	2026-09-03 21:27:38 (2 hours ago)	ModSecurity detection - Rules: 930130(Restricted File Access Attempt)	Web App Attack
🇷🇴 iulianh	2026-09-03 20:41:28 (2 hours ago)	80,443	Brute-Force SSH
🇩🇪 FeG Deutschland	2026-09-03 19:49:27 (3 hours ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 19:27:28 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.41.107.139 (139.107.41.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.41.107.139 (139.107.41.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 15:27:22.347280 2026] [security2:error] [pid 19653:tid 19653] [client 34.41.107.139:59536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "endoperfect.com"] [uri "/.git/config"] [unique_id "apnKGnNDQBX90ObJLvb-agAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 19:05:23 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.41.107.139 (139.107.41.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.41.107.139 (139.107.41.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 15:05:15.603800 2026] [security2:error] [pid 21921:tid 21921] [client 34.41.107.139:13310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidlbennett.com"] [uri "/.git/config"] [unique_id "apnE6y2U77GXqXJFfhBjcQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-03 17:45:41 (5 hours ago)	[ssd5.kdns.gr] httpd-config-scan: sites=www.chargeplus.gr; logs=/var/log/httpd/domains/chargeplus.gr ... show more [ssd5.kdns.gr] httpd-config-scan: sites=www.chargeplus.gr; logs=/var/log/httpd/domains/chargeplus.gr.log; samples=/.git/config show less	Hacking Web App Attack
🇬🇧 consul.to	2026-09-03 17:34:04 (6 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 17:26:19 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.41.107.139 (139.107.41.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.41.107.139 (139.107.41.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 13:26:12.450561 2026] [security2:error] [pid 11818:tid 11818] [client 34.41.107.139:14458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "blueskyfederal.com"] [uri "/.git/config"] [unique_id "apmttBKf4q0wL_uG-xZEAAAAABY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-03 16:55:02 (6 hours ago)	suspicious request in access.log	Web App Attack
Anonymous	2026-09-03 16:37:51 (6 hours ago)	34.41.107.139 - - [04/Sep/2026:00:37:50 +0800] "GET /.git/config HTTP/1.1" 301 238 "-" "Mozilla/5.0 ... show more 34.41.107.139 - - [04/Sep/2026:00:37:50 +0800] "GET /.git/config HTTP/1.1" 301 238 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 16:04:20 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.41.107.139 (139.107.41.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.41.107.139 (139.107.41.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 12:04:16.941527 2026] [security2:error] [pid 1434472:tid 1434547] [client 34.41.107.139:41024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cmykdesign.com"] [uri "/.git/config"] [unique_id "apmagItntfbmxZBJxyvl1wAAAco"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-09-03 15:47:04 (7 hours ago)	[ThuSep0317:47:00.2123552026][security2:error][pid722249:tid722469][client34.41.107.139:0]ModSecurit ... show more [ThuSep0317:47:00.2123552026][security2:error][pid722249:tid722469][client34.41.107.139:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"buonviaggio.ch\"][uri\"/.git/config\"][unique_id\"apmWdHubqZvipEw7XajPYAAAAUw\"] show less	Hacking Web App Attack

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 15.218.129.235

🇪🇬 197.35.61.21

🇳🇱 195.178.110.26

🇱🇧 185.142.43.83

🇨🇳 120.221.12.5

🇷🇺 89.175.252.170

🇸🇪 85.226.130.14

🇩🇪 213.209.159.231

🇺🇸 199.34.86.93

🇵🇪 190.119.63.81

🇳🇱 128.251.208.183

🇧🇪 66.249.78.72

🇺🇸 66.132.172.153

🇸🇬 52.237.80.79

🇿🇦 41.56.162.209

🇮🇩 34.50.109.24

🇳🇱 193.47.62.69

🇧🇷 186.248.197.77

🇳🇱 45.148.10.141

🇷🇺 217.115.87.186