JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.65.19.239

34.65.19.239 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	239.19.65.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.65.19.239

Whois 34.65.19.239

IP Abuse Reports for 34.65.19.239:

This IP address has been reported a total of 48 times from 41 distinct sources. 34.65.19.239 was first reported on October 30th 2023, and the most recent report was 11 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 debestelapp	2026-10-22 04:10:10 (11 hours ago)		Web App Attack
🇩🇪 BlueWire Hosting	2026-10-22 03:38:29 (12 hours ago)	High-confidence malicious configuration/VCS probe	Web App Attack
🇩🇪 bazter.pro	2026-10-22 02:48:10 (13 hours ago)	Fail2Ban: plesk-bot-aggressive - 15 failures	Port Scan Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-10-22 01:28:38 (14 hours ago)	Excessive multi-domain requests	Brute-Force
Anonymous	2026-10-21 23:16:52 (16 hours ago)	Aggressive web scan	Web App Attack
🇦🇺 2000cn.com.au	2026-10-21 17:40:56 (22 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-10-21 14:58:57 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.65.19.239 (239.19.65.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.65.19.239 (239.19.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 10:58:53.095351 2026] [security2:error] [pid 27207:tid 27207] [client 34.65.19.239:59712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "supportourlibrary.org"] [uri "/.git/config"] [unique_id "atjTLU6DcqzA8sF7q-CJ7gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 4server	2026-10-21 14:48:23 (1 day ago)	[WedOct2116:48:20.5014302026][security2:error][pid3201728:tid3201827][client34.65.19.239:0]ModSecuri ... show more [WedOct2116:48:20.5014302026][security2:error][pid3201728:tid3201827][client34.65.19.239:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\)\\|[\<\>]\\\\\\\\$.\\\\\\\\\$\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$$\(41\271$\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require$child_process$.execsync$echo\$\(\(41\271$\)\\|base64-w0\).tostring.trimthrowobject.assign$newerror\(next_redirect${digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"supporto-ticino.ch\"][uri\"/\"][unique_id\"atjQtOQJI_eaADwFRZEyrwAAAMA\"] show less	Hacking Web App Attack
🇧🇷 radardatelecom	2026-10-21 14:18:04 (1 day ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-21 13:24:27 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.65.19.239 (239.19.65.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.65.19.239 (239.19.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 09:24:23.587802 2026] [security2:error] [pid 19383:tid 19383] [client 34.65.19.239:44688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "supportconvalelementary.com"] [uri "/.git/config"] [unique_id "ati9B8SDHraKD7WVKYTqjAAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 GabrielJST	2026-10-21 13:13:19 (1 day ago)	(mod_security) mod_security triggered on hostname [redacted] 34.65.19.239 (CH/Switzerland/239.19.65. ... show more (mod_security) mod_security triggered on hostname [redacted] 34.65.19.239 (CH/Switzerland/239.19.65.34.bc.googleusercontent.com): (CF_ENABLE) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-10-21 13:02:35 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.65.19.239 (239.19.65.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.65.19.239 (239.19.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 09:02:31.844343 2026] [security2:error] [pid 27323:tid 27323] [client 34.65.19.239:54102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "supportaretroops.com"] [uri "/.git/config"] [unique_id "ati354g-GXE1cbhrpqi0igAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-10-21 12:36:45 (1 day ago)	[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.65.19.239 - - [21/Oct/2026:14:36:31 +0200] "GET /.git/config HTTP/1.1" 302 458 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-10-21 10:58:12 (1 day ago)	Bot / seems abusive / Apache connections: 22	DDoS Attack Web Spam Bad Web Bot Web App Attack
🇬🇧 pinguin	2026-10-21 10:52:23 (1 day ago)	Triggered Cloudflare WAF (firewallManaged) from CH. Action taken: LOG Protocol: HTTP/1.1 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from CH. Action taken: LOG Protocol: HTTP/1.1 (GET method) Endpoint: /includes/phpinfo.php UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 173.255.223.62

🇰🇷 222.116.34.181

🇵🇰 175.107.229.120

🇺🇸 173.255.192.234

🇭🇰 154.92.17.128

🇨🇳 112.86.225.178

🇺🇸 108.31.1.91

🇧🇩 103.16.25.83

🇸🇬 94.231.206.38

🇳🇱 93.123.109.228

🇺🇸 66.132.159.28

🇺🇸 50.117.36.31

🇮🇩 43.133.140.5

🇺🇸 35.237.68.69

🇳🇱 31.56.185.59

🇰🇷 20.194.17.163

🇰🇷 222.99.31.54

🇮🇷 194.180.11.186

🇨🇦 192.99.0.11

🇺🇸 172.237.156.201