JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.65.239.247

34.65.239.247 was found in our database!

This IP was reported 33 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	247.239.65.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.65.239.247

Whois 34.65.239.247

IP Abuse Reports for 34.65.239.247:

This IP address has been reported a total of 33 times from 24 distinct sources. 34.65.239.247 was first reported on August 31st 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-01 13:53:56 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.65.239.247 (247.239.65.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.65.239.247 (247.239.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:53:53.169799 2026] [security2:error] [pid 15683:tid 15683] [client 34.65.239.247:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.empoweruamerica.org"] [uri "/.env.dev"] [unique_id "apbY8QIGBG_G2iAvEK6YtQAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-01 13:05:23 (2 days ago)	(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.65.239.247 (CH/Switzerland/247.239.65.34. ... show more (config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.65.239.247 (CH/Switzerland/247.239.65.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.65.239.247 - - [01/Sep/2026:15:05:19 +0200] "GET /.env.old HTTP/1.1" 406 4829 "-" "crusader-worker/1.0" 34.65.239.247 - - [01/Sep/2026:15:05:19 +0200] "GET /.env.save HTTP/1.1" 406 4830 "-" "crusader-worker/1.0" 34.65.239.247 - - [01/Sep/2026:15:05:19 +0200] "GET /.env.example HTTP/1.1" 406 4829 "-" "crusader-worker/1.0" show less	Port Scan
🇳🇱 debestelapp	2026-09-01 12:35:09 (2 days ago)		Web App Attack
🇬🇧 Aetherweb Ark	2026-09-01 12:15:37 (2 days ago)	(mod_security) mod_security (id:949110) triggered by 34.65.239.247 (CH/Switzerland/247.239.65.34.bc. ... show more (mod_security) mod_security (id:949110) triggered by 34.65.239.247 (CH/Switzerland/247.239.65.34.bc.googleusercontent.com): N in the last X secs show less	Web App Attack
🇩🇪 dbmwebdesign	2026-09-01 12:10:04 (2 days ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇱🇻 garmtech.com	2026-09-01 11:06:35 (2 days ago)	Attempted access to sensitive endpoint (/.env) detected. Automated scan or unauthorized probing.	Web App Attack
🇩🇪 Petros Stefanakis	2026-09-01 11:02:42 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.65.239.247 (CH/Switzerland/247.239.6 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.65.239.247 (CH/Switzerland/247.239.65.34.bc.googleusercontent.com) show less	SQL Injection
🇦🇺 paulshipley.com.au	2026-09-01 10:46:51 (2 days ago)	[Tue Sep 01 20:46:51.261299 2026] [security2:error] [pid 223412] [client 34.65.239.247:54664] [clien ... show more [Tue Sep 01 20:46:51.261299 2026] [security2:error] [pid 223412] [client 34.65.239.247:54664] [client 34.65.239.247] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.id.au"] [uri "/.env.dev"] [unique_id "apatG8inokanVL9uBhhK-wAAAAI"] ... show less	Web App Attack
🇸🇪 vaia.cloud	2026-09-01 10:00:14 (2 days ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 08:49:14 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.65.239.247 (247.239.65.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.65.239.247 (247.239.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:49:09.728934 2026] [security2:error] [pid 26882:tid 26882] [client 34.65.239.247:33760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scswat.org"] [uri "/.env.prod"] [unique_id "apaRhcvPNiO892-qTkMYfAAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 yitzhaq	2026-09-01 07:19:16 (2 days ago)	34.65.239.247 - - [01/Sep/2026:09:19:13 +0200] "GET /wp-config.php~ HTTP/1.1" 404 4461 "-" "crusader ... show more 34.65.239.247 - - [01/Sep/2026:09:19:13 +0200] "GET /wp-config.php~ HTTP/1.1" 404 4461 "-" "crusader-worker/1.0" 34.65.239.247 - - [01/Sep/2026:09:19:13 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 4460 "-" "crusader-worker/1.0" 34.65.239.247 - - [01/Sep/2026:09:19:13 +0200] "GET /_ignition/health-check HTTP/1.1" 404 4462 "-" "crusader-worker/1.0" 34.65.239.247 - - [01/Sep/2026:09:19:13 +0200] "GET /.env.local HTTP/1.1" 404 4462 "-" "crusader-worker/1.0" 34.65.239.247 - - [01/Sep/2026:09:19:13 +0200] "GET /.env.save HTTP/1.1" 404 4462 "-" "crusader-worker/1.0" 34.65.239.247 - - [01/Sep/2026:09:19:13 +0200] "GET /.env.prod HTTP/1.1" 404 4460 "-" "crusader-worker/1.0" 34.65.239.247 - - [01/Sep/2026:09:19:13 +0200] "GET /.env.backup HTTP/1.1" 404 4461 "-" "crusader-worker/1.0" 34.65.239.247 - - [01/Sep/2026:09:19:13 +0200] "GET /.env.example HTTP/1.1" 404 4460 "-" "crusader-worker/1.0" 34.65.239.247 - - [01/Sep/2026:09:19:13 +0200] "GET /env HTTP/1.1" 404 4461 "-" "crusader-worker/1.0" 34 show less	Web App Attack Brute-Force
🇺🇸 TPI-Abuse	2026-09-01 07:16:13 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.65.239.247 (247.239.65.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.65.239.247 (247.239.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:16:06.805137 2026] [security2:error] [pid 17484:tid 17484] [client 34.65.239.247:42702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mroxygen.org"] [uri "/.env.prod"] [unique_id "apZ7to8ZD9lJB_Qaaz7AWwAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 ElertSec	2026-09-01 06:38:06 (2 days ago)	Defender Auto-Report: Automated malicious activity detected (11 matched events, ban duration 4h)	Hacking
🇨🇭 zynex	2026-09-01 06:38:04 (2 days ago)	URL Probing: /wp-config.php.bak	Web App Attack
🇳🇱 GabrielJST	2026-09-01 06:28:49 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.65.239.247 (CH/Switzerland/247.239.6 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.65.239.247 (CH/Switzerland/247.239.65.34.bc.googleusercontent.com): (CF_ENABLE) show less	SQL Injection

Showing 1 to 15 of 33 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 141.94.94.95

🇧🇷 2400:cb00:1058:1000:3013:b1de:349b:b653

🇺🇸 163.47.134.124

🇩🇿 129.45.45.96

🇮🇩 103.46.186.85

🇵🇰 39.43.220.7

🇫🇷 37.66.174.56

🇪🇸 34.175.134.177

🇧🇷 190.111.96.199

🇨🇳 175.13.205.213

🇮🇳 122.168.197.138

🇲🇩 92.115.187.184

🇬🇧 35.203.211.54

🇺🇸 4.155.196.106

🇳🇱 193.47.62.69

🇬🇧 188.166.154.213

🇺🇸 165.154.218.137

🇺🇸 136.144.19.42

🇨🇳 123.191.128.200

🇫🇷 109.123.244.43