JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.65.239.56

34.65.239.56 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	56.239.65.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇨🇭 Switzerland
City	Zurich, Zurich

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.65.239.56

Whois 34.65.239.56

IP Abuse Reports for 34.65.239.56:

This IP address has been reported a total of 38 times from 27 distinct sources. 34.65.239.56 was first reported on August 31st 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 YF	2026-09-01 13:00:42 (1 hour ago)	Distributed subnet attack — coordinated scanning from multiple IPs in the same /24	DDoS Attack Web App Attack
🇩🇪 raph	2026-09-01 10:21:52 (4 hours ago)	[DOT FILES] crawler .env, .git, .config, etc.	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-01 09:33:45 (5 hours ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.65.239.56 (CH/Switzerland/56.239.6 ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.65.239.56 (CH/Switzerland/56.239.65.34.bc.googleusercontent.com): 2 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 CBJ	2026-09-01 08:21:40 (6 hours ago)	fail2ban: apache-filepath-recon ...	Web App Attack
🇩🇪 4server	2026-09-01 07:42:05 (7 hours ago)	[TueSep0109:41:59.5400432026][security2:error][pid3860860:tid3860904][client34.65.239.56:0]ModSecuri ... show more [TueSep0109:41:59.5400432026][security2:error][pid3860860:tid3860904][client34.65.239.56:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"fondazionepetronillapontirone.ch.136-243-54-122.cpanel.site\"][uri\"/wp-config.php~\"][unique_id\"apaBxwzlHd2gTu0-xHZDnQAAAIE\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 Hazzard	2026-09-01 07:20:57 (7 hours ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
🇺🇸 TPI-Abuse	2026-09-01 06:04:06 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.65.239.56 (56.239.65.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.65.239.56 (56.239.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:03:58.545219 2026] [security2:error] [pid 7749:tid 7749] [client 34.65.239.56:49046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.picklebillystayandplay.com"] [uri "/wp-config.php~"] [unique_id "apZqzh1AFt2TLL0pVxpSKwAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 05:32:16 (9 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.65.239.56 (56.239.65.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.65.239.56 (56.239.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 01:32:08.519052 2026] [security2:error] [pid 9812:tid 9812] [client 34.65.239.56:39774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thegreatleapforward.com"] [uri "/.env.example"] [unique_id "apZjWD5zK_570078rGv9KAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-01 05:24:58 (9 hours ago)	[da.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/actuator/configprops \| /.en ... show more [da.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/actuator/configprops \| /.env.backup \| /actuator/env show less	Hacking Web App Attack
🇨🇭 zynex	2026-09-01 05:21:15 (9 hours ago)	URL Probing: /wp-config.php~	Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 04:43:15 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.65.239.56 (56.239.65.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.65.239.56 (56.239.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:43:06.980514 2026] [security2:error] [pid 12435:tid 12435] [client 34.65.239.56:36912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "host.davisllp.com"] [uri "/.env"] [unique_id "apZX2iHshO2a9SXn6f84yQAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-01 04:24:17 (10 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.65.239.56 (56.239.65.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.65.239.56 (56.239.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:24:10.703642 2026] [security2:error] [pid 15596:tid 15596] [client 34.65.239.56:42540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bjfrancislaw.com"] [uri "/.env.old"] [unique_id "apZTagFN84FB-qEO6Kg-YAAAABo"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FD-IX	2026-09-01 04:20:27 (10 hours ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇺🇦 URAN Publishing Service	2026-09-01 04:08:50 (10 hours ago)	[01/Sep/2026:07:08:50 +0300] -- 34.65.239.56 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-co ... show more [01/Sep/2026:07:08:50 +0300] -- 34.65.239.56 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /wp-config.php.swp HTTP/1.1 show less	Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-01 03:55:02 (10 hours ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇦 2a00:1d20:49:1:9999::197

🇰🇷 211.240.117.75

🇬🇧 178.128.168.137

🇺🇸 167.172.119.80

🇵🇰 139.135.60.177

🇲🇲 103.59.163.132

🇫🇷 94.23.66.112

🇨🇳 27.25.75.177

🇺🇸 4.148.240.188

🇳🇱 2a00:1450:4013:c06::12a

🇸🇬 2400:8901::2000:1cff:fe98:2fbe

🇰🇷 223.194.21.240

🇺🇸 162.216.149.124

🇵🇱 109.205.211.123

🇺🇸 89.19.35.251

🇧🇬 78.128.112.30

🇳🇱 45.148.10.157

🇨🇳 8.129.229.164

🇰🇷 222.116.34.23

🇨🇳 211.103.219.51