JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.9.81.139

34.9.81.139 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	139.81.9.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.9.81.139

Whois 34.9.81.139

IP Abuse Reports for 34.9.81.139:

This IP address has been reported a total of 60 times from 22 distinct sources. 34.9.81.139 was first reported on August 30th 2026, and the most recent report was 28 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2026-09-03 22:24:06 (28 minutes ago)		Brute-Force Web App Attack
🇸🇪 EmK530	2026-09-03 22:16:07 (36 minutes ago)	URL flagged by RegEx: /.git/config	Web App Attack
🇦🇺 paulshipley.com.au	2026-09-03 22:02:42 (49 minutes ago)	[Fri Sep 04 08:02:41.673602 2026] [security2:error] [pid 545088] [client 34.9.81.139:55888] [client ... show more [Fri Sep 04 08:02:41.673602 2026] [security2:error] [pid 545088] [client 34.9.81.139:55888] [client 34.9.81.139] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dlcarterauthor.com"] [uri "/.git/config"] [unique_id "apnugeONaLLxbydZ8f9P4AAAAAk"] ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 21:54:56 (57 minutes ago)	(mod_security) mod_security (id:210492) triggered by 34.9.81.139 (139.81.9.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.9.81.139 (139.81.9.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 17:54:49.745398 2026] [security2:error] [pid 19937:tid 19937] [client 34.9.81.139:6096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davidsonmanagement.net"] [uri "/.git/config"] [unique_id "apnsqbAUVL-Mn39302rq7gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-03 21:14:03 (1 hour ago)	Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 21:04:51 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.9.81.139 (139.81.9.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.9.81.139 (139.81.9.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 17:04:45.686483 2026] [security2:error] [pid 3167:tid 3167] [client 34.9.81.139:8394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dodojuice.com"] [uri "/.git/config"] [unique_id "apng7Q1g9DuR_sttlOgTPAAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 SilverZippo	2026-09-03 20:39:55 (2 hours ago)	Web App Attack	Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 20:38:24 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.9.81.139 (139.81.9.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.9.81.139 (139.81.9.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 16:38:19.121088 2026] [security2:error] [pid 9080:tid 9080] [client 34.9.81.139:37222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "frickandfracks.com"] [uri "/.git/config"] [unique_id "apnau6_Gu9sWYY_ojndpBwAAAC0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 macrob	2026-09-03 20:32:14 (2 hours ago)	2026/09/03 20:32:12 [error] 4192100#4192100: 553209775 access forbidden by rule, client: 34.9.81.13 ... show more 2026/09/03 20:32:12 [error] 4192100#4192100: 553209775 access forbidden by rule, client: 34.9.81.139, server: finami.mx, request: "GET /.git/config HTTP/2.0", host: "finami.mx" 2026/09/03 20:32:12 [error] 4192100#4192100: 553218658 access forbidden by rule, client: 34.9.81.139, server: finami.es, request: "GET /.git/config HTTP/2.0", host: "finami.es" 2026/09/03 20:32:13 [error] 4192105#4192105: 553213289 access forbidden by rule, client: 34.9.81.139, server: finami.ph, request: "GET /.git/config HTTP/2.0", host: "finami.ph" ... show less	Web App Attack
🇩🇪 pltcldvlpr	2026-09-03 20:23:41 (2 hours ago)	CMS/framework probe: 34.9.81.139 - - [03/Sep/2026:22:23:40 +0200] "GET /.git/config HTTP/1.1" 444 0 ... show more CMS/framework probe: 34.9.81.139 - - [03/Sep/2026:22:23:40 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" asn=396982 org="Google LLC" country=US ... show less	Web App Attack
🇳🇴 jad-abuse	2026-09-03 19:33:07 (3 hours ago)	ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ... show more ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 1 hits. show less	Web App Attack
🇬🇧 consul.to	2026-09-03 18:30:16 (4 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 18:12:40 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.9.81.139 (139.81.9.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.9.81.139 (139.81.9.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 14:12:32.960689 2026] [security2:error] [pid 8242:tid 8242] [client 34.9.81.139:15088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dr-taylor.com"] [uri "/.git/config"] [unique_id "apm4kJ0ZHXJ1iwOUSFHP0gAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-03 17:44:33 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.9.81.139 (139.81.9.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.9.81.139 (139.81.9.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 13:44:30.062682 2026] [security2:error] [pid 3209:tid 3209] [client 34.9.81.139:11358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chickiesbeef.com"] [uri "/.git/config"] [unique_id "apmx_kpizwFL4pGvWUUPOAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 CoreTech srl	2026-09-03 17:33:56 (5 hours ago)	cloudlinux2 fail2ban: 2026-09-03 19:29:08,847 fail2ban.filter [1472]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-09-03 19:29:08,847 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 34.69.248.255 - 2026-09-03 19:29:08cloudlinux2 fail2ban: 2026-09-03 19:29:21,509 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 167.99.233.101 - 2026-09-03 19:29:21cloudlinux2 fail2ban: 2026-09-03 19:29:48,446 fail2ban.actions [1472]: NOTICE [plesk-modsecurity] Unban 39.44.93.238cloudlinux2 fail2ban: 2026-09-03 19:29:43,447 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 34.9.81.139 - 2026-09-03 19:29:42cloudlinux2 fail2ban: 2026-09-03 19:29:53,550 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 34.168.94.167 - 2026-09-03 19:29:53cloudlinux2 fail2ban: 2026-09-03 19:29:53,582 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 34.168.94.167 - 2026-09-03 19:29:53cloudlinux2 fail2ban: 2026-09-03 19:29:53,592 fail2ban.filter [1472]: INFO [plesk-modsecurity] Found 34.168.94.167 - 2026-09-03 19:29:53cloudlinux2 fail2ba show less	Brute-Force

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.251.19.4

🇵🇰 182.176.181.61

🇭🇰 114.111.53.214

🇬🇧 216.226.76.30

🇩🇪 167.94.146.74

🇨🇳 120.24.95.94

🇨🇦 85.217.149.73

🇱🇻 62.60.130.242

🇺🇸 40.117.97.0

🇺🇸 34.75.241.106

🇻🇪 189.127.167.6

🇺🇦 185.94.219.47

🇨🇳 182.34.215.186

🇫🇮 147.185.133.71

🇨🇳 111.42.175.101

🇺🇦 94.124.165.59

🇷🇺 81.29.128.61

🇮🇹 37.103.204.182

🇯🇵 34.146.29.59

🇺🇸 205.210.31.83