AbuseIPDB » 34.104.220.117
34.104.220.117 was found in our database!
This IP was reported 9 times. Confidence of
Abuse
is 26%: ?
| ISP |
Google LLC
|
| Usage Type |
Data Center/Web Hosting/Transit
|
| ASN |
AS396982
|
| Hostname(s) |
117.220.104.34.bc.googleusercontent.com
|
| Domain Name |
google.com
|
| Country |
🇯🇵
Japan
|
| City |
Tokyo, Tokyo
|
IP info including ISP, Usage Type, and Location provided
by IPInfo. Updated weekly.
IP Abuse Reports for 34.104.220.117:
This IP address has been reported a total of
9
times from
8 distinct
sources.
34.104.220.117 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
| Reporter |
IoA Timestamp (UTC)
|
Comment |
Categories |
|
|
🇺🇸
WellSpring
|
|
generic probe on 325.today/app/config.php — WellSpr.ing/NetSentinel civic-AI security layer
|
Bad Web Bot
|
|
|
🇺🇸
Matthew Ping
|
|
ModSecurity rule 949110 triggered on wp1. Web application attack blocked by CSF/LFD.
|
Web App Attack
Hacking
|
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.104.220.117 (117.220.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.104.220.117 (117.220.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 01:48:50.098223 2026] [security2:error] [pid 15564:tid 15564] [client 34.104.220.117:45928] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jnpmarinesolutions.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jnpmarinesolutions.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai5Awpsr8f0ykdR5eBTaqAAAAFo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.104.220.117 (117.220.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.104.220.117 (117.220.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 00:03:59.336333 2026] [security2:error] [pid 20018:tid 20018] [client 34.104.220.117:35756] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.cocinasintegralesjp.com.spyasociados.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.cocinasintegralesjp.com.spyasociados.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai4oLzckD9pVNJd9RH_U0AAAAAA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
34.104.220.117 - - [14/Jun/2026:04:36:45 +0200] "GET /app/actuator/heapdump HTTP/1.1" 404 449 "-" "M ...
show more
34.104.220.117 - - [14/Jun/2026:04:36:45 +0200] "GET /app/actuator/heapdump HTTP/1.1" 404 449 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.90 Safari/537.36"
34.104.220.117 - - [14/Jun/2026:04:36:45 +0200] "GET /app/actuator/heapdump HTTP/1.1" 404 249 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.90 Safari/537.36"
34.104.220.117 - - [14/Jun/2026:04:36:45 +0200] "GET /configprops HTTP/1.1" 404 449 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 OPR/32.0.1948.25"
34.104.220.117 - - [14/Jun/2026:04:36:45 +0200] "GET /configprops HTTP/1.1" 404 249 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.85 Safari/537.36 OPR/32.0.1948.25"
34.104.220.117 - - [14/Jun/2026:04:36:45 +0200] "GET /backend/actuator/env HTTP/1.1" 404 449 "-" "Mozilla/5.0 (Linux; Android 9; CLT-AL00 Build/HUAWEICLT-AL00
...
show less
|
Bad Web Bot
Web App Attack
|
|
|
🇮🇹
VHosting
|
|
Detected WordPress attack from 4 different servers
|
Brute-Force
Web App Attack
|
|
|
🇦🇹
Tobias Gion
|
|
|
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
Multiple web server 400 error codes from same source ip
|
Web App Attack
|
|
Showing 1 to
9
of 9 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: