JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.130.9.114

Neutral Activity

Abuse Confidence Score

0% Low Risk

26 reports

20 reporters · latest 5 months ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 114.9.130.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇨🇦 Canada
City: Toronto, Ontario

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

34.130.9.114 has been reported 26 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

26 from 20 distinct reporters

First reported

May 7th 2026

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-05-20 04:30:47 UTC · (5 months ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇺🇸 mnsf	2026-05-08 19:06:21 UTC · (6 months ago)	Too many Status 40X (20) Scanning/Probing (40)	Brute-Force Web App Attack
🇩🇪 4server	2026-05-08 07:55:40 UTC · (6 months ago)	[FriMay0809:55:38.0834382026][security2:error][pid1645771:tid1645782][client34.130.9.114:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|h ... show more [FriMay0809:55:38.0834382026][security2:error][pid1645771:tid1645782][client34.130.9.114:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\\|passwd\\|group$\\|www_\?acl\)\\|global\\\\\\\\.asa\\|httpd\\\\\\\\.conf\\|boot\\\\\\\\.ini\\|web.config\)\\\\\\\\b\\|$\\|\^\\|\\\\\\\\.\\\\\\\\.$/etc/\\|/\\\\\\\\.$\?:history\\|bash_history\\|sh_history\\|env$\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"worldgoldfundltd.com.136-243-54-122.cpanel.site\"][uri\"/app/.env\"][unique_id\"af2W-pU6_BXppsROfwWKtQAAAAA\"] show less	Port Scan Brute-Force Web App Attack
Anonymous	2026-05-08 07:32:03 UTC · (6 months ago)	Bot / scanning and/or hacking attempts: GET /.env.dev.local HTTP/1.1	Hacking Web App Attack
🇺🇸 MPL	2026-05-08 07:09:31 UTC · (6 months ago)	tcp ports: 80,443 (140 or more attempts)	Port Scan
🇫🇷 dynamix	2026-05-08 06:59:03 UTC · (6 months ago)	Multiple WAF Violations	Web App Attack
🇷🇺 DZBOT	2026-05-08 06:57:18 UTC · (6 months ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
🇧🇪 cmbplf	2026-05-08 06:41:31 UTC · (6 months ago)	307 requests with url.path *.env	Brute-Force Bad Web Bot
🇫🇷 masterguru	2026-05-08 06:10:25 UTC · (6 months ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-197)	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-05-08 05:01:40 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 34.130.9.114 (114.9.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 01:01:33.847274 2026] [security2:error] [pid 7561:tid 756 ... show more (mod_security) mod_security (id:210492) triggered by 34.130.9.114 (114.9.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 01:01:33.847274 2026] [security2:error] [pid 7561:tid 7561] [client 34.130.9.114:48432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.join.oxfordgliding.com"] [uri "/.env.dev.local"] [unique_id "af1uLUCN0WCgNaKx7uqlFgAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-05-08 04:51:01 UTC · (6 months ago)	Web vulnerability probing: /.env	Web App Attack
🇵🇱 sefinek.net	2026-05-08 02:00:08 UTC · (6 months ago)	Triggered Cloudflare WAF (firewallCustom) from CA. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.env.development.local \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/5 ... show more Triggered Cloudflare WAF (firewallCustom) from CA. Action: BLOCK \| Protocol: HTTP/1.1 (GET) \| Endpoint: /.env.development.local \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-05-08 01:45:50 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 34.130.9.114 (114.9.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 21:45:44.406471 2026] [security2:error] [pid 15741:tid 15 ... show more (mod_security) mod_security (id:210492) triggered by 34.130.9.114 (114.9.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 21:45:44.406471 2026] [security2:error] [pid 15741:tid 15741] [client 34.130.9.114:38310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "player-care.us"] [uri "/.env.local"] [unique_id "af1ASELXx8DF4yz8K8UZowAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-05-08 01:29:52 UTC · (6 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-05-07 23:02:18 UTC · (6 months ago)	(mod_security) mod_security (id:210492) triggered by 34.130.9.114 (114.9.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 19:02:14.001495 2026] [security2:error] [pid 27175:tid 27 ... show more (mod_security) mod_security (id:210492) triggered by 34.130.9.114 (114.9.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 19:02:14.001495 2026] [security2:error] [pid 27175:tid 27175] [client 34.130.9.114:43514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "valerieohayon.com"] [uri "/.env.local"] [unique_id "af0Z9ls_yF_DGDZcrfVyvwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 222.210.35.197

🇺🇸 205.210.31.55

🇺🇸 162.243.167.132

🇷🇺 109.63.135.157

🇸🇬 104.23.175.209

🇺🇸 66.132.195.208

🇺🇸 54.198.211.213

🇦🇺 20.211.107.116

🇳🇱 192.253.248.121

🇬🇹 154.223.128.50

🇳🇱 91.226.227.109

🇸🇪 83.254.172.36

🇸🇪 80.216.42.246

🇹🇼 61.218.153.56

🇸🇬 43.172.194.171

🇺🇸 20.163.58.244

🇨🇳 218.78.46.81

🇵🇦 190.140.82.238

🇸🇬 151.240.88.116

🇨🇳 39.149.34.188