JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.130.92.104

34.130.92.104 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 56%: ?

56%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	104.92.130.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.130.92.104

Whois 34.130.92.104

IP Abuse Reports for 34.130.92.104:

This IP address has been reported a total of 12 times from 9 distinct sources. 34.130.92.104 was first reported on June 14th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-06-15 10:08:01 (4 days ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-15 03:01:47 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 34.130.92.104 (104.92.130.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.130.92.104 (104.92.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:01:43.598191 2026] [security2:error] [pid 6092:tid 6092] [client 34.130.92.104:51198] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|newsite.praemiumtech.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "newsite.praemiumtech.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai9rFySrv2BvdfdjGByOIAAAABw"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 22:31:14 (4 days ago)	(mod_security) mod_security (id:210730) triggered by 34.130.92.104 (104.92.130.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.130.92.104 (104.92.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:31:08.637007 2026] [security2:error] [pid 32692:tid 32692] [client 34.130.92.104:54438] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.curts.net.greighhouse.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.curts.net.greighhouse.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai8rrDR8XcII9gGBtFJjKwAAAB0"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-14 22:30:13 (4 days ago)	Multiple, malicious web requests detected	Port Scan Hacking
Anonymous	2026-06-14 16:32:13 (5 days ago)	[email.tmg.gr] httpd-suspicious-path: sites=global; logs=/var/log/httpd/access_log; samples=/actuato ... show more [email.tmg.gr] httpd-suspicious-path: sites=global; logs=/var/log/httpd/access_log; samples=/actuator/heapdump \| /api/actuator/configprops \| /actuator/httptrace show less	Hacking Web App Attack
🇫🇷 dynamix	2026-06-14 07:41:45 (5 days ago)	Multiple WAF Violations	Web App Attack
🇺🇸 mnsf	2026-06-14 07:07:52 (5 days ago)	Scanning/Probing (61) Request Overload (427)	Brute-Force Web App Attack
🇬🇧 thetomtaylor.co.uk	2026-06-14 06:05:03 (5 days ago)	Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa01]	Hacking Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 05:49:43 (5 days ago)	(mod_security) mod_security (id:210730) triggered by 34.130.92.104 (104.92.130.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.130.92.104 (104.92.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 01:49:38.508893 2026] [security2:error] [pid 20845:tid 20845] [client 34.130.92.104:46024] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|thelotsmokehouse.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thelotsmokehouse.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai5A8gTlGv8C6FUfp2BUJQAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-06-14 04:10:03 (5 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 LRob.fr	2026-06-14 03:30:12 (5 days ago)	Repeated 403 errors, blocked by Fail2ban in custom-403 jail	Bad Web Bot
🇬🇧 consul.to	2026-06-14 01:45:18 (5 days ago)	Web attack/malicious scanning detected	Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇬 213.35.107.21

🇰🇷 211.178.247.182

🇭🇰 199.45.154.142

🇺🇸 147.185.132.198

🇵🇱 87.251.64.158

🇮🇷 46.143.100.72

🇳🇱 192.142.24.47

🇺🇸 147.185.132.61

🇺🇸 20.64.96.40

🇳🇱 5.187.35.26

🇱🇧 213.204.93.111

🇨🇳 180.76.171.14

🇧🇷 177.11.17.179

🇫🇷 91.231.89.108

🇫🇷 88.167.110.98

🇿🇲 41.63.62.103

🇬🇧 31.14.254.39

🇺🇸 20.64.106.18

🇷🇺 5.255.231.7

🇺🇸 185.226.196.15