AbuseIPDB » 34.140.220.57

34.140.220.57 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 22%: ?

22%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	57.220.140.34.bc.googleusercontent.com
Domain Name	google.com
Country	Belgium
City	Brussels, Brussels Capital

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 34.140.220.57

Whois 34.140.220.57

IP Abuse Reports for 34.140.220.57:

This IP address has been reported a total of 10 times from 7 distinct sources. 34.140.220.57 was first reported on December 6th 2024, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
www.Examensfragen.de	2024-12-15 17:24:47 (1 month ago)		Web Spam Bad Web Bot
Progetto1	2024-12-13 17:24:02 (1 month ago)	Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack
FeG Deutschland	2024-12-12 00:25:42 (1 month ago)	Looking for CMS/PHP/SQL vulnerablilities - 1237	Exploited Host Web App Attack
TPI-Abuse	2024-12-11 10:00:10 (1 month ago)	(mod_security) mod_security (id:210381) triggered by 34.140.220.57 (57.220.140.34.bc.googleuserconte ... show more(mod_security) mod_security (id:210381) triggered by 34.140.220.57 (57.220.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 11 05:00:06.261282 2024] [security2:error] [pid 18422:tid 18422] [client 34.140.220.57:41236] [client 34.140.220.57] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|www.wisecoautomotive.com\|F\|4"] [data "REQUEST_URI=/js/%url%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.wisecoautomotive.com"] [uri "/js/%url%"] [unique_id "Z1lipkKVyCyWyg2l4JnboQAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
MAGIC	2024-12-08 04:00:23 (1 month ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
TPI-Abuse	2024-12-08 01:18:51 (1 month ago)	(mod_security) mod_security (id:210381) triggered by 34.140.220.57 (57.220.140.34.bc.googleuserconte ... show more(mod_security) mod_security (id:210381) triggered by 34.140.220.57 (57.220.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 07 20:18:45.634242 2024] [security2:error] [pid 25234:tid 25234] [client 34.140.220.57:57950] [client 34.140.220.57] ModSecurity: Access denied with code 403 (phase 2). Invalid URL Encoding: Non-hexadecimal digits used at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "82"] [id "210381"] [rev "6"] [msg "COMODO WAF: URL Encoding Abuse Attack Attempt\|\|www.hvacmechanalysis.com\|F\|4"] [data "REQUEST_URI=/wp-content/themes/enfold/js/aviapopup/%url%"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.hvacmechanalysis.com"] [uri "/wp-content/themes/enfold/js/aviapopup/%url%"] [unique_id "Z1Tz9ZWU4hfWhyuIeMwuggAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
NXTwoThou	2024-12-07 22:18:11 (1 month ago)	/web/crm/start	Web App Attack
TPI-Abuse	2024-12-07 17:43:14 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 34.140.220.57 (57.220.140.34.bc.googleuserconte ... show more(mod_security) mod_security (id:210730) triggered by 34.140.220.57 (57.220.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Dec 07 12:43:06.829542 2024] [security2:error] [pid 24232:tid 24232] [client 34.140.220.57:39984] [client 34.140.220.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|new-bethel-baptist-church.com\|F\|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "new-bethel-baptist-church.com"] [uri "/home/tancedi1/new-bethel-baptist-church.com"] [unique_id "Z1SJKiRmQ5VjBd9p9H7hYgAAACA"] show less	Brute-Force Bad Web Bot Web App Attack
backslash	2024-12-07 01:55:03 (1 month ago)	block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8	Bad Web Bot
TPI-Abuse	2024-12-06 18:28:26 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 34.140.220.57 (57.220.140.34.bc.googleuserconte ... show more(mod_security) mod_security (id:210730) triggered by 34.140.220.57 (57.220.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Dec 06 13:28:23.079842 2024] [security2:error] [pid 5770:tid 5770] [client 34.140.220.57:37372] [client 34.140.220.57] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|benjaminshaw.com\|F\|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "benjaminshaw.com"] [uri "/baggywrinkle/WS_FTP.LOG"] [unique_id "Z1NCR2sTDnCmZR1zS5XmjgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack