AbuseIPDB » 34.20.170.123
34.20.170.123
This IP was reported 11 times. Confidence of
Abuse
is 66% : ?
ISP
Google LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS396982
Hostname(s)
123.170.20.34.bc.googleusercontent.com
Domain Name
google.com
Country
🇺🇸
United States of America
City
Los Angeles, California
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 34.20.170.123 :
This IP address has been reported a total of
11
times from
10 distinct
sources.
34.20.170.123 was first reported on
September 11th 2026 , and the most recent report was
2 hours ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
TPI-Abuse
2026-09-11 17:44:20
(2 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.20.170.123 (123.170.20.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.20.170.123 (123.170.20.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 13:44:13.284558 2026] [security2:error] [pid 21284:tid 21284] [client 34.20.170.123:58150] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||megapct.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "megapct.com"] [uri "/z9x8c7v6b5-debug-trigger-megapct.com"] [unique_id "aqQ97fCSUSM5cB4XH95rVAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
COMAITE
2026-09-11 17:29:57
(2 hours ago)
Common web attack from 34.20.170.123.
Web App Attack
🇺🇸
mnsf
2026-09-11 17:05:44
(3 hours ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇨🇭
zynex
2026-09-11 17:04:45
(3 hours ago)
URL Probing: /.env
Web App Attack
🇫🇷
masterguru
2026-09-11 16:42:55
(3 hours ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-195)
show less
Hacking
🇺🇸
WellSpring
2026-09-11 16:35:35
(3 hours ago)
good bot honeypot on medicalpeers.com/media../.env — WellSpr.ing/NetSentinel civic-AI security layer
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-11 16:34:08
(3 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.20.170.123 (123.170.20.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.20.170.123 (123.170.20.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 12:34:00.569746 2026] [security2:error] [pid 6548:tid 6548] [client 34.20.170.123:36156] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||medicalexchangeasinc.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "medicalexchangeasinc.com"] [uri "/rclone.conf"] [unique_id "aqQteLvBLAczgabXdQR-SAAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-11 16:28:38
(3 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇮🇹
VHosting
2026-09-11 16:00:05
(4 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-09-11 15:58:56
(4 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
micropedro
2026-09-11 14:32:40
(5 hours ago)
3 incidents: web scanning/attack. Detected: 2026-09-11 10:32 UTC. Triggers: port-trap,non-public-por ...
show more
3 incidents: web scanning/attack. Detected: 2026-09-11 10:32 UTC. Triggers: port-trap,non-public-port,firewall-http.
show less
Port Scan
Web App Attack
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: