AbuseIPDB » 34.68.34.71

34.68.34.71 was found in our database!

This IP was reported 435 times. Confidence of Abuse is 86%: ?

86%

ISP	Mandiant, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	71.34.68.34.bc.googleusercontent.com
Domain Name	mandiant.com
Country	United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 34.68.34.71

Whois 34.68.34.71

IP Abuse Reports for 34.68.34.71:

This IP address has been reported a total of 435 times from 73 distinct sources. 34.68.34.71 was first reported on August 5th 2023, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
sdos.es	2025-03-26 09:48:57 (4 hours ago)	"URL file extension is restricted by policy - .com"	Web App Attack
TPI-Abuse	2025-03-25 09:23:55 (1 day ago)	(mod_security) mod_security (id:243930) triggered by 34.68.34.71 (71.34.68.34.bc.googleusercontent.c ... show more(mod_security) mod_security (id:243930) triggered by 34.68.34.71 (71.34.68.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Mar 25 05:23:48.153949 2025] [security2:error] [pid 4048:tid 4048] [client 34.68.34.71:40962] [client 34.68.34.71] ModSecurity: Access denied with code 403 (phase 2). Match of "rx ^(?:\\\\w+\\\\/[\\\\w\\\\-\\\\.]+)(?:;(?:charset=[\\\\w\\\\-]{1,18}\|boundary=[\\\\w\\\\-]+)?)?$" against "REQUEST_HEADERS:Content-Type" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "6752"] [id "243930"] [rev "2"] [msg "COMODO WAF: Remote code execution in Apache Struts versions 2.3.31 - 2.3.5 and 2.5 - 2.5.10 (CVE-2017-5638)\|\|autodiscover.stdavids-media.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "autodiscover.stdavids-media.com"] [uri "/"] [unique_id "Z-J2JEiiTMslHo8YI1slcgAAAB4"] show less	Brute-Force Bad Web Bot Web App Attack
sdos.es	2025-03-24 17:05:00 (1 day ago)	"Restricted File Access Attempt - Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"	Web App Attack
Anonymous	2025-03-24 00:32:43 (2 days ago)	Aggressive web scan	Web App Attack
sdos.es	2025-03-23 07:56:38 (3 days ago)	"Illegal Content-Type header - ${${thed:6vlf:-j}${wqfx:8r:-n}${0m:rwb:-d}${cyfk:-i}${af:cb:eipo:-:}$ ... show more"Illegal Content-Type header - ${${thed:6vlf:-j}${wqfx:8r:-n}${0m:rwb:-d}${cyfk:-i}${af:cb:eipo:-:}${p91x:-l}${n:d0j:-d}${gjt:j:-a}${x:6zwi:g:-p}${gwo:lk2:02:-:}${sqi:-/}${c:wr:-/}${6yt:2t:0r3:-c}${y39:-t}${y3t:-l}${niet:-0}${hs9:gu9:7gtr:-c}${7dp:m2rt:ke:--}${${x:3:06:-s}${7tz:1bn:q:-y}${h4q:-s}${5:-:}${83yt:-j}${b:-a}${1doj:-v}${bdjw:k1nj:ywm:-a}${mlwy:-.}${gh5z:xb67:48ax:-v}${1:-e}${8:8iy:-r}${oq:b:j:-s}${1:cx1z:q9eh:-i}${a14l:cuy:-o}${8i:98x:8123:-n}}${q:-.}${r6:1w:4:-f}${in:-e}${7:xs:-2}${tfu:v:bxhp:-b}${mgj:p:-d}${8b:-6}${znd:-b..." show less	Web App Attack
Anonymous	2025-03-22 15:22:43 (3 days ago)	Aggressive web scan	Web App Attack
Huettersen	2025-03-22 14:58:34 (3 days ago)	2025-03-22T14:58:34.171058Z 683548a2b3ad New connection: 34.68.34.71:10241 (10.89.0.2:2222) [session ... show more2025-03-22T14:58:34.171058Z 683548a2b3ad New connection: 34.68.34.71:10241 (10.89.0.2:2222) [session: 683548a2b3ad] 2025-03-22T14:58:34.295268Z fc5aa0f79ba4 New connection: 34.68.34.71:10242 (10.89.0.2:2222) [session: fc5aa0f79ba4] show less	Brute-Force SSH
sdos.es	2025-03-22 00:05:31 (4 days ago)	"Restricted File Access Attempt - Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"	Web App Attack
Anonymous	2025-03-21 02:32:51 (5 days ago)	Aggressive web scan	Web App Attack
sdos.es	2025-03-20 12:12:22 (6 days ago)	"Illegal Content-Type header - ${${g:-j}${jy9:-n}${fu:-d}${23:0:-i}${f074:o27:-:}${v4a:qe3j:uv42:-l} ... show more"Illegal Content-Type header - ${${g:-j}${jy9:-n}${fu:-d}${23:0:-i}${f074:o27:-:}${v4a:qe3j:uv42:-l}${u:s:-d}${3v8y:-a}${ue5:-p}${yi3r:qd:gv:-:}${t:-/}${m:ksbf:-/}${zlh:t:db6:-c}${h:-t}${y:pi7:t7op:-l}${xb6:koi:-0}${kbg:-c}${xsk:ucq:--}${${q:z2fx:-s}${dyb:-y}${9ag:0:-s}${5p:-:}${2ia:-j}${8d:o:-a}${v4k:-v}${71mb:a5:u5:-a}${ebc:q0:5aq:-.}${5:-v}${i4l:x:dt:-e}${pk:-r}${o:dy:-s}${dwj:-i}${o:cgv3:-o}${w:-n}}${rec4:qj:pzqu:-.}${tnk:vi31:6h:-6}${vamc:ba:-5}${rf4:nf5h:r:-e}${158t:i:5:-2}${6tvg:-3}${j0:52v:f:-a}${dh:-d}${q4:8:-6}${m0:cdl:-7}${..." show less	Web App Attack
Anonymous	2025-03-20 00:47:53 (6 days ago)	Aggressive web scan	Web App Attack
Anonymous	2025-03-20 00:08:39 (6 days ago)	port=9090, indicator_type=scan	Port Scan
Anonymous	2025-03-18 12:27:44 (1 week ago)	Aggressive web scan	Web App Attack
NDCrawshaw	2025-03-18 00:00:00 (1 week ago)	Erroneous Connections to port(s) (8080, 5900, 8443, 138, 445, 1433, 20, 137, 21, 139, 22, 161, 23) ( ... show moreErroneous Connections to port(s) (8080, 5900, 8443, 138, 445, 1433, 20, 137, 21, 139, 22, 161, 23) (39 Events between 2025-03-18 00:00 and 2025-03-19 00:00) show less	Port Scan
Ukn0w1t	2025-03-17 16:19:46 (1 week ago)	Web Scanning: GET /.bzr HTTP/2.0 - User-Agent:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KH ... show moreWeb Scanning: GET /.bzr HTTP/2.0 - User-Agent:Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.88 Safari/537.36 show less	Brute-Force Web App Attack