JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.84.80.49

34.84.80.49 was found in our database!

This IP was reported 70 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	49.80.84.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.84.80.49

Whois 34.84.80.49

IP Abuse Reports for 34.84.80.49:

This IP address has been reported a total of 70 times from 56 distinct sources. 34.84.80.49 was first reported on July 19th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Matthew Ping	2026-07-22 18:34:50 (2 days ago)	ModSecurity rule 949110 triggered on wp1. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇮🇩 David Koswari	2026-07-22 05:09:00 (3 days ago)	REQ_BLOCKED_SECURITY	DDoS Attack FTP Brute-Force Ping of Death Port Scan Hacking SQL Injection Spoofing Brute-Force Bad Web Bot Exploited Host Web App Attack SSH IoT Targeted
🇮🇳 evicky2002	2026-07-21 06:00:00 (4 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
Anonymous	2026-07-20 16:32:56 (4 days ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇺🇸 TPI-Abuse	2026-07-20 13:35:22 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.84.80.49 (49.80.84.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.84.80.49 (49.80.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 09:35:16.468289 2026] [security2:error] [pid 26720:tid 26720] [client 34.84.80.49:57272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.indiahouseportland.com"] [uri "/.git/HEAD"] [unique_id "al4kFDSOOZ2MLVglszLG2wAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇮🇩 Burayot	2026-07-20 13:18:00 (5 days ago)	LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.84.80.49 (JP/Japan/49.80.84.34.bc ... show more LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.84.80.49 (JP/Japan/49.80.84.34.bc.googleusercontent.com): 2 in the last 3600 secs show less	Web App Attack
🇧🇪 taivas.nl	2026-07-20 12:32:11 (5 days ago)	Bad_requests	Bad Web Bot
🇫🇷 mrcrassi	2026-07-20 12:23:29 (5 days ago)	Triggered Cloudflare WAF (firewallManaged) from JP. Action taken: BLOCK Protocol: HTTP/2 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from JP. Action taken: BLOCK Protocol: HTTP/2 (GET method) Endpoint: /firebase-config.json UA: Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
Anonymous	2026-07-20 11:48:27 (5 days ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
🇩🇪 raph	2026-07-20 11:46:46 (5 days ago)	[PROTECTED PATHS] crawler credentials.ini, aws.ini, aws.yml, etc.	Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-07-20 11:38:30 (5 days ago)	Accessed trap at '/.gitlab-ci.yml'	Web App Attack
🇺🇸 TPI-Abuse	2026-07-20 11:16:10 (5 days ago)	(mod_security) mod_security (id:210730) triggered by 34.84.80.49 (49.80.84.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210730) triggered by 34.84.80.49 (49.80.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 07:16:07.396185 2026] [security2:error] [pid 30567:tid 30588] [client 34.84.80.49:37794] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.fishrapper.com\|F\|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.fishrapper.com"] [uri "/rclone.conf"] [unique_id "al4Dd49WYiiVUR1Xkg0OBQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-07-20 10:45:06 (5 days ago)	20 attempts against mh-misbehave-ban on tilia	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-07-20 10:15:08 (5 days ago)	Bot / scanning and/or hacking attempts: GET /.aws/credentials HTTP/2.0, GET /api/v1/config HTTP/2.0, ... show more Bot / scanning and/or hacking attempts: GET /.aws/credentials HTTP/2.0, GET /api/v1/config HTTP/2.0, GET /config.json HTTP/2.0, GET /firebase-config.json HTTP/2.0, GET /login HTTP/2.0, GET /api/health HTTP/2.0, GET /api/env HTTP/2.0, GET /.env.example HTTP/2.0, GET /api/config HTTP/2.0, GET /api/v2/config HTTP/2.0, GET /.git/config HTTP/2.0, GET /.aws/config HTTP/2.0 show less	Hacking Web App Attack
🇩🇪 neckaralb-admin.de	2026-07-20 09:55:27 (5 days ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack

Showing 1 to 15 of 70 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 195.184.76.77

🇳🇱 195.178.110.227

🇧🇷 179.185.242.173

🇹🇭 165.154.51.193

🇦🇴 162.158.252.135

🇱🇸 154.66.109.228

🇺🇸 154.29.232.131

🇺🇸 147.185.132.96

🇺🇸 147.185.132.19

🇳🇱 91.92.42.34

🇷🇴 80.94.92.179

🇺🇸 68.183.29.216

🇪🇸 67.218.250.26

🇩🇪 64.89.163.90

🇳🇱 45.148.10.152

🇬🇧 35.203.210.59

🇳🇱 23.176.184.152

🇧🇩 202.37.47.134

🇧🇴 190.181.4.12

🇹🇭 118.27.147.93