JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.97.110.4

Neutral Activity

Abuse Confidence Score

0% Low Risk

59 reports

36 reporters · latest 9 months ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 4.110.97.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇯🇵 Japan
City: Osaka, Osaka

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

34.97.110.4 has been reported 59 times. The most recent report is from 9 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

59 from 36 distinct reporters

First reported

January 26th 2026

Most recent report

9 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 AvonleaConsulting	2026-02-01 23:58:43 UTC · (9 months ago)	Attempts to probe web pages for vulnerable PHP or other applications	Web App Attack
Anonymous	2026-02-01 23:18:52 UTC · (9 months ago)	"GET //.env HTTP/1.1"	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-01 18:48:34 UTC · (9 months ago)	(mod_security) mod_security (id:210492) triggered by 34.97.110.4 (4.110.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 13:48:27.791575 2026] [security2:error] [pid 26405:tid 2640 ... show more (mod_security) mod_security (id:210492) triggered by 34.97.110.4 (4.110.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 13:48:27.791575 2026] [security2:error] [pid 26405:tid 26405] [client 34.97.110.4:50449] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powerkiteforum.com"] [uri "/.env"] [unique_id "aX-f-zMKAK8KVCGCqiyA3wAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-02-01 18:34:57 UTC · (9 months ago)	git/env leak probe	Web App Attack
🇩🇪 on-com	2026-02-01 18:34:20 UTC · (9 months ago)	URL scan	Brute-Force Web App Attack
🇸🇬 securejdprop	2026-02-01 18:33:21 UTC · (9 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET INFO Request to Hidden Environment File - Inbound). Ip 34.97.110.4 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-02-01 18:33:19.884546 ... show more This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET INFO Request to Hidden Environment File - Inbound). Ip 34.97.110.4 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-02-01 18:33:19.884546694 +0000 UTC show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-02-01 17:58:43 UTC · (9 months ago)	(mod_security) mod_security (id:210492) triggered by 34.97.110.4 (4.110.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 12:58:39.789641 2026] [security2:error] [pid 8400:tid 8400] ... show more (mod_security) mod_security (id:210492) triggered by 34.97.110.4 (4.110.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 12:58:39.789641 2026] [security2:error] [pid 8400:tid 8400] [client 34.97.110.4:50616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sra-ep.com"] [uri "/.env"] [unique_id "aX-UT9k6Kw4kjPtqwR_kSQAAAA4"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 iNetWorker	2026-02-01 17:29:12 UTC · (9 months ago)	trolling for resource vulnerabilities	Web App Attack
🇵🇱 sefinek.net	2026-02-01 17:23:58 UTC · (9 months ago)	Triggered Cloudflare WAF (firewallCustom) from JP. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: //.env UA: Go-http-client/1.1 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB	Bad Web Bot
🇺🇸 TPI-Abuse	2026-02-01 17:20:27 UTC · (9 months ago)	(mod_security) mod_security (id:210492) triggered by 34.97.110.4 (4.110.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 12:20:22.946491 2026] [security2:error] [pid 19994:tid 1999 ... show more (mod_security) mod_security (id:210492) triggered by 34.97.110.4 (4.110.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 12:20:22.946491 2026] [security2:error] [pid 19994:tid 19994] [client 34.97.110.4:49601] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dismain.com"] [uri "/.env"] [unique_id "aX-LVrSp-g2QGoX7ttD07AAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇭🇳 unph	2026-02-01 17:06:32 UTC · (9 months ago)	Intento de acceso sospechoso en el login de WordPress	Brute-Force
🇺🇸 rdpguard.com	2026-02-01 17:02:28 UTC · (9 months ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇺🇦 URAN Publishing Service	2026-02-01 16:48:43 UTC · (9 months ago)	34.97.110.4 - - [01/Feb/2026:18:48:42 +0200] "GET //.env HTTP/1.1" 404 281 "-" "Go-http-client/1.1" ...	Web App Attack
🇺🇸 TPI-Abuse	2026-02-01 16:24:58 UTC · (9 months ago)	(mod_security) mod_security (id:210492) triggered by 34.97.110.4 (4.110.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 11:24:52.068350 2026] [security2:error] [pid 26370:tid 2637 ... show more (mod_security) mod_security (id:210492) triggered by 34.97.110.4 (4.110.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 01 11:24:52.068350 2026] [security2:error] [pid 26370:tid 26370] [client 34.97.110.4:59935] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "strawusa.com"] [uri "/.env"] [unique_id "aX9-VEyuF_zl_4N73zcYnQAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 OK	2026-02-01 16:10:02 UTC · (9 months ago)	HTTP/HTTPS	Hacking Web App Attack

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 2a01:4020:2:b:102::5cc

🇳🇱 2a01:4020:2:b:102::5aa

🇳🇱 2a01:4020:2:b:102::3ec

🇫🇮 216.40.74.111

🇪🇨 200.25.38.182

🇺🇸 185.12.36.134

🇹🇷 178.210.161.57

🇺🇸 172.252.205.59

🇺🇸 172.252.115.127

🇺🇸 172.121.149.225

🇺🇸 170.106.72.178

🇻🇳 152.32.249.95

🇩🇿 105.96.53.240

🇺🇦 93.171.247.136

🇺🇸 69.246.194.251

🇸🇦 51.36.232.24

🇺🇸 23.230.170.208

🇺🇸 18.97.19.148

🇬🇧 2a06:4880:2000::3e

🇳🇱 2a01:4020:2:b:102::1a6