JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

Due to resource limits, we cannot accept bitmasks wider than ffff:ffff:ffff:ffff:: at this time. However, you can track the range using Range Alerts .

AbuseIPDB » 34.97.39.106

34.97.39.106 was found in our database!

This IP was reported 34 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	106.39.97.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.97.39.106

Whois 34.97.39.106

IP Abuse Reports for 34.97.39.106:

This IP address has been reported a total of 34 times from 28 distinct sources. 34.97.39.106 was first reported on October 15th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 consul.to	2026-10-16 19:49:41 (3 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 kosada.com	2026-10-16 18:55:29 (4 hours ago)	Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla ... show more Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36") show less	Web App Attack
🇳🇱 Site.eu	2026-10-16 17:35:38 (5 hours ago)	Excessive 404/403 errors	Brute-Force
Anonymous	2026-10-16 17:25:01 (5 hours ago)	suspicious request in access.log	Web App Attack
🇿🇦 conure.sh	2026-10-16 13:32:00 (9 hours ago)	csagent: score 21.5: 404 noise floor x6, secrets grab x2; 1 domain(s) in 1s	Web App Attack
🇩🇪 4server	2026-10-16 13:18:03 (9 hours ago)	[FriOct1615:17:57.3153612026][security2:error][pid1228814:tid1228929][client34.97.39.106:0]ModSecuri ... show more [FriOct1615:17:57.3153612026][security2:error][pid1228814:tid1228929][client34.97.39.106:0]ModSecurity:Accessdeniedwithcode403$phase2$.Patternmatch\"$\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\\\\\\\\\$\\|.\\)\\\\\\\\\)\\|\\\\\\\\{.\\\\\\\\\}\)\\|[\<\>]\\\\\\\\$.\\\\\\\\\$\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$$\(41\271$\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require$child_process$.execsync$echo\$\(\(41\271$\)\\|base64-w0\).tostring.trimthrowobject.assign$newerror\(next_redirect${digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"www.bozza.avcolor.ch\"][uri\"/\"][unique_id\"atIkBQFm19cKeMd-4LAxFwAAAYQ\"] show less	Port Scan Brute-Force Web App Attack
🇩🇪 loebas	2026-10-16 12:23:37 (10 hours ago)	[4xx]Probing for non existant files, or client not authorized	Hacking Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 11:39:01 (11 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.39.106 (106.39.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.39.106 (106.39.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 07:38:54.191617 2026] [security2:error] [pid 26786:tid 26810] [client 34.97.39.106:54180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.boxvalleyrockers.com.workconfident.com"] [uri "/.git/config"] [unique_id "atIMzgPr2in7HEMKp4l-_gAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 10:08:11 (12 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.39.106 (106.39.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.39.106 (106.39.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 06:08:07.983439 2026] [security2:error] [pid 1626:tid 1626] [client 34.97.39.106:37972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.box903.com.redondotile.com"] [uri "/.git/config"] [unique_id "atH3h9go9NIdQoIcbVECqwAAAAs"] show less	Brute-Force Bad Web Bot Web App Attack
🇧🇪 madeit	2026-10-16 09:00:04 (14 hours ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-10-16 08:30:08 (14 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.39.106 (106.39.97.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.97.39.106 (106.39.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 04:30:01.302926 2026] [security2:error] [pid 21555:tid 21555] [client 34.97.39.106:54604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bowdens-landingcom.draindoctor.us"] [uri "/.git/config"] [unique_id "atHgiRux0YgwWoP57dnf4gAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 francelink.fr	2026-10-16 08:03:13 (14 hours ago)	Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-16T07:58:42.000Z.	Web App Attack
🇳🇱 Mangelot Hosting	2026-10-16 07:52:07 (15 hours ago)	(modsec_attack) srv201 ModSecurity attack 34.97.39.106 (JP/Japan/106.39.97.34.bc.googleusercontent.c ... show more (modsec_attack) srv201 ModSecurity attack 34.97.39.106 (JP/Japan/106.39.97.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇳🇱 Alt255	2026-10-16 07:36:53 (15 hours ago)	[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ... show more [ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.97.39.106 - - \[16/Oct/2026:09:36:31 +0200\] "GET /.git/config HTTP/1.1" 301 556 "-" "Mozilla/5.0 $Windows NT 10.0\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-10-16 07:29:55 (15 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.97.39.106 (JP/Japan/106.39.97.34.bc. ... show more (mod_security) mod_security triggered on hostname [redacted] 34.97.39.106 (JP/Japan/106.39.97.34.bc.googleusercontent.com) show less	SQL Injection

Showing 1 to 15 of 34 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 177.200.149.5

🇫🇮 147.185.133.83

🇺🇸 109.105.210.67

🇫🇷 91.196.152.60

🇨🇦 85.217.149.9

🇧🇪 34.34.160.116

🇺🇸 20.84.74.141

🇨🇳 218.86.173.174

🇫🇷 185.177.72.31

🇵🇱 185.25.148.24

🇺🇦 146.120.175.131

🇺🇸 99.174.110.168

🇷🇴 92.118.39.49

🇱🇹 62.60.134.212

🇭🇰 42.200.60.186

🇺🇸 18.145.230.71

🇮🇹 217.26.179.9

🇺🇸 198.12.118.125

🇹🇳 197.9.91.243

🇬🇧 178.128.168.88