JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.187.103.117

34.187.103.117 was found in our database!

This IP was reported 98 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	117.103.187.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇳🇱 Netherlands
City	Groningen, Groningen

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.187.103.117

Whois 34.187.103.117

IP Abuse Reports for 34.187.103.117:

This IP address has been reported a total of 98 times from 65 distinct sources. 34.187.103.117 was first reported on August 19th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 SOC [GOLINE SA]	2026-08-24 13:56:25 (1 hour ago)	[RoutePulse \| 2026-08-24T13:56:25Z \| RTBH-INJECTED] ATTACK CLASS: reconnaissance SOURCE: 34.187.103. ... show more [RoutePulse \| 2026-08-24T13:56:25Z \| RTBH-INJECTED] ATTACK CLASS: reconnaissance SOURCE: 34.187.103.117 (117.103.187.34.bc.googleusercontent.com) · AS396982 Google LLC · The Netherlands EVIDENCE: Multi-source convergence on threat indicators INTEL: AbuseIPDB 100% \| feeds: FortiGate IPS,FortiGate DoS Policy (fortigate01),IPsum Level 4 (very low FP) (3) \| RoutePulse score 97/100 CONVICTION: Tier 4, LLR 4.34 (multi-source SPRT) MITRE: T1046 Network Service Scanning, T1018 Remote System Discovery DETECTION: Conviction Engine SPRT + 14-detector ML stack (6-model weighted ensemble) + 5-pillar threat scoring ACTION: BGP null route injected at RoutePulse network edge show less	Port Scan
🇨🇭 SOC [GOLINE SA]	2026-08-24 12:04:08 (3 hours ago)	FortiGate detected brute force login attempt from IPv4 address 34.187.103.117	Brute-Force SSH
🇨🇭 SOC [GOLINE SA]	2026-08-24 11:12:32 (4 hours ago)	[RoutePulse \| 2026-08-24T11:12:31Z] ATTACK: Port Scan Horizontal (port 443) TARGET: 4 subnets: 185.5 ... show more [RoutePulse \| 2026-08-24T11:12:31Z] ATTACK: Port Scan Horizontal (port 443) TARGET: 4 subnets: 185.54.80.0/24, 185.54.81.0/24, 185.54.82.0/24 SOURCE: 34.187.103.117 (117.103.187.34.bc.googleusercontent.com) · AS396982 Google LLC · The Netherlands EVIDENCE: severity=warning · 2163 flows · 7.5 MB · 1024 distinct targets · port 443 INTEL: AbuseIPDB 100% (31 reports) \| RoutePulse score 13/100 MITRE: T1018 Remote System Discovery, T1046 Network Service Scanning DETECTION: sFlow/IPFIX flow analysis + 14-detector ML stack (6-model weighted ensemble) + threat-intel correlation ACTION: Pre-blackhole intelligence report (live monitoring continues) show less	Port Scan
🇩🇪 dispaisyenterprises	2026-08-24 05:57:54 (9 hours ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 8000 [1], 5173 [1], 8888 [1], 9443 ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 8000 [1], 5173 [1], 8888 [1], 9443 [1], 9090 [1], 9000 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 gadix	2026-08-24 04:59:45 (10 hours ago)	[24/Aug/2026:06:59:43.476723 +0200] aovPv93Yf1mAOcBZwD1jzAAAAAQ 34.187.103.117 47596 127.0.0.1 7081 ... show more [24/Aug/2026:06:59:43.476723 +0200] aovPv93Yf1mAOcBZwD1jzAAAAAQ 34.187.103.117 47596 127.0.0.1 7081 [24/Aug/2026:06:59:43.522591 +0200] aovPv8EO4i4rhEZx5gLLcgAAAAg 34.187.103.117 47620 127.0.0.1 7081 [24/Aug/2026:06:59:43.623286 +0200] aovPv93Yf1mAOcBZwD1jzQAAAAQ 34.187.103.117 47696 127.0.0.1 7081 ... show less	Web App Attack
🇩🇪 Blexyel	2026-08-24 04:31:46 (11 hours ago)	34.187.103.117 - - [24/Aug/2026:06:31:46 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 ... show more 34.187.103.117 - - [24/Aug/2026:06:31:46 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" "136.243.2.38" ... show less	Brute-Force Web App Attack
🇩🇪 edena	2026-08-24 04:31:30 (11 hours ago)	34.187.103.117 - - [24/Aug/2026:06:31:29 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 403 303 "-" "Mo ... show more 34.187.103.117 - - [24/Aug/2026:06:31:29 +0200] "GET /@fs/etc/passwd?raw?? HTTP/1.1" 403 303 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.187.103.117 - - [24/Aug/2026:06:31:29 +0200] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 403 303 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.187.103.117 - - [24/Aug/2026:06:31:29 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 403 303 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" ... show less	Web App Attack Bad Web Bot
🇺🇸 ersei.net	2026-08-24 03:25:53 (12 hours ago)	Web app exploiting	Web App Attack
🇳🇱 oisecnet	2026-08-23 21:01:49 (18 hours ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-08-23. 231 requests from this ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-08-23. 231 requests from this IP. show less	Port Scan Hacking Web App Attack
🇩🇪 simsung	2026-08-23 16:36:47 (22 hours ago)	34.187.103.117 - - [23/Aug/2026:16:36:46 +0000] "GET /.git/HEAD HTTP/1.1" 403 146 "http://57.129.47. ... show more 34.187.103.117 - - [23/Aug/2026:16:36:46 +0000] "GET /.git/HEAD HTTP/1.1" 403 146 "http://57.129.47.205:80/.git/HEAD" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" ... show less	Bad Web Bot
🇩🇪 D3vNu11	2026-08-23 16:07:44 (23 hours ago)	Level: (HIGH): Known Attacker via CitrixHoneypot IOC Country: The Netherlands 225x -> Target Country ... show more Level: (HIGH): Known Attacker via CitrixHoneypot IOC Country: The Netherlands 225x -> Target Country: Polen HTTPS show less	Hacking Web App Attack
🇵🇱 alianet	2026-08-23 16:01:46 (23 hours ago)	[Sun Aug 23 16:01:37.278763 2026] [proxy_fcgi:error] [pid 3163190:tid 3163262] [client 34.187.103.11 ... show more [Sun Aug 23 16:01:37.278763 2026] [proxy_fcgi:error] [pid 3163190:tid 3163262] [client 34.187.103.117:52754] AH01071: Got error 'Primary script unknown' [Sun Aug 23 16:01:37.301088 2026] [proxy_fcgi:error] [pid 3163228:tid 3163331] [client 34.187.103.117:52660] AH01071: Got error 'Primary script unknown' [Sun Aug 23 16:01:39.400057 2026] [proxy_fcgi:error] [pid 3410760:tid 3410805] [client 34.187.103.117:52774] AH01071: Got error 'Primary script unknown' [Sun Aug 23 16:01:39.641279 2026] [proxy_fcgi:error] [pid 3163228:tid 3163334] [client 34.187.103.117:52660] AH01071: Got error 'Primary script unknown' [Sun Aug 23 16:01:39.902759 2026] [proxy_fcgi:error] [pid 3163190:tid 3163257] [client 34.187.103.117:52744] AH01071: Got error 'Primary script unknown' [Sun Aug 23 16:01:43.225839 2026] [proxy_fcgi:error] [pid 3163190:tid 3163313] [client 34.187.103.117:52744] AH01071: Got error 'Primary script unknown' [Sun Aug 23 16:01:43.252846 2026] [proxy_fcgi:error] [pid 3163163:tid 3163244] [cl ... show less	Port Scan Web App Attack
🇩🇪 ghostwarriors	2026-08-23 13:20:08 (1 day ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MakoWish	2026-08-23 09:11:23 (1 day ago)	Fuzzing for misconfigured web servers.	Hacking Web App Attack
🇳🇱 Site.eu	2026-08-23 07:57:22 (1 day ago)	Excessive multi-domain requests	Brute-Force

Showing 1 to 15 of 98 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.241.239.202

🇹🇼 34.80.16.42

🇸🇬 206.189.153.118

🇦🇷 190.92.103.225

🇦🇷 190.92.101.250

🇦🇷 190.9.70.202

🇺🇸 107.174.25.194

🇺🇸 103.153.183.69

🇳🇱 89.21.67.175

🇸🇬 85.203.21.147

🇸🇬 85.203.21.118

🇰🇷 1.214.214.114

🇦🇷 190.89.237.196

🇦🇷 190.8.188.17

🇸🇬 165.154.29.144

🇨🇳 125.39.94.5

🇭🇰 119.237.15.136

🇰🇷 118.39.219.45

🇧🇩 104.28.240.85

🇮🇩 103.125.48.30