JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.127.66.197

34.127.66.197 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 71%: ?

71%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	197.66.127.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.127.66.197

Whois 34.127.66.197

IP Abuse Reports for 34.127.66.197:

This IP address has been reported a total of 19 times from 13 distinct sources. 34.127.66.197 was first reported on August 26th 2026, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 mnsf	2026-08-28 01:05:18 (4 days ago)	Too many Status 40X (12) Too many Status 50X (12) Scanning/Probing (72)	Brute-Force Web App Attack
🇩🇪 TheDjRider	2026-08-27 23:54:51 (5 days ago)	CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban tri ... show more CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-08-27T23:54:48.234252662Z. Context: http_status=404 show less	Web App Attack
🇳🇱 homeshowdomain.nl	2026-08-27 22:00:47 (5 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-26. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-08-27 19:19:36 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.127.66.197 (197.66.127.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.127.66.197 (197.66.127.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 15:19:31.866594 2026] [security2:error] [pid 6945:tid 6945] [client 34.127.66.197:46088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.abq4you.com.peterlundman.com"] [uri "/html/.git/config"] [unique_id "apCNwy8oICUYPZDqxWrr2QAAABk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 FeG Deutschland	2026-08-27 18:34:42 (5 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 13:46:48 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.127.66.197 (197.66.127.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.127.66.197 (197.66.127.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 09:46:42.718587 2026] [security2:error] [pid 18587:tid 18587] [client 34.127.66.197:60032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newlifeworshipcentre-gc.org"] [uri "/html/.git/config"] [unique_id "apA_wt2fwABnETk_hOJjzAAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-08-27 09:35:02 (5 days ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 09:12:05 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.127.66.197 (197.66.127.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.127.66.197 (197.66.127.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 05:11:57.677497 2026] [security2:error] [pid 18370:tid 18370] [client 34.127.66.197:43986] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.translation.cspminc.com"] [uri "/var/www/.git/config"] [unique_id "ao__XeecYSbVSjr9QUy9MgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 factor1	2026-08-27 05:36:18 (5 days ago)	CrowdSec at churndash Reports Abuse	Web App Attack
Anonymous	2026-08-27 05:00:03 (5 days ago)	suspicious request in access.log	Web App Attack
🇳🇱 e.fierstra	2026-08-27 03:31:23 (5 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 02:45:13 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.127.66.197 (197.66.127.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.127.66.197 (197.66.127.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 22:45:06.728004 2026] [security2:error] [pid 15435:tid 15435] [client 34.127.66.197:43006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.argcreativegroup.com"] [uri "/public/.git/config"] [unique_id "ao-kstw7RfubZL45NJxZdwAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-08-27 02:15:01 (5 days ago)	crowdsecurity/http-sensitive-files	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 01:57:14 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.127.66.197 (197.66.127.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.127.66.197 (197.66.127.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 21:57:07.617574 2026] [security2:error] [pid 1512505:tid 1512554] [client 34.127.66.197:57896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dubarch.com"] [uri "/src/.git/config"] [unique_id "ao-ZcxTc4rMtzfNxPbNGYwAAARE"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 dynamix	2026-08-27 00:35:57 (5 days ago)	Multiple WAF Violations	Web App Attack

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 220.167.233.7

🇨🇦 172.217.45.27

🇺🇸 162.216.149.30

🇸🇮 102.220.160.189

🇭🇰 35.220.167.161

🇷🇺 5.35.100.235

🇧🇷 205.210.31.241

🇳🇱 185.242.226.70

🇬🇧 185.216.145.166

🇺🇸 152.32.234.39

🇯🇵 152.32.145.49

🇫🇮 147.185.133.120

🇩🇪 147.90.209.131

🇺🇸 136.117.26.84

🇨🇳 116.179.37.91

🇲🇪 95.155.36.66

🇺🇸 91.230.168.239

🇷🇺 80.247.110.206

🇩🇪 65.111.31.42

🇺🇸 34.123.93.236