JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.153.203.244

34.153.203.244 was found in our database!

This IP was reported 20 times. Confidence of Abuse is 60%: ?

60%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	244.203.153.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.153.203.244

Whois 34.153.203.244

IP Abuse Reports for 34.153.203.244:

This IP address has been reported a total of 20 times from 14 distinct sources. 34.153.203.244 was first reported on September 1st 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-17 03:00:47 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 34.153.203.244 (244.203.153.34.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 34.153.203.244 (244.203.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 23:00:43.959845 2026] [security2:error] [pid 7439:tid 7439] [client 34.153.203.244:56146] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.gadgeteer.net\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.gadgeteer.net"] [uri "/backup.sql"] [unique_id "aqtX2yVWyO81qtMeHZ5ghwAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-17 00:18:11 (1 week ago)	(mod_security) mod_security (id:210730) triggered by 34.153.203.244 (244.203.153.34.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 34.153.203.244 (244.203.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 20:18:04.239593 2026] [security2:error] [pid 3736:tid 3736] [client 34.153.203.244:55470] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ftp.dealandriaproperties.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ftp.dealandriaproperties.com"] [uri "/backup.sql"] [unique_id "aqsxvIzgO9QpFEiWM43h3AAAADU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 01:42:24 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.153.203.244 (244.203.153.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.153.203.244 (244.203.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 14 21:42:16.601740 2026] [security2:error] [pid 11314:tid 11314] [client 34.153.203.244:51078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.pcmec.com"] [uri "/.htaccess"] [unique_id "aqiieAmZhupA4dWZcNe_YgAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇱🇻 garmtech.com	2026-09-14 11:35:31 (1 week ago)	Attempted access to sensitive endpoint (/.vscode/mcp.json) detected. Automated scan or unauthorized ... show more Attempted access to sensitive endpoint (/.vscode/mcp.json) detected. Automated scan or unauthorized probing. show less	Web App Attack
🇺🇸 IndigoRidge	2026-09-11 19:55:12 (1 week ago)	34.153.203.244 - - [11/Sep/2026:15:55:11 -0400] "GET /dump.sql HTTP/1.1" 500 5330 "-" "Mozilla/5.0 ( ... show more 34.153.203.244 - - [11/Sep/2026:15:55:11 -0400] "GET /dump.sql HTTP/1.1" 500 5330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.153.203.244 - - [11/Sep/2026:15:55:11 -0400] "GET /backup.tar.gz HTTP/1.1" 500 5330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.153.203.244 - - [11/Sep/2026:15:55:11 -0400] "GET /public_html.zip HTTP/1.1" 500 5330 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" ... show less	Web App Attack
Anonymous	2026-09-10 03:23:28 (2 weeks ago)		DNS Compromise DDoS Attack
🇩🇪 Hazzard	2026-09-09 09:50:09 (2 weeks ago)	(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)	SQL Injection
🇳🇱 BlueWire Hosting	2026-09-08 21:38:16 (2 weeks ago)	Probing websites for vulnerabilities	Web App Attack SQL Injection
🇦🇹 Tobias Gion	2026-09-08 01:01:48 (2 weeks ago)		Bad Web Bot Web App Attack
Anonymous	2026-09-06 10:41:17 (2 weeks ago)	34.153.203.244 - - [06/Sep/2026:12:41:16 +0200] "GET /backup.zip HTTP/1.1" 404 548 "-" "Mozilla/5.0 ... show more 34.153.203.244 - - [06/Sep/2026:12:41:16 +0200] "GET /backup.zip HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.153.203.244 - - [06/Sep/2026:12:41:16 +0200] "GET /dump.sql HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" 34.153.203.244 - - [06/Sep/2026:12:41:16 +0200] "GET /backup.tar.gz HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36" show less	Web App Attack
🇳🇱 Cloud86 B.V.	2026-09-06 05:24:02 (2 weeks ago)	categories: DDoS Attack	DDoS Attack
🇺🇸 TPI-Abuse	2026-09-06 05:23:23 (2 weeks ago)	(mod_security) mod_security (id:210730) triggered by 34.153.203.244 (244.203.153.34.bc.googleusercon ... show more (mod_security) mod_security (id:210730) triggered by 34.153.203.244 (244.203.153.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 01:23:16.972046 2026] [security2:error] [pid 4449:tid 4449] [client 34.153.203.244:48366] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|travelto.anthonyjoseph.us\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "travelto.anthonyjoseph.us"] [uri "/dump.sql"] [unique_id "apz4xNTFpe8qgUYHmNBwMQAAADQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 interbiznw.com	2026-09-06 04:31:18 (2 weeks ago)	fail2ban-ban	Hacking Brute-Force Exploited Host Web App Attack
🇮🇹 VHosting	2026-09-04 23:40:04 (2 weeks ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇱 Cloud86 B.V.	2026-09-04 13:42:02 (2 weeks ago)	categories: DDoS Attack	DDoS Attack

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.241

🇮🇳 202.63.117.90

🇵🇪 200.4.214.162

🇬🇧 193.163.125.111

🇦🇷 186.13.124.32

🇩🇪 165.245.255.43

🇬🇷 149.102.246.24

🇸🇦 142.154.9.62

🇿🇲 102.23.122.235

🇬🇧 87.236.176.106

🇫🇷 85.217.140.45

🇺🇦 62.122.202.46

🇫🇮 46.8.178.165

🇨🇭 45.85.93.127

🇧🇷 201.28.234.10

🇧🇷 190.115.84.25

🇮🇳 188.208.141.252

🇲🇽 187.191.64.33

🇮🇶 151.244.156.81

🇩🇪 145.253.111.122