JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.162.40.213

34.162.40.213 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 59%: ?

59%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	213.40.162.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Columbus, Ohio

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.162.40.213

Whois 34.162.40.213

IP Abuse Reports for 34.162.40.213:

This IP address has been reported a total of 15 times from 11 distinct sources. 34.162.40.213 was first reported on April 24th 2024, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 Per-Erik Runebert	2026-06-15 08:39:30 (7 hours ago)	Excessive unauthorized requests	Hacking
🇳🇱 Site.eu	2026-06-15 05:05:40 (10 hours ago)	Excessive 404/403 errors	Brute-Force
🇦🇺 AWW-Admin	2026-06-14 21:33:02 (18 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.162.40.213 (US/United States/213.40. ... show more (mod_security) mod_security triggered on hostname [redacted] 34.162.40.213 (US/United States/213.40.162.34.bc.googleusercontent.com) show less	SQL Injection
🇳🇱 Cloud86 B.V.	2026-06-14 21:00:06 (18 hours ago)	categories: DDoS Attack	DDoS Attack
🇺🇸 TPI-Abuse	2026-06-14 20:55:37 (18 hours ago)	(mod_security) mod_security (id:210730) triggered by 34.162.40.213 (213.40.162.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.162.40.213 (213.40.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 16:55:29.715622 2026] [security2:error] [pid 24176:tid 24176] [client 34.162.40.213:43028] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|mindchill.net\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mindchill.net"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai8VQTOc6Px0O8RyJAbJ1gAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇪 SkyDancer	2026-06-14 16:25:48 (23 hours ago)	Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ... show more Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X). show less	Hacking Brute-Force
Anonymous	2026-06-14 12:30:12 (1 day ago)	34.162.40.213 - - [14/Jun/2026:14:30:11 +0200] "GET /backup.sql HTTP/1.1" 404 181 "-" "Mozilla/5.0 ( ... show more 34.162.40.213 - - [14/Jun/2026:14:30:11 +0200] "GET /backup.sql HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.119 Safari/537.36" 34.162.40.213 - - [14/Jun/2026:14:30:11 +0200] "GET /backup.tar.gz HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.79 Safari/537.36 Maxthon/5.2.7.2000" 34.162.40.213 - - [14/Jun/2026:14:30:11 +0200] "GET /backup.zip HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.87 Safari/537.36" show less	Web App Attack
🇮🇹 VHosting	2026-06-14 07:25:03 (1 day ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 06:35:55 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 34.162.40.213 (213.40.162.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.162.40.213 (213.40.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 02:35:51.751303 2026] [security2:error] [pid 13748:tid 13748] [client 34.162.40.213:36416] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|caonabo.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "caonabo.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai5Lx17inxpicF8kysPqagAAAEI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-14 04:19:34 (1 day ago)	(mod_security) mod_security (id:210730) triggered by 34.162.40.213 (213.40.162.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.162.40.213 (213.40.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 00:19:26.541916 2026] [security2:error] [pid 5129:tid 5129] [client 34.162.40.213:40510] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.zztp.z-mgmt.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.zztp.z-mgmt.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai4rzlPgR3PD4ZjTo5_3dgAAAFQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-06-13 20:39:47 (1 day ago)	{"level":"info","ts":1781383186.0613194,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1781383186.0613194,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.162.40.213","remote_port":"59640","client_ip":"34.162.40.213","proto":"HTTP/1.1","method":"GET","host":"update.update.lknmlkjilkjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/.env.backup","headers":{"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.000060505,"size":0,"status":308,"resp_headers":{"Content-Type":[],"Server":["Caddy"],"Connection":["close"],"Location":["https://update.update.lknmlkjilkjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/.env.backup"]}} {"level":"info","ts":1781383186.0751946,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.162.40.213","remote_port":"59 ... show less	DDoS Attack Web App Attack
🇪🇸 10dencehispahard SL	2024-04-24 08:02:29 (2 years ago)	Unauthorized login attempts [ wordpress-xmlrpc]	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-04-24 07:10:44 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 34.162.40.213 (213.40.162.34.bc.googleuserconte ... show more (mod_security) mod_security (id:225170) triggered by 34.162.40.213 (213.40.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 24 03:10:38.823345 2024] [security2:error] [pid 1012] [client 34.162.40.213:56872] [client 34.162.40.213] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.usaenquirer.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.usaenquirer.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ZiiwbldmaCGgLoQbJtdTzgAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 weblite	2024-04-24 06:56:44 (2 years ago)	WP_XMLRPC_ABUSE	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2024-04-24 06:55:19 (2 years ago)	(mod_security) mod_security (id:225170) triggered by 34.162.40.213 (213.40.162.34.bc.googleuserconte ... show more (mod_security) mod_security (id:225170) triggered by 34.162.40.213 (213.40.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Apr 24 02:55:16.756718 2024] [security2:error] [pid 18323] [client 34.162.40.213:53223] [client 34.162.40.213] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|www.travelwithsarahellen.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "www.travelwithsarahellen.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "Ziis1HPB4rXrk2L0NQVewQAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇴 2a02:a58:9a6b:a600:257b:ea15:f0de:5a45

🇺🇸 198.44.133.101

🇺🇦 185.68.18.52

🇧🇷 177.104.199.114

🇨🇳 163.179.39.100

🇮🇩 115.124.73.145

🇨🇳 114.106.173.37

🇮🇳 103.248.120.6

🇫🇷 91.196.152.26

🇺🇸 71.6.199.23

🇸🇬 45.78.198.199

🇨🇳 36.104.147.6

🇨🇳 1.30.16.218

🇩🇪 213.209.159.225

🇬🇹 181.78.49.81

🇧🇷 179.184.192.237

🇵🇭 161.49.89.39

🇺🇸 159.223.153.2

🇺🇸 142.93.192.75

🇮🇩 103.186.31.66