JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.165.21.244

34.165.21.244 was found in our database!

This IP was reported 42 times. Confidence of Abuse is 63%: ?

63%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	244.21.165.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇮🇱 Israel
City	Tel Aviv, Tel Aviv

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.165.21.244

Whois 34.165.21.244

IP Abuse Reports for 34.165.21.244:

This IP address has been reported a total of 42 times from 28 distinct sources. 34.165.21.244 was first reported on September 15th 2026, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-21 07:36:19 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.165.21.244 (244.21.165.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.165.21.244 (244.21.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 03:36:13.265138 2026] [security2:error] [pid 1329:tid 1329] [client 34.165.21.244:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.distro.media"] [uri "/.git/config"] [unique_id "arDebRUNAGaYst35446JcQAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-09-21 01:16:33 (3 weeks ago)	csagent: score 20.0: secrets grab x2; 1 domain(s) in 1s	Web App Attack
🇩🇪 4server	2026-09-20 19:25:54 (3 weeks ago)	[SunSep2021:25:53.0467242026][security2:error][pid2476302:tid2476383][client34.165.21.244:0]ModSecur ... show more [SunSep2021:25:53.0467242026][security2:error][pid2476302:tid2476383][client34.165.21.244:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcalendars.creazione-siti-web-ticino.ch\"][uri\"/.env.bak\"][unique_id\"arAzQeot5Puh7prtdFwhuwAAAJA\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-20 12:14:31 (3 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.165.21.244 (244.21.165.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.165.21.244 (244.21.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 08:14:24.940325 2026] [security2:error] [pid 26907:tid 26907] [client 34.165.21.244:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.cloudex.click"] [uri "/.git/config"] [unique_id "aq_OIL0OTOsx2qvuRYl6-QAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇦🇺 rubixstudios	2026-09-20 09:13:02 (3 weeks ago)	Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360	DDoS Attack Brute-Force Web App Attack
🇩🇰 HostingGroup	2026-09-19 11:56:54 (3 weeks ago)	Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ... show more Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 24. First blocked: 2026-09-19. show less	Bad Web Bot Web App Attack
🇸🇪 vaia.cloud	2026-09-19 11:55:02 (3 weeks ago)	crowdsecurity/http-admin-interface-probing	Brute-Force Web App Attack
🇫🇷 Tilellit.PRO	2026-09-19 01:21:16 (4 weeks ago)	Malicious web traffic detected by CrowdSec	Hacking
Anonymous	2026-09-18 18:15:46 (4 weeks ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IL, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: IL, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇫🇷 Zundapper	2026-09-18 16:59:45 (4 weeks ago)	34.165.21.244 - - [18/Sep/2026:18:59:42 +0200] "GET /phpinfo HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11 ... show more 34.165.21.244 - - [18/Sep/2026:18:59:42 +0200] "GET /phpinfo HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.165.21.244 - - [18/Sep/2026:18:59:43 +0200] "GET /info HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.165.21.244 - - [18/Sep/2026:18:59:43 +0200] "GET /info HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.165.21.244 - - [18/Sep/2026:18:59:44 +0200] "GET /_profiler/phpinfo HTTP/1.1" 404 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Web App Attack Port Scan
🇫🇷 Zundapper	2026-09-18 15:40:53 (4 weeks ago)	34.165.21.244 - - [18/Sep/2026:17:40:48 +0200] "GET /phpinfo HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Mac ... show more 34.165.21.244 - - [18/Sep/2026:17:40:48 +0200] "GET /phpinfo HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.165.21.244 - - [18/Sep/2026:17:40:50 +0200] "GET /info HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.165.21.244 - - [18/Sep/2026:17:40:51 +0200] "GET /_profiler/phpinfo HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.165.21.244 - - [18/Sep/2026:17:40:51 +0200] "GET /_environment HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.165.21.244 - - [18/Sep/2026:17:40:51 +0200] "GET /webroot/index.php/_environment HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (K ... show less	Web App Attack Port Scan
Anonymous	2026-09-18 15:39:03 (4 weeks ago)	Bot / scanning and/or hacking attempts: GET /.env.development HTTP/1.1, GET /.env.save HTTP/1.1, GET ... show more Bot / scanning and/or hacking attempts: GET /.env.development HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.example HTTP/1.1, GET /.env.stage HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.env.sample HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.prod HTTP/1.1 show less	Hacking Web App Attack
🇷🇺 cnaize	2026-09-18 13:49:09 (4 weeks ago)	Malicious activity blocked by Meds firewall	Port Scan
🇿🇦 conure.sh	2026-09-18 12:15:44 (4 weeks ago)	csagent: score 19.9: secrets grab x2; 1 domain(s) in 1s	Web App Attack
🇺🇸 TPI-Abuse	2026-09-18 01:03:53 (4 weeks ago)	(mod_security) mod_security (id:210492) triggered by 34.165.21.244 (244.21.165.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.165.21.244 (244.21.165.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 21:03:48.138481 2026] [security2:error] [pid 25316:tid 25316] [client 34.165.21.244:47944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chaseallgoodhtmlclasswork.com"] [uri "/.git/config"] [unique_id "aqyN9Ft-RN94f4D0B2DhgwAAAAw"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 42 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 211.43.139.196

🇺🇸 173.252.69.27

🇬🇧 35.203.211.163

🇺🇸 2a03:2880:15ff:5a::

🇬🇧 193.163.125.85

🇷🇴 193.32.162.160

🇦🇺 168.144.172.197

🇨🇮 160.120.14.164

🇮🇳 129.121.135.214

🇨🇳 112.51.5.102

🇧🇪 104.155.51.252

🇳🇱 45.148.10.31

🇺🇸 216.25.89.137

🇮🇷 188.75.85.2

🇰🇷 175.201.85.209

🇨🇳 118.145.238.115

🇨🇦 99.237.215.231

🇨🇿 89.111.104.190

🇰🇷 58.229.253.119

🇳🇱 45.148.10.157