Total reports
11 from
9 distinct
reporters
First reported
November 11th 2026
Most recent report
15 hours ago
Last 60 days
Top reporter locations
🇬🇷
Greece
3
🇺🇸
United States of America
3
🇫🇷
France
2
Most common categories
Port Scan
4
Hacking
3
Bad Web Bot
3
Web App Attack
2
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇺🇸
webgobe
2026-11-11 21:50:30
UTC ·
(15 hours ago)
mae-7 : Trying access unauthorized files/dir=>/wp
Hacking
🇩🇪
maxpower
2026-11-11 21:43:28
UTC ·
(15 hours ago)
(PERMBLOCK) 34.182.149.249 (US/United States/249.149.182.34.bc.googleusercontent.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
Port Scan
🇫🇷
eselpcore.com
2026-11-11 21:42:44
UTC ·
(15 hours ago)
Requests to non‑existent directory and files (404 scanning)
Web App Attack
🇫🇷
conseilgouz
2026-11-11 21:00:52
UTC ·
(16 hours ago)
mae-7 : Trying access unauthorized files/dir=>/wp
Hacking
🇬🇷
setupgr
2026-11-11 20:27:06
UTC ·
(16 hours ago)
(PERMBLOCK) 34.182.149.249 (US/United States/District of Columbia/Washington/-/[AS396982 Google LLC]) has had more than 2 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: N/A
Port Scan
🇦🇺
aranguren.org
2026-11-11 20:23:03
UTC ·
(16 hours ago)
34.182.149.249 - - [12/Nov/2026:07:23:02 +1100] "HEAD /blog HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36"
34.182.149.249 - - [12/Nov/2026:07:23:03 ...
show more
34.182.149.249 - - [12/Nov/2026:07:23:02 +1100] "HEAD /blog HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36"
34.182.149.249 - - [12/Nov/2026:07:23:03 +1100] "HEAD /new HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36"
34.182.149.249 - - [12/Nov/2026:07:23:03 +1100] "HEAD /wp HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36"
...
show less
Bad Web Bot
🇺🇸
dot.mg
2026-11-11 19:48:11
UTC ·
(17 hours ago)
Bruteforce
Bad Web Bot
🇬🇷
setupgr
2026-11-11 19:25:33
UTC ·
(17 hours ago)
(mod_security) mod_security (id:11000011) triggered by 34.182.149.249 (US/United States/District of Columbia/Washington/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Nov 11 ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.182.149.249 (US/United States/District of Columbia/Washington/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Nov 11 21:25:28.458907 2026] [security2:error] [pid 1738599:tid 1738734] [client 34.182.149.249:34646] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 249.149.182.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "mail.endoscope.center"] [uri "/blog"] [unique_id "avTBKBU8-F-Z7Xy29M7FoAAAAE0"]
show less
Port Scan
🇺🇸
proactive-noc
2026-11-11 18:37:59
UTC ·
(18 hours ago)
Web application abuse detected 1 times recently; honeypot-j.
Hacking
Web App Attack
🇳🇱
e.fierstra
2026-11-11 18:21:28
UTC ·
(18 hours ago)
excessive HTTP 404 errors
Bad Web Bot
🇬🇷
setupgr
2026-11-11 18:14:40
UTC ·
(18 hours ago)
(mod_security) mod_security (id:11000011) triggered by 34.182.149.249 (US/United States/District of Columbia/Washington/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Nov 11 ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.182.149.249 (US/United States/District of Columbia/Washington/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Nov 11 20:14:39.386549 2026] [security2:error] [pid 1739121:tid 1739250] [client 34.182.149.249:44726] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 249.149.182.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "mail.cpanagiotou.gr"] [uri "/blog"] [unique_id "avSwj1pC8y2fM3vmFbuz1gAAAs8"]
show less
Port Scan
