JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.21.213.249

34.21.213.249 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 74%: ?

74%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	249.213.21.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇸🇬 Singapore
City	Singapore

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.21.213.249

Whois 34.21.213.249

IP Abuse Reports for 34.21.213.249:

This IP address has been reported a total of 14 times from 13 distinct sources. 34.21.213.249 was first reported on July 29th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 IRISIO	2026-07-31 16:11:40 (9 hours ago)	scans/SQL injection/spam posts : 627 queries	Web App Attack SQL Injection
🇬🇧 WebNiraj	2026-07-30 06:34:33 (1 day ago)	(mod_security) mod_security (id:949110) triggered by 34.21.213.249 (SG/Singapore/249.213.21.34.bc.go ... show more (mod_security) mod_security (id:949110) triggered by 34.21.213.249 (SG/Singapore/249.213.21.34.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA] show less	Brute-Force
🇺🇸 TPI-Abuse	2026-07-30 06:16:17 (1 day ago)	(mod_security) mod_security (id:210492) triggered by 34.21.213.249 (249.213.21.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.21.213.249 (249.213.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 02:16:11.299767 2026] [security2:error] [pid 6002:tid 6002] [client 34.21.213.249:60840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "app.handyrehab.com"] [uri "/.hermes/.env"] [unique_id "amrsK9fMDSfzBd3YyCn-JQAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇪🇸 alferez	2026-07-30 02:07:16 (1 day ago)	Searching .(env\|sql\|zip\|tar\|rar) files	Hacking Exploited Host Web App Attack
🇫🇷 dynamix	2026-07-30 01:37:49 (2 days ago)	Multiple WAF Violations	Web App Attack
🇪🇸 pipeline.es	2026-07-30 01:07:40 (2 days ago)	Web scanning / probing for vulnerable paths \| URL: /google-credentials.json \| Evidence: fetaveformac ... show more Web scanning / probing for vulnerable paths \| URL: /google-credentials.json \| Evidence: fetaveformacion.fetave.es 34.21.213.249 - - [30/Jul/2026:03:07:24 +0200] \"GET /google-credentials.json HTTP/1.1\" 404 - \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +mailto:[email]\" GEOIP_COUNTRY_CODE=SG \| ASN: GOOGLE-CLOUD-PLATFORM \| Country: SG show less	Port Scan Web App Attack
🇺🇸 TPI-Abuse	2026-07-30 00:53:19 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 34.21.213.249 (249.213.21.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210730) triggered by 34.21.213.249 (249.213.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 20:53:12.139442 2026] [security2:error] [pid 1412733:tid 1412733] [client 34.21.213.249:41482] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|staging.eta-mct.com\|F\|2"] [data ".eta-mct.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "staging.eta-mct.com"] [uri "/z9x8c7v6b5-debug-trigger-staging.eta-mct.com"] [unique_id "amqgePhYH6vAgCxTLil5IwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 Octopuce	2026-07-30 00:50:38 (2 days ago)	Aggressive web search of vulnerable pages: /.openclaw/.env /.hermes/.env /config/.env.php /laravel/. ... show more Aggressive web search of vulnerable pages: /.openclaw/.env /.hermes/.env /config/.env.php /laravel/.env /core/.env ... show less	Web App Attack
Anonymous	2026-07-30 00:44:37 (2 days ago)	Fail2Ban: ModSecurity detected a web application attack.	Bad Web Bot Web App Attack
Anonymous	2026-07-30 00:25:31 (2 days ago)	RdpGuard detected brute-force attempt on HTTP	Brute-Force
🇳🇱 e.fierstra	2026-07-30 00:09:25 (2 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
Anonymous	2026-07-29 23:50:09 (2 days ago)	\| [Dangerous/Singapore] Aggressive IP 34.21.213.249 (~30 hits). Type: DoS Defender- Web server 400 e ... show more \| [Dangerous/Singapore] Aggressive IP 34.21.213.249 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇮🇹 VHosting	2026-07-29 23:50:03 (2 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
Anonymous	2026-07-29 23:40:38 (2 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.21.213.249 (SG/Singapore/249.213.21. ... show more (mod_security) mod_security triggered on hostname [redacted] 34.21.213.249 (SG/Singapore/249.213.21.34.bc.googleusercontent.com) show less	SQL Injection

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 120.48.99.236

🇧🇷 45.225.237.192

🇧🇪 35.195.83.253

🇳🇴 20.100.186.69

🇺🇦 193.56.13.118

🇺🇸 172.90.128.97

🇦🇺 170.64.231.189

🇲🇾 115.135.245.189

🇳🇵 103.86.57.114

🇧🇩 103.79.183.34

🇲🇦 102.99.49.0

🇳🇱 77.239.124.237

🇩🇪 64.89.163.141

🇹🇭 49.228.239.115

🇨🇭 37.120.213.13

🇨🇳 220.167.233.66

🇧🇷 205.210.31.202

🇳🇱 195.178.110.217

🇭🇰 119.236.45.87

🇫🇷 94.250.202.47