JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.31.27.206

34.31.27.206 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 74%: ?

74%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	206.27.31.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.31.27.206

Whois 34.31.27.206

IP Abuse Reports for 34.31.27.206:

This IP address has been reported a total of 14 times from 13 distinct sources. 34.31.27.206 was first reported on August 22nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 openstrike.co.uk	2026-08-23 05:15:18 (1 day ago)	4 attacks on config grabbing URLs, VC URLs: GET /.DS_Store HTTP/1.1 GET /.git/HEAD HTTP/1.1	Hacking
🇧🇪 Ivo Vynckier	2026-08-22 16:16:00 (1 day ago)	34.31.27.206 - - [22/Aug/2026:09:10:40 +0200] "GET /.svn/wc.db HTTP/2.0" 404 2310 "-" "Mozilla/5.0 ( ... show more 34.31.27.206 - - [22/Aug/2026:09:10:40 +0200] "GET /.svn/wc.db HTTP/2.0" 404 2310 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 34.31.27.206 - - [22/Aug/2026:09:10:41 +0200] "GET /CVS/Entries HTTP/2.0" 301 285 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 34.31.27.206 - - [22/Aug/2026:09:10:42 +0200] "GET /.hg/store/fncache HTTP/2.0" 301 291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" show less	Web App Attack
🇧🇪 cmbplf	2026-08-22 10:29:12 (1 day ago)	2.250 requests with url.path .git/ 165 requests with url.path .svn/ 164 requests with url.pat ... show more 2.250 requests with url.path .git/ 165 requests with url.path .svn/ 164 requests with url.path .hg/ 152 requests with url.path */.DS_Store show less	Brute-Force Bad Web Bot
🇿🇦 conure.sh	2026-08-22 09:06:13 (1 day ago)	csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s	Web App Attack
🇵🇱 Budyn	2026-08-22 08:51:03 (1 day ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: test.astropot.site \| URI: /.git/HEAD \| UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-08-22 08:39:28 (2 days ago)	Accessed trap at '/.git/HEAD'	Web App Attack
🇩🇪 macrob	2026-08-22 06:49:36 (2 days ago)	2026/08/22 06:49:34 [error] 2888833#2888833: 507054641 access forbidden by rule, client: 34.31.27.2 ... show more 2026/08/22 06:49:34 [error] 2888833#2888833: 507054641 access forbidden by rule, client: 34.31.27.206, server: binixo.es, request: "GET /.git/HEAD HTTP/2.0", host: "binixo.es" 2026/08/22 06:49:35 [error] 2888836#2888836: 507054654 access forbidden by rule, client: 34.31.27.206, server: binixo.es, request: "GET /.git/HEAD HTTP/2.0", host: "binixo.es" 2026/08/22 06:49:35 [error] 2888835#2888835: 507054681 access forbidden by rule, client: 34.31.27.206, server: binixo.es, request: "GET /.svn/wc.db HTTP/2.0", host: "binixo.es" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 06:34:32 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.31.27.206 (206.27.31.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.31.27.206 (206.27.31.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 22 02:34:28.594601 2026] [security2:error] [pid 15915:tid 15915] [client 34.31.27.206:47996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blockadegc.com"] [uri "/.git/HEAD"] [unique_id "aolC9BsvXUzJvxIQqAjLcQAAAAo"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇿 Antinson	2026-08-22 04:50:22 (2 days ago)	Scraping with a high error ratio and request rate	Bad Web Bot
🇩🇪 filstal.org	2026-08-22 04:16:07 (2 days ago)	Web exploit or injection attempt blocked by ModSecurity WAF.	SQL Injection Web App Attack
🇺🇸 zcampbell	2026-08-22 04:06:40 (2 days ago)	Web vulnerability scanning: probing for exposed sensitive files (.git). Detected and blocked automat ... show more Web vulnerability scanning: probing for exposed sensitive files (.git). Detected and blocked automatically. show less	Web App Attack Bad Web Bot
🇩🇪 FeG Deutschland	2026-08-22 03:31:13 (2 days ago)	Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124	Exploited Host Web App Attack
🇺🇦 URAN Publishing Service	2026-08-22 03:25:01 (2 days ago)	[22/Aug/2026:06:25:01 +0300] -- 34.31.27.206 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/ ... show more [22/Aug/2026:06:25:01 +0300] -- 34.31.27.206 Ban reason: Scanner [CMS_GENERIC] \| Request: GET /.git/HEAD HTTP/1.1 show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-22 02:20:36 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 34.31.27.206 (206.27.31.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.31.27.206 (206.27.31.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 21 22:20:30.331325 2026] [security2:error] [pid 7488:tid 7488] [client 34.31.27.206:56842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeffjastro.com"] [uri "/.git/HEAD"] [unique_id "aokHbgN0FdQVFcuWxkC-RAAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 8.216.12.44

🇬🇧 2.57.17.188

🇨🇳 220.182.14.60

🇧🇪 198.235.24.245

🇺🇸 184.105.139.92

🇰🇷 118.37.214.187

🇺🇸 74.125.75.29

🇬🇧 45.133.173.184

🇺🇸 35.253.174.12

🇬🇧 5.252.83.6

🇫🇷 172.71.127.9

🇺🇸 162.216.150.58

🇺🇸 147.185.132.118

🇺🇸 135.222.40.118

🇧🇷 131.255.152.2

🇩🇪 78.94.80.126

🇸🇬 47.84.137.43

🇹🇭 43.255.104.39

🇺🇸 5.253.38.204

🇩🇪 217.154.234.6