JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.47.252.27

34.47.252.27 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 73%: ?

73%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	27.252.47.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇮🇳 India
City	Mumbai, Maharashtra

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.47.252.27

Whois 34.47.252.27

IP Abuse Reports for 34.47.252.27:

This IP address has been reported a total of 13 times from 12 distinct sources. 34.47.252.27 was first reported on June 13th 2026, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-13 21:59:03 (2 days ago)	Auto-ban: >3000 req/min op 2026-06-13	Web App Attack SSH Hacking
🇮🇹 clamehost.it	2026-06-13 17:00:27 (2 days ago)	Automatic report - Brute Force attack using this IP address	Brute-Force
Anonymous	2026-06-13 15:24:47 (2 days ago)	Aggressive web scan	Web App Attack
🇩🇪 Viveronese	2026-06-13 14:43:10 (2 days ago)	HTTP vulnerability scanning	Web App Attack
🇺🇸 mnsf	2026-06-13 13:07:05 (2 days ago)	Scanning/Probing (61) Request Overload (383)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 12:36:14 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 34.47.252.27 (27.252.47.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.47.252.27 (27.252.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 08:36:08.654530 2026] [security2:error] [pid 5077:tid 5077] [client 34.47.252.27:56226] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|contactsportsagility.com\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "contactsportsagility.com"] [uri "/backups/db.sql"] [unique_id "ai1OuBa_GagXwi3YWBYgXQAAABM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-13 08:01:05 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 34.47.252.27 (27.252.47.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210730) triggered by 34.47.252.27 (27.252.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 04:00:59.029273 2026] [security2:error] [pid 5325:tid 5325] [client 34.47.252.27:58646] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|sfprivatechef.noshsf.com\|F\|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sfprivatechef.noshsf.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai0OO62n6zVgKvqn0WLOZwAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 Origon	2026-06-13 08:00:50 (2 days ago)	http-bad-user-agent - IP: 34.47.252.27 - time="2026-06-13T10:00:49+02:00" level=info msg="(555f66b4 ... show more http-bad-user-agent - IP: 34.47.252.27 - time="2026-06-13T10:00:49+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 34.47.252.27 (IN/396982) : 4h ban on Ip 34.47.252.27" module=db show less	Bad Web Bot
🇨🇭 4server	2026-06-13 07:22:45 (2 days ago)	[SatJun1309:22:37.5464962026][security2:error][pid106148:tid106385][client34.47.252.27:0]ModSecurity ... show more [SatJun1309:22:37.5464962026][security2:error][pid106148:tid106385][client34.47.252.27:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.eutecne.ch.81-17-25-250.cpanel.site\"][uri\"/api/env\"][unique_id\"ai0FPWXhMmvwmIsQHUffVwAAAFI\"] show less	Hacking Web App Attack
🇫🇮 inlink.ltd	2026-06-13 07:03:53 (2 days ago)	Known malicious PHP file or CMS probe	Web App Attack
🇬🇧 consul.to	2026-06-13 04:41:05 (3 days ago)	Web attack/malicious scanning detected	Web App Attack
🇮🇹 VHosting	2026-06-13 03:45:03 (3 days ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇩🇪 updown.io	2026-06-13 03:13:43 (3 days ago)	{"level":"info","ts":1781320421.820635,"logger":"http.log.access.log1","msg":"handled request","requ ... show more {"level":"info","ts":1781320421.820635,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.47.252.27","remote_port":"34556","client_ip":"34.47.252.27","proto":"HTTP/1.1","method":"GET","host":"tsrqponmlkjupdate.baupdate.yxwvutsvutsrmlkjihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/trace","headers":{"User-Agent":["Mozilla/5.0 (Linux; Android 7.1.1; XT1710-02 Build/NDS26.74-36) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.125 Mobile Safari/537.36"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.000073591,"size":0,"status":308,"resp_headers":{"Location":["https://tsrqponmlkjupdate.baupdate.yxwvutsvutsrmlkjihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/trace"],"Content-Type":[],"Server":["Caddy"],"Connection":["close"]}} {"level":"info","ts":1781320421.8337553,"logger":"http.log.access.log1","msg":"handled reque ... show less	DDoS Attack Web App Attack

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇺 2406:da1c:dd:1702:8f30:6a28:814b:8182

🇹🇷 2400:cb00:604:1000:bafc:6d0d:964e:2071

🇨🇳 121.18.220.74

🇵🇰 103.26.82.163

🇫🇷 86.228.133.51

🇮🇶 65.20.131.63

🇺🇸 45.33.96.41

🇬🇧 34.39.0.241

🇸🇬 194.5.82.36

🇺🇸 104.28.233.73

🇷🇴 92.118.39.62

🇨🇦 85.217.149.30

🇨🇳 58.242.190.39

🇧🇪 35.195.106.9

🇧🇪 34.62.213.130

🇺🇸 216.25.89.122

🇲🇴 182.93.50.90

🇭🇰 156.226.177.243

🇨🇳 116.149.206.83

🇷🇺 46.158.19.130