JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.53.53.244

34.53.53.244 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	244.53.53.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	The Dalles, Oregon

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.53.53.244

Whois 34.53.53.244

IP Abuse Reports for 34.53.53.244:

This IP address has been reported a total of 26 times from 21 distinct sources. 34.53.53.244 was first reported on August 25th 2026, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇹 CoreTech srl	2026-08-26 18:48:57 (2 hours ago)	cloudlinux2 fail2ban: 2026-08-26 20:43:51,390 fail2ban.filter [1775]: INFO [plesk-modsecu ... show more cloudlinux2 fail2ban: 2026-08-26 20:43:51,390 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 59.103.216.96 - 2026-08-26 20:43:51cloudlinux2 fail2ban: 2026-08-26 20:43:51,613 fail2ban.filter [1775]: INFO [recidive] Found 59.103.216.96 - 2026-08-26 20:43:51cloudlinux2 fail2ban: 2026-08-26 20:43:51,606 fail2ban.actions [1775]: NOTICE [plesk-modsecurity] Ban 59.103.216.96cloudlinux2 fail2ban: 2026-08-26 20:44:01,072 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 34.9.181.230 - 2026-08-26 20:44:01cloudlinux2 fail2ban: 2026-08-26 20:46:22,395 fail2ban.filter [1775]: INFO [recidive] Found 34.53.53.244 - 2026-08-26 20:46:22cloudlinux2 fail2ban: 2026-08-26 20:46:22,254 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 34.53.53.244 - 2026-08-26 20:46:21cloudlinux2 fail2ban: 2026-08-26 20:46:19,541 fail2ban.filter [1775]: INFO [plesk-modsecurity] Found 34.81.173.221 - 2026-08-26 20:46:19cloudlinux2 fail2ban: 2026-08-26 20:46:2 show less	Brute-Force
🇫🇮 as211431.net	2026-08-26 18:12:48 (2 hours ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET meth ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /wp-config.php.txt UA: Mozilla/5.0 (compatible; Twitterbot/1.0) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-08-26 17:26:22 (3 hours ago)	(mod_security) mod_security (id:211190) triggered by 34.53.53.244 (244.53.53.34.bc.googleusercontent ... show more (mod_security) mod_security (id:211190) triggered by 34.53.53.244 (244.53.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 13:26:15.809353 2026] [security2:error] [pid 29588:tid 29588] [client 34.53.53.244:23802] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|mail.lopansri.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?file=../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.lopansri.com"] [uri "/"] [unique_id "ao8ht-MuhIk4IQ3FyOcXqwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 WeCloudit-Anti-Abuse	2026-08-26 16:49:52 (4 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-path-traversal-probing	Web App Attack Hacking
🇺🇸 TPI-Abuse	2026-08-26 16:18:43 (4 hours ago)	(mod_security) mod_security (id:211190) triggered by 34.53.53.244 (244.53.53.34.bc.googleusercontent ... show more (mod_security) mod_security (id:211190) triggered by 34.53.53.244 (244.53.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 12:18:37.307987 2026] [security2:error] [pid 10192:tid 10192] [client 34.53.53.244:46806] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|northcoastgolfden.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?file=../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "northcoastgolfden.com"] [uri "/"] [unique_id "ao8R3QkJA3m51tfWonEkpgAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 maxxsense	2026-08-26 14:00:06 (6 hours ago)	(mod_security) mod_security triggered on hostname [redacted] 34.53.53.244 (US/United States/244.53.5 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.53.53.244 (US/United States/244.53.53.34.bc.googleusercontent.com) show less	SQL Injection
🇩🇪 juutis	2026-08-26 13:26:09 (7 hours ago)	Multiple WAF abuses - IP blocked	Hacking Brute-Force Web App Attack
🇨🇭 4server	2026-08-26 13:18:07 (7 hours ago)	[WedAug2615:18:02.4636372026][security2:error][pid488951:tid489160][client34.53.53.244:0]ModSecurity ... show more [WedAug2615:18:02.4636372026][security2:error][pid488951:tid489160][client34.53.53.244:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"aidweb.ch\"][uri\"/static../.env\"][unique_id\"ao7nisD36NHqPNL1LeW4FgAAABg\"] show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 13:15:10 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.53.53.244 (244.53.53.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.53.53.244 (244.53.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 09:15:03.970401 2026] [security2:error] [pid 18225:tid 18225] [client 34.53.53.244:64030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.chriscurtis.org"] [uri "/media../.env"] [unique_id "ao7m1xUKlsRE-ZT4c8Y49gAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 12:40:20 (8 hours ago)	(mod_security) mod_security (id:211190) triggered by 34.53.53.244 (244.53.53.34.bc.googleusercontent ... show more (mod_security) mod_security (id:211190) triggered by 34.53.53.244 (244.53.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 08:40:13.360306 2026] [security2:error] [pid 20345:tid 20345] [client 34.53.53.244:36910] ModSecurity: Access denied with code 403 (phase 2). Match of "contains cpanel" against "REQUEST_URI" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "55"] [id "211190"] [rev "9"] [msg "COMODO WAF: Remote File Access Attempt\|\|evelia.com\|F\|2"] [data "Matched Data: /etc/ found within REQUEST_URI: /?file=../../../../etc/passwd"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "evelia.com"] [uri "/"] [unique_id "ao7erVdngy5lLQrPWcP3wgAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-26 11:17:15 (9 hours ago)	34.53.53.244 - - [26/Aug/2026:13:17:14 +0200] "GET /api/config HTTP/1.1" 404 440 "-" "Mozilla/5.0 (X ... show more 34.53.53.244 - - [26/Aug/2026:13:17:14 +0200] "GET /api/config HTTP/1.1" 404 440 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Chrome/128.0.5807.23 Safari/537.36" 34.53.53.244 - - [26/Aug/2026:13:17:14 +0200] "GET /api/config HTTP/1.1" 404 246 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Chrome/128.0.5807.23 Safari/537.36" 34.53.53.244 - - [26/Aug/2026:13:17:14 +0200] "GET /.env HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Bytespider; +https://zhanzhang.toutiao.com/)" 34.53.53.244 - - [26/Aug/2026:13:17:14 +0200] "GET /.git-credentials HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Google-Extended/1.0; +http://www.google.com/bot.html)" 34.53.53.244 - - [26/Aug/2026:13:17:14 +0200] "GET /.git/HEAD HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KH ... show less	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-26 10:40:14 (10 hours ago)	(mod_security) mod_security (id:949110) triggered by 34.53.53.244 (244.53.53.34.bc.googleusercontent ... show more (mod_security) mod_security (id:949110) triggered by 34.53.53.244 (244.53.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 06:40:06.852624 2026] [security2:error] [pid 29403:tid 29403] [client 34.53.53.244:58562] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "mail.scottayoung.com"] [uri "/static../.env"] [unique_id "ao7ChrLPhM9xeR8Uq-1FUQAAAEY"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-08-26 10:11:43 (10 hours ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: Word ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: US, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing show less	Bad Web Bot Web App Attack
🇩🇪 neckaralb-admin.de	2026-08-26 09:02:48 (11 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
🇫🇷 Octopuce	2026-08-26 08:51:55 (12 hours ago)	Aggressive web search of vulnerable pages: /fr/entreprises/eemi-pro-la-formation-professionnelle/.en ... show more Aggressive web search of vulnerable pages: /fr/entreprises/eemi-pro-la-formation-professionnelle/.env?raw?? /fr/entreprises/eemi-pro-la-formati ... show less	Web App Attack

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 188.189.149.81

🇳🇱 94.154.172.8

🇨🇦 85.217.149.57

🇺🇦 37.52.137.75

🇯🇵 8.216.11.64

🇵🇰 223.29.233.216

🇧🇪 198.235.24.221

🇨🇴 190.60.43.29

🇨🇱 186.10.104.215

🇱🇹 213.176.26.165

🇸🇬 145.223.131.142

🇨🇳 118.250.39.56

🇺🇸 66.132.186.219

🇹🇼 35.201.223.0

🇨🇳 14.103.75.9

🇺🇸 2400:cb00:988:1000:813f:5c6e:6a48:3f4b

🇬🇧 217.154.42.110

🇨🇱 186.41.11.235

🇪🇸 172.68.134.142

🇺🇸 154.16.115.34