JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.55.97.217

34.55.97.217 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 84%: ?

84%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	217.97.55.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.55.97.217

Whois 34.55.97.217

IP Abuse Reports for 34.55.97.217:

This IP address has been reported a total of 17 times from 14 distinct sources. 34.55.97.217 was first reported on August 27th 2026, and the most recent report was 34 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 Origon	2026-08-27 17:15:32 (34 minutes ago)	http-sensitive-files - IP: 34.55.97.217 - time="2026-08-27T19:15:31+02:00" level=info msg="(555f66b ... show more http-sensitive-files - IP: 34.55.97.217 - time="2026-08-27T19:15:31+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.55.97.217 (US/396982) : 4h ban on Ip 34.55.97.217" module=db show less	Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 16:55:53 (54 minutes ago)	(mod_security) mod_security (id:210492) triggered by 34.55.97.217 (217.97.55.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.55.97.217 (217.97.55.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 12:55:47.994530 2026] [security2:error] [pid 3069873:tid 3069887] [client 34.55.97.217:55588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.murals.ramona.town"] [uri "/.env.old"] [unique_id "apBsE8JMCNRN4f3Tmcq1tAAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 debestelapp	2026-08-27 16:20:08 (1 hour ago)		Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 15:36:31 (2 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.55.97.217 (217.97.55.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.55.97.217 (217.97.55.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 11:36:22.958788 2026] [security2:error] [pid 25036:tid 25063] [client 34.55.97.217:55396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.medical-spa.aafm.us"] [uri "/.env.production"] [unique_id "apBZdnTMLL-Fd9id-UVQUgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 TheDjRider	2026-08-27 15:33:55 (2 hours ago)	CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban tri ... show more CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-08-27T15:33:54.441785273Z. Context: http_status=200 show less	Web App Attack
🇳🇱 e.fierstra	2026-08-27 15:24:48 (2 hours ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 ghostwarriors	2026-08-27 15:20:23 (2 hours ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-08-27 15:19:58 (2 hours ago)	34.55.97.217 - - [27/Aug/2026:17:19:55 +0200] "GET /wp-config.php~ HTTP/1.1" 404 4444 "-" "crusader- ... show more 34.55.97.217 - - [27/Aug/2026:17:19:55 +0200] "GET /wp-config.php~ HTTP/1.1" 404 4444 "-" "crusader-worker/1.0" 34.55.97.217 - - [27/Aug/2026:17:19:55 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 4442 "-" "crusader-worker/1.0" 34.55.97.217 - - [27/Aug/2026:17:19:55 +0200] "GET /.env.example HTTP/1.1" 404 4443 "-" "crusader-worker/1.0" 34.55.97.217 - - [27/Aug/2026:17:19:55 +0200] "GET /wp-config.php.swp HTTP/1.1" 404 4442 "-" "crusader-worker/1.0" 34.55.97.217 - - [27/Aug/2026:17:19:55 +0200] "GET /actuator/configprops HTTP/1.1" 404 4443 "-" "crusader-worker/1.0" 34.55.97.217 - - [27/Aug/2026:17:19:55 +0200] "GET /_ignition/health-check HTTP/1.1" 404 4443 "-" "crusader-worker/1.0" 34.55.97.217 - - [27/Aug/2026:17:19:55 +0200] "GET /storage/logs/laravel.log HTTP/1.1" 404 4443 "-" "crusader-worker/1.0" 34.55.97.217 - - [27/Aug/2026:17:19:55 +0200] "GET /crusader-404-probe HTTP/1.1" 404 4444 "-" "crusader-worker/1.0" 34.55.97.217 - - [27/Aug/2026:17:19:55 +0200] "GET /.env.backup HTTP/1.1 show less	Web App Attack Brute-Force
🇺🇸 mnsf	2026-08-27 15:05:23 (2 hours ago)	Scanning/Probing (20)	Brute-Force Web App Attack
🇬🇧 Celtic	2026-08-27 15:00:28 (2 hours ago)	Blocked by Fail2Ban with Jail (plesk-modsecurity)	Brute-Force SSH
🇺🇸 Lee Daniel	2026-08-27 13:55:00 (3 hours ago)	34.55.97.217 - - [27/Aug/2026:09:54:59 -0400] "GET /.env HTTP/1.1" 403 6307 "-" "crusader-worker/1.0 ... show more 34.55.97.217 - - [27/Aug/2026:09:54:59 -0400] "GET /.env HTTP/1.1" 403 6307 "-" "crusader-worker/1.0" ... show less	DDoS Attack Web Spam Email Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-08-27 11:33:25 (6 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇩🇪 big-cloud.nl	2026-08-27 11:29:37 (6 hours ago)	Try to access /.env	Web App Attack
🇺🇸 TPI-Abuse	2026-08-27 11:26:21 (6 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.55.97.217 (217.97.55.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.55.97.217 (217.97.55.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 07:26:15.756856 2026] [security2:error] [pid 28694:tid 28718] [client 34.55.97.217:52510] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.transiit.org"] [uri "/.env.dev"] [unique_id "apAe15qNTduBGvGaEgRrewAAARU"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇺 DZBOT	2026-08-27 11:18:25 (6 hours ago)	DZBOT: Website Scanning / Scraping	Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a01:7e04::2000:38ff:fe2e:feac

🇦🇷 179.0.185.182

🇮🇳 103.189.89.196

🇩🇪 91.92.240.79

🇫🇷 90.56.108.125

🇺🇸 85.239.151.10

🇺🇸 55.56.250.13

🇿🇦 41.160.198.166

🇺🇸 29.80.163.79

🇴🇲 212.146.165.121

🇳🇱 203.55.131.4

🇺🇸 170.106.15.3

🇫🇮 147.185.133.16

🇨🇳 120.244.231.176

🇩🇪 85.215.249.23

🇮🇳 66.116.241.89

🇫🇷 51.75.200.186

🇪🇸 46.6.127.33

🇨🇳 36.32.104.15

🇱🇹 213.176.26.52