JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.64.247.127

34.64.247.127 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 66%: ?

66%

ISP	Google Asia Pacific Pte. Ltd.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	127.247.64.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.64.247.127

Whois 34.64.247.127

IP Abuse Reports for 34.64.247.127:

This IP address has been reported a total of 12 times from 10 distinct sources. 34.64.247.127 was first reported on September 15th 2026, and the most recent report was 2 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Admins@Storch	2026-09-19 20:37:57 (2 seconds ago)	IPS:drop <match> dstport=2049	Brute-Force Exploited Host
🇨🇦 Arpan Sen	2026-09-19 20:04:17 (33 minutes ago)	Network port/address scan: probed 1 distinct port(s) across 15 host(s); 100% of connections received ... show more Network port/address scan: probed 1 distinct port(s) across 15 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor. show less	Port Scan
🇺🇸 xmission.com	2026-09-19 19:28:51 (1 hour ago)	Blocked by UFW (TCP on 2049) Source port: 45432 TTL: 252 Packet length: 40 TOS: 0x00 This report (f ... show more Blocked by UFW (TCP on 2049) Source port: 45432 TTL: 252 Packet length: 40 TOS: 0x00 This report (for 34.64.247.127) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-19 19:05:27 (1 hour ago)	2049/tcp (1 or more attempts)	Port Scan
🇨🇦 Tanados	2026-09-19 18:59:18 (1 hour ago)	Blocked by UFW [2049/tcp] Source port: 45432 TTL: 245 Packet length: 40 TOS: 0x00 This report was g ... show more Blocked by UFW [2049/tcp] Source port: 45432 TTL: 245 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-09-19 18:39:06 (1 hour ago)	Port Scan	Port Scan
Anonymous	2026-09-19 18:32:05 (2 hours ago)	denied traffic to a non-approved destination port. destination port 2049.	Port Scan
🇩🇪 xserverx.ru	2026-09-19 18:21:35 (2 hours ago)	[UFW SCAN!!!!] SRC=34.64.247.127 LEN=40 TOS=0x00 PREC=0x60 TTL=250 PROTO=TCP SPT=45432 DPT=2049 WIND ... show more [UFW SCAN!!!!] SRC=34.64.247.127 LEN=40 TOS=0x00 PREC=0x60 TTL=250 PROTO=TCP SPT=45432 DPT=2049 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 TPI-Abuse	2026-09-16 00:36:58 (3 days ago)	(mod_security) mod_security (id:210492) triggered by 34.64.247.127 (127.247.64.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.64.247.127 (127.247.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:36:52.984349 2026] [security2:error] [pid 16005:tid 16005] [client 34.64.247.127:38974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "millergrain.com"] [uri "/.env"] [unique_id "aqnkpEKSFXoMjjlJo45BMAAAAA8"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-15 15:22:23 (4 days ago)	Banned by Fail2Ban on server	Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 13:52:42 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 34.64.247.127 (127.247.64.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.64.247.127 (127.247.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 09:52:38.220431 2026] [security2:error] [pid 28611:tid 28611] [client 34.64.247.127:58996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clinicacero.com"] [uri "/.env"] [unique_id "aqlNpocB5iNFGq_1GN68HgAAACk"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 12:23:55 (4 days ago)	(mod_security) mod_security (id:210492) triggered by 34.64.247.127 (127.247.64.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.64.247.127 (127.247.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 08:23:49.281850 2026] [security2:error] [pid 21758:tid 21758] [client 34.64.247.127:34452] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bluesbluff.com"] [uri "/.env"] [unique_id "aqk41XlwjYCCKt6YXs6Q9gAAACA"], referer: https://www.google.com/ show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 167.94.145.17

🇺🇦 91.196.121.156

🇨🇦 85.217.149.53

🇧🇪 198.235.24.205

🇷🇴 193.32.162.84

🇧🇷 177.93.77.43

🇨🇳 111.32.153.180

🇺🇸 108.191.12.186

🇩🇪 89.58.210.120

🇺🇸 68.225.62.86

🇺🇸 40.124.172.27

🇵🇰 39.61.6.46

🇰🇷 1.222.180.22

🇧🇪 198.235.24.226

🇻🇳 171.254.93.44

🇺🇸 162.216.149.218

🇩🇪 157.230.18.133

🇪🇬 156.197.228.9

🇫🇮 147.185.133.21

🇨🇳 120.40.161.23