This IP address has been reported a total of
8
times from
7 distinct
sources.
34.84.9.252 was first reported on
September 21st 2026 , and the most recent report was
4 hours ago United Kingdom of Great Britain and Northern Ireland
with 2
reports;
Netherlands
with 2
reports;
United States of America
with 2
reports.
The most common categories in these recent reports were:
Web App Attack
5
times;
Brute-Force
5
times;
Bad Web Bot
3
times;
Hacking
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇬🇧
pearbright
2026-10-05 01:02:21
(4 hours ago)
34.84.9.252 - - [05/Oct/2026:01:02:16 +0000] "GET /.git/config HTTP/1.1" 404 564 "-" "Mozilla/5.0 (M ...
show more
34.84.9.252 - - [05/Oct/2026:01:02:16 +0000] "GET /.git/config HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.84.9.252 - - [05/Oct/2026:01:02:17 +0000] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.84.9.252 - - [05/Oct/2026:01:02:17 +0000] "GET /.env.local HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.84.9.252 - - [05/Oct/2026:01:02:17 +0000] "GET /.env.production HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.84.9.252 - - [05/Oct/2026:01:02:17 +0000] "GET /.env.staging HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-04 21:11:14
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.84.9.252 (252.9.84.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.9.252 (252.9.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 17:11:08.130032 2026] [security2:error] [pid 30599:tid 30599] [client 34.84.9.252:57328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "taptaptennis.abecasis.com"] [uri "/.git/config"] [unique_id "asLA7AzowxMi51J4G-STVAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-04 19:38:26
(10 hours ago)
Excessive 404/403 errors
Brute-Force
🇩🇪
LRob
2026-10-04 18:44:21
(10 hours ago)
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10 ...
show more
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
🇳🇱
Savvii
2026-10-04 18:38:12
(11 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-10-04 17:55:07
(11 hours ago)
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show more
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-10-04 17:48:03
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.84.9.252 (252.9.84.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.9.252 (252.9.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 13:47:57.597065 2026] [security2:error] [pid 27342:tid 27342] [client 34.84.9.252:33042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tapiaqualityproducts.com"] [uri "/.git/config"] [unique_id "asKRTY0f1XRSyOUxnnWragAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Mendip_Defender
2026-09-21 09:31:46
(1 week ago)
[21/Sep/2026:10:32:02.551307 +0100] arD5kvHrt1eHHi6pg6KIeAAAAE0 34.84.9.252 59618 188.246.206.60 708 ...
show more
[21/Sep/2026:10:32:02.551307 +0100] arD5kvHrt1eHHi6pg6KIeAAAAE0 34.84.9.252 59618 188.246.206.60 7081
[21/Sep/2026:10:32:03.154489 +0100] arD5kzHhlG0Joas23XeQEgAAAAA 34.84.9.252 59640 188.246.206.60 7081
...
show less
Brute-Force
Showing 1 to
8
of 8 reports
