JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.92.103.58

34.92.103.58 was found in our database!

This IP was reported 31 times. Confidence of Abuse is 84%: ?

84%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	58.103.92.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.92.103.58

Whois 34.92.103.58

IP Abuse Reports for 34.92.103.58:

This IP address has been reported a total of 31 times from 17 distinct sources. 34.92.103.58 was first reported on June 8th 2026, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-09 22:00:46 (6 days ago)	Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ... show more Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08. show less	Web App Attack SSH Hacking
🇺🇸 TPI-Abuse	2026-06-09 16:16:38 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 34.92.103.58 (58.103.92.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.92.103.58 (58.103.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 12:16:36.114728 2026] [security2:error] [pid 12613:tid 12639] [client 34.92.103.58:59126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.liquido.cocoonprojects.com"] [uri "/.git/config"] [unique_id "aig8ZFwoS3Y6Bwjr2Kpt1QAAAJg"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 YF	2026-06-09 13:30:39 (6 days ago)	Attaque distribuée subnet	DDoS Attack Web App Attack
🇩🇪 Ba-Yu	2026-06-09 13:20:44 (6 days ago)	General hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 11:06:42 (6 days ago)	(mod_security) mod_security (id:210492) triggered by 34.92.103.58 (58.103.92.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.92.103.58 (58.103.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:06:37.686515 2026] [security2:error] [pid 14898:tid 14898] [client 34.92.103.58:54166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.healthpointphysicians.co.helpkccare.org"] [uri "/.git/config"] [unique_id "aifzvRAshHcL5U377E0LDQAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 Valhalla	2026-06-09 10:09:57 (6 days ago)	/.git/config	Hacking Web App Attack
🇦🇺 2000cn.com.au	2026-06-09 09:48:17 (6 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files	Web App Attack Hacking
🇩🇪 big-cloud.nl	2026-06-09 09:00:50 (1 week ago)	Try to access /.git/config	Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 07:13:55 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.92.103.58 (58.103.92.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.92.103.58 (58.103.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:13:52.127486 2026] [security2:error] [pid 12569:tid 12569] [client 34.92.103.58:57978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.johnatuttle.com.player-care.com"] [uri "/.git/config"] [unique_id "aie9MOro_r_DGDeg1xabzwAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 06:56:54 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.92.103.58 (58.103.92.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.92.103.58 (58.103.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:56:47.890591 2026] [security2:error] [pid 8676:tid 8676] [client 34.92.103.58:38540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lawrencehale.net"] [uri "/.git/config"] [unique_id "aie5Ly98H9WFuCLsnPANwAAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 05:56:31 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.92.103.58 (58.103.92.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.92.103.58 (58.103.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:56:26.014369 2026] [security2:error] [pid 23522:tid 23522] [client 34.92.103.58:35700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "furball.global"] [uri "/.git/config"] [unique_id "aierCrH_xdGblkm5pubsRAAAAEU"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 Erpelstolz	2026-06-09 05:52:37 (1 week ago)	external host: 34.92.103.58 - - [09/Jun/2026:07:52:35 +0200] "GET /.git/config HTTP/1.1" 403 5605 "- ... show more external host: 34.92.103.58 - - [09/Jun/2026:07:52:35 +0200] "GET /.git/config HTTP/1.1" 403 5605 "-" "MOTORIZR-Z8/46.00.00 Mozilla/4.0 (compatible; MSIE 6.0; Symbian OS; 356) Opera 8.65 [it] UP.Link/6.3.0.0.0" CF-Ray:- CF-IP:- show less	Web App Attack
🇺🇸 TPI-Abuse	2026-06-09 05:39:01 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.92.103.58 (58.103.92.34.bc.googleusercontent ... show more (mod_security) mod_security (id:210492) triggered by 34.92.103.58 (58.103.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:38:56.931725 2026] [security2:error] [pid 2203:tid 2203] [client 34.92.103.58:34110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "buildpower.theknowledgemaster.com"] [uri "/.git/config"] [unique_id "aiem8KfKxA--mq2ZWrjcKQAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 TechnoSolutions CL	2026-06-09 05:11:11 (1 week ago)	34.92.103.58 - - [09/Jun/2026:05:11:07 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Ma ... show more 34.92.103.58 - - [09/Jun/2026:05:11:07 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.35 Safari/537.36" 34.92.103.58 - - [09/Jun/2026:05:11:10 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.118 Safari/537.36 OPR/28.0.1750.51" ... show less	Hacking Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-09 04:50:03 (1 week ago)	suspicious request in access.log	Web App Attack

Showing 1 to 15 of 31 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 166.62.33.230

🇺🇸 162.216.149.230

🇺🇸 129.146.243.24

🇨🇳 120.48.60.44

🇷🇴 80.94.92.164

🇺🇸 67.227.108.80

🇺🇸 35.212.204.23

🇬🇧 35.203.210.35

🇺🇸 3.17.58.161

🇷🇴 2.57.122.177

🇲🇺 197.227.8.186

🇮🇳 182.95.184.138

🇨🇳 163.179.39.100

🇨🇳 118.178.24.27

🇳🇱 81.19.216.104

🇮🇳 59.88.207.190

🇱🇧 45.129.136.12

🇨🇳 223.159.80.91

🇫🇷 91.231.89.172

🇫🇷 91.231.89.169