JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.92.218.253

34.92.218.253 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	253.218.92.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.92.218.253

Whois 34.92.218.253

IP Abuse Reports for 34.92.218.253:

This IP address has been reported a total of 47 times from 28 distinct sources. 34.92.218.253 was first reported on September 10th 2026, and the most recent report was 3 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 4server	2026-09-15 03:01:55 (3 days ago)	[TueSep1505:01:52.7487412026][security2:error][pid2673358:tid2673407][client34.92.218.253:0]ModSecur ... show more [TueSep1505:01:52.7487412026][security2:error][pid2673358:tid2673407][client34.92.218.253:0]ModSecurity:Accessdeniedwithcode403$phase1$.Patternmatch\"$\?i$$\?:/\(\?:\^\\|/$\\\\\\\\.$env\\|git\\|svn\\|hg\\|DS_Store$\\|/$\?:wp-config\\|\\\\\\\\.htaccess\\|\\\\\\\\.htpasswd$\\|\\\\\\\\.$\?:sql\\|bak\\|old\\|log$\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"webdisk.mjgold.ch\"][uri\"/.env.bak\"][unique_id\"aqi1IDcxbIZkWxHRJHle0AAAAY0\"] show less	Port Scan Brute-Force Web App Attack
🇺🇸 Mehmet_The_Script_Kiddie	2026-09-13 23:04:22 (4 days ago)	CloudFlare WAF REPORT: Disobey robots.txt. Suspicious web crawler.	Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-13 06:06:08 (5 days ago)	Excessive multi-domain requests	Brute-Force
🇩🇪 LRob	2026-09-12 20:33:54 (5 days ago)	Enumerating paths that do not exist (scanning) \| method: GET \| path: /.git/config \| ua: Mozilla/5.0 ... show more Enumerating paths that do not exist (scanning) \| method: GET \| path: /.git/config \| ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 \| 2026-09-12 20:33 UTC show less	Port Scan Web App Attack
🇫🇷 dynamix	2026-09-12 19:36:49 (5 days ago)	Multiple WAF Violations	Web App Attack
🇩🇪 todix	2026-09-12 18:47:48 (5 days ago)	Web App Attack Exploid from 34.92.218.253	Web App Attack
🇦🇺 electronico	2026-09-12 15:41:53 (5 days ago)	34.92.218.253 - - [13/Sep/2026:02:41:51 +1100] "GET /.env.local HTTP/1.1" 404 2105 "-" "Mozilla/5.0 ... show more 34.92.218.253 - - [13/Sep/2026:02:41:51 +1100] "GET /.env.local HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.92.218.253 - - [13/Sep/2026:02:41:51 +1100] "GET /.env.production HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.92.218.253 - - [13/Sep/2026:02:41:52 +1100] "GET /.env.staging HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.92.218.253 - - [13/Sep/2026:02:41:52 +1100] "GET /.env.development HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.92.218.253 - - [13/Sep/2026:02:41:52 +1100] "GET /.env.test HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0. ... show less	Brute-Force Web App Attack
Anonymous	2026-09-12 13:41:03 (5 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.92.218.253 (HK/Hong Kong/253.218.92. ... show more (mod_security) mod_security triggered on hostname [redacted] 34.92.218.253 (HK/Hong Kong/253.218.92.34.bc.googleusercontent.com) show less	SQL Injection
🇺🇸 TPI-Abuse	2026-09-12 13:18:03 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.92.218.253 (253.218.92.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.92.218.253 (253.218.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 09:17:54.599688 2026] [security2:error] [pid 31279:tid 31279] [client 34.92.218.253:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ralphrichardson.com"] [uri "/.git/config"] [unique_id "aqVRAj-Ql-KtTglF8Hie6gAAAAM"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-12 12:58:49 (5 days ago)	(mod_security) mod_security (id:210492) triggered by 34.92.218.253 (253.218.92.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.92.218.253 (253.218.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 08:58:43.746414 2026] [security2:error] [pid 14414:tid 14414] [client 34.92.218.253:40432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.rainwaterconstruction.net"] [uri "/.git/config"] [unique_id "aqVMg2yIqso-F5FRY70kXgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-09-12 11:44:30 (5 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.92.218.253 (HK/Hong Kong/253.218.92. ... show more (mod_security) mod_security triggered on hostname [redacted] 34.92.218.253 (HK/Hong Kong/253.218.92.34.bc.googleusercontent.com) show less	SQL Injection
🇩🇪 DEV-DNS	2026-09-12 11:26:47 (5 days ago)	(mod_security) mod_security triggered on hostname [redacted])	SQL Injection
🇩🇪 rh24	2026-09-12 05:35:42 (6 days ago)	(mod_security) mod_security triggered on hostname [redacted] 34.92.218.253 (HK/Hong Kong/253.218.92. ... show more (mod_security) mod_security triggered on hostname [redacted] 34.92.218.253 (HK/Hong Kong/253.218.92.34.bc.googleusercontent.com) show less	SQL Injection
🇮🇹 VHosting	2026-09-12 04:05:03 (6 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇳🇱 e.fierstra	2026-09-12 03:52:01 (6 days ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇹 196.188.93.169

🇷🇴 193.32.162.18

🇱🇺 185.221.132.179

🇨🇳 113.90.80.154

🇺🇸 51.81.110.52

🇩🇿 41.104.216.160

🇦🇷 38.159.82.116

🇬🇧 35.203.211.209

🇨🇳 14.155.231.244

🇩🇪 209.38.231.64

🇺🇸 207.168.18.150

🇿🇦 165.16.166.15

🇳🇵 160.30.132.198

🇺🇸 136.117.221.202

🇻🇳 117.4.169.89

🇷🇺 95.165.27.83

🇯🇲 72.252.198.133

🇨🇦 70.65.88.207

🇺🇸 66.132.224.23

🇷🇴 2.57.121.112