JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.92.221.159

34.92.221.159 was found in our database!

This IP was reported 9 times. Confidence of Abuse is 44%: ?

44%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	159.221.92.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇭🇰 Hong Kong
City	Hong Kong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.92.221.159

Whois 34.92.221.159

IP Abuse Reports for 34.92.221.159:

This IP address has been reported a total of 9 times from 6 distinct sources. 34.92.221.159 was first reported on June 8th 2026, and the most recent report was 7 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 big-cloud.nl	2026-06-08 06:27:13 (7 minutes ago)	Try to access /.git/config	Web App Attack
Anonymous	2026-06-08 06:25:02 (9 minutes ago)	suspicious request in access.log	Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 05:00:35 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.92.221.159 (159.221.92.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.92.221.159 (159.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 01:00:29.769120 2026] [security2:error] [pid 26209:tid 26209] [client 34.92.221.159:53862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isyourcompanysafe.com.alanmariotti.com"] [uri "/.git/config"] [unique_id "aiZMbcdScErm6omJANYyagAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 04:40:18 (1 hour ago)	(mod_security) mod_security (id:210492) triggered by 34.92.221.159 (159.221.92.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.92.221.159 (159.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 00:40:14.637481 2026] [security2:error] [pid 6159:tid 6285] [client 34.92.221.159:44964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.whitecrosslibrary.aafm.us"] [uri "/.git/config"] [unique_id "aiZHrodZiKvEqz9W49zQLgAAAko"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 as211431.net	2026-06-08 04:28:48 (2 hours ago)	Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/1.1 (GET metho ... show more Triggered Cloudflare WAF (firewallCustom) from HK. Action taken: BLOCK Protocol: HTTP/1.1 (GET method) Endpoint: /.git/config UA: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-08 02:30:56 (4 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.92.221.159 (159.221.92.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.92.221.159 (159.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 22:30:51.444226 2026] [security2:error] [pid 11219:tid 11219] [client 34.92.221.159:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ipv6.luisguacache.com"] [uri "/.git/config"] [unique_id "aiYpW7xBQ0G7haU8B4K6gAAAAII"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-06-08 02:07:28 (4 hours ago)	Abuse Detected (1)	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-08 01:21:06 (5 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.92.221.159 (159.221.92.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.92.221.159 (159.221.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 07 21:20:59.347948 2026] [security2:error] [pid 2768:tid 2768] [client 34.92.221.159:53886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.calentadoresdemexico.com.mx"] [uri "/.git/config"] [unique_id "aiYY-1d3d7GWID_XF776kgAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 4server	2026-06-08 01:16:59 (5 hours ago)	[MonJun0803:16:53.9727562026][security2:error][pid438562:tid438701][client34.92.221.159:0]ModSecurit ... show more [MonJun0803:16:53.9727562026][security2:error][pid438562:tid438701][client34.92.221.159:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.ppinvestment.ch.136-243-54-122.cpanel.site\"][uri\"/.git/config\"][unique_id\"aiYYBZgtGSiYF5yv4cu6oAAAAQk\"] show less	Port Scan Brute-Force Web App Attack

Showing 1 to 9 of 9 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇦🇲 217.113.30.141

🇬🇧 193.176.29.16

🇮🇹 188.152.238.126

🇹🇭 172.68.4.220

🇮🇹 57.131.50.125

🇮🇩 41.216.178.119

🇨🇴 190.242.109.42

🇺🇸 167.88.165.96

🇧🇷 131.255.177.118

🇿🇦 105.184.121.101

🇺🇸 104.37.185.2

🇳🇱 81.19.216.98

🇳🇱 45.148.10.183

🇩🇪 34.159.221.246

🇳🇱 195.178.110.30

🇨🇳 183.250.89.44

🇺🇸 137.184.194.95

🇦🇱 130.12.209.134

🇱🇰 124.43.10.224

🇸🇬 118.194.234.8