JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.97.118.244

34.97.118.244 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 75%: ?

75%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	244.118.97.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Osaka, Osaka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.97.118.244

Whois 34.97.118.244

IP Abuse Reports for 34.97.118.244:

This IP address has been reported a total of 18 times from 13 distinct sources. 34.97.118.244 was first reported on September 15th 2026, and the most recent report was 59 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-09-16 08:34:14 (59 minutes ago)	(mod_security) mod_security (id:210492) triggered by 34.97.118.244 (244.118.97.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.97.118.244 (244.118.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 04:34:09.665792 2026] [security2:error] [pid 22775:tid 22792] [client 34.97.118.244:51864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wicca-love-spells.com"] [uri "/.git/config"] [unique_id "aqpUgUcuXb4z6l3V_HCB6wAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-16 07:44:17 (1 hour ago)	[formsbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ... show more [formsbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.97.118.244 - - [16/Sep/2026:09:44:05 +0200] "GET /.git/config HTTP/1.1" 301 540 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇳🇱 Savvii	2026-09-16 05:13:23 (4 hours ago)	20 attempts against mh_ha-misbehave-ban on yeti	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-16 04:57:00 (4 hours ago)	Excessive multi-domain requests	Brute-Force
🇺🇸 ssssssssssssssssssssuper	2026-09-16 03:39:25 (5 hours ago)	34.97.118.244 - - [15/Sep/2026:23:39:24 -0400] "GET /.git/config HTTP/1.1" 404 15166 "-" "Mozilla/5. ... show more 34.97.118.244 - - [15/Sep/2026:23:39:24 -0400] "GET /.git/config HTTP/1.1" 404 15166 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.97.118.244 - - [15/Sep/2026:23:39:24 -0400] "GET /.env HTTP/1.1" 404 15166 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.97.118.244 - - [15/Sep/2026:23:39:25 -0400] "GET /.env.local HTTP/1.1" 404 15166 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" ... show less	Port Scan Hacking Bad Web Bot Web App Attack
🇩🇪 ger-stg-sifi1	2026-09-16 01:40:37 (7 hours ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 01:07:53 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.118.244 (244.118.97.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.97.118.244 (244.118.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 21:07:46.120132 2026] [security2:error] [pid 4529:tid 4529] [client 34.97.118.244:38312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whoore.com"] [uri "/.git/config"] [unique_id "aqnr4lbpIievd3MsKKylfAAAAAY"] show less	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-09-16 01:01:20 (8 hours ago)	Excessive 404/403 errors	Brute-Force
🇺🇸 TPI-Abuse	2026-09-16 00:47:57 (8 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.118.244 (244.118.97.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.97.118.244 (244.118.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:47:51.588101 2026] [security2:error] [pid 6217:tid 6217] [client 34.97.118.244:58906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whomakestherules.com"] [uri "/.git/config"] [unique_id "aqnnN-ftLVx4SZpRN5FaQwAAABs"] show less	Brute-Force Bad Web Bot Web App Attack
🇬🇧 consul.to	2026-09-16 00:01:33 (9 hours ago)	Web attack/malicious scanning detected	Web App Attack
🇫🇷 dynamix	2026-09-15 23:51:54 (9 hours ago)	Multiple WAF Violations	Web App Attack
Anonymous	2026-09-15 23:05:03 (10 hours ago)	Bot / scanning and/or hacking attempts: GET /.env.remote HTTP/1.1, POST / HTTP/1.1, GET /.env.test H ... show more Bot / scanning and/or hacking attempts: GET /.env.remote HTTP/1.1, POST / HTTP/1.1, GET /.env.test HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.sample HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.example HTTP/1.1 show less	Hacking Web App Attack
🇺🇸 robotstxt	2026-09-15 22:21:46 (11 hours ago)	34.97.118.244 - - [15/Sep/2026:22:20:43 +0000] "POST / HTTP/1.1" 403 71972 "-" "Mozilla/5.0 (Windows ... show more 34.97.118.244 - - [15/Sep/2026:22:20:43 +0000] "POST / HTTP/1.1" 403 71972 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.97.118.244" 34.97.118.244 - - [15/Sep/2026:22:20:44 +0000] "POST / HTTP/1.1" 403 71972 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.97.118.244" 34.97.118.244 - - [15/Sep/2026:22:20:46 +0000] "GET /.git/config HTTP/1.1" 403 65344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.97.118.244" 34.97.118.244 - - [15/Sep/2026:22:20:51 +0000] "GET /.env HTTP/1.1" 403 65344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.97.118.244" 34.97.118.244 - - [15/Sep/2026:22:20:53 +0000] "GET /.env.local HTTP/1.1" 403 65344 "-" "Mozilla/5.0 (Windows NT 10 ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-15 20:17:38 (13 hours ago)	(mod_security) mod_security (id:210492) triggered by 34.97.118.244 (244.118.97.34.bc.googleuserconte ... show more (mod_security) mod_security (id:210492) triggered by 34.97.118.244 (244.118.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:17:33.784070 2026] [security2:error] [pid 20938:tid 20938] [client 34.97.118.244:57192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whodatnation.com"] [uri "/.git/config"] [unique_id "aqmn3YQj6mgnV_G6lKJCVgAAAAk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇭 leo1305	2026-09-15 19:19:39 (14 hours ago)	CrowdSec detection \| scenario: http-sensitive-files	Web App Attack Exploited Host

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 221.159.21.170

🇧🇷 177.23.67.225

🇷🇺 176.214.48.230

🇨🇦 85.217.149.60

🇪🇨 45.236.150.75

🇮🇳 45.40.57.172

🇵🇰 43.230.92.43

🇿🇦 4.168.224.83

🇮🇩 210.87.97.90

🇧🇪 198.235.24.152

🇹🇳 197.5.145.150

🇦🇺 180.233.125.213

🇫🇷 169.40.142.253

🇫🇷 109.123.251.251

🇺🇸 72.80.109.32

🇮🇳 59.185.230.105

🇵🇭 49.150.152.106

🇫🇮 46.62.236.110

🇳🇱 45.156.128.127

🇨🇳 39.164.94.190