JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.16.114.1

Activity Trending Down

Abuse confidence score ?

63% Elevated

59 reports

45 reporters · latest 1 month ago

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	1.114.16.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇺🇸 United States of America
City	Council Bluffs, Iowa

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 34.16.114.1

Export CSV

This IP address has been reported a total of 59 times from 45 distinct sources. 34.16.114.1 was first reported on September 15th 2026, and the most recent report was 1 month ago. In the last 60 days, the top reporter locations were: United States of America with 18 reports; Germany with 14 reports; Netherlands with 12 reports. The most common categories in these recent reports were: Web App Attack 44 times; Brute-Force 23 times; Bad Web Bot 20 times; Hacking 10 times; Port Scan 8 times; Other 4 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-16 07:07:25 (1 month ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Event ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Events=5; Hosts=incognet.io; Paths=/.aws/config,/.aws/credentials,/.env,/.git/HEAD,/.git/config; Country=US; ASN=396982 GOOGLE-CLOUD-PLATFORM show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 06:12:49 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.16.114.1 (1.114.16.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.16.114.1 (1.114.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 02:12:41.409678 2026] [security2:error] [pid 23255:tid 23255] [client 34.16.114.1:45694] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "melton.space"] [uri "/appearance/../../.env"] [unique_id "aqozWcfPut8ohd19QC1VRgAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 MaxSmartCode	2026-09-16 06:07:07 (1 month ago)	Credential brute-force attacks on webpage.	Brute-Force SSH
Anonymous	2026-09-16 06:04:26 (1 month ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-crawl-non_statics; Action=ban; Eve ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-crawl-non_statics; Action=ban; Events=44; Hosts=incognet.io; Paths=/.docker/config.json,/Dockerfile,/firebase-service-account.json,/secrets.yml,/service-account.json,/service_account.json; Country=US; ASN=396982 GOOGLE-CLOUD-PLATFORM show less	Bad Web Bot
🇮🇹 [email protected]	2026-09-16 05:54:28 (1 month ago)	34.16.114.1 - - [16/Sep/2026:02:50:43 +0200] "GET /.env?raw HTTP/2.0" 404 269 "-" "Mozilla/5.0 (comp ... show more 34.16.114.1 - - [16/Sep/2026:02:50:43 +0200] "GET /.env?raw HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" show less	Web App Attack Hacking
🇳🇱 ConsulHosting	2026-09-16 05:46:36 (1 month ago)	Excessive failed CAPTCHA attempts (CAPTCHA DoS)	Web App Attack
🇩🇪 netclix.gr	2026-09-16 05:32:42 (1 month ago)	(aggressive_scan) Aggressive Web Exploit Scan 34.16.114.1 (US/United States/1.114.16.34.bc.googleuse ... show more (aggressive_scan) Aggressive Web Exploit Scan 34.16.114.1 (US/United States/1.114.16.34.bc.googleusercontent.com): 5 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.16.114.1 - - [16/Sep/2026:08:32:30 +0300] "GET /app_dev.php HTTP/2.0" 404 808 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)" 34.16.114.1 - - [16/Sep/2026:08:32:31 +0300] "GET /info.php HTTP/2.0" 404 808 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 34.16.114.1 - - [16/Sep/2026:08:32:31 +0300] "GET /test.php HTTP/2.0" 404 808 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.16.114.1 - - [16/Sep/2026:08:32:31 +0300] "GET /pi.php HTTP/2.0" 404 808 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.16.114.1 - - [16/Sep/2026:08:32:31 +0300] "GET /i.php HTTP/2.0" 404 808 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" show less	Port Scan
🇬🇧 openstrike.co.uk	2026-09-16 05:14:10 (1 month ago)	173 attacks on password/key grabbing URLs, env grabbing URLs (type 2), PHP URLs, env grabbing URLs, ... show more 173 attacks on password/key grabbing URLs, env grabbing URLs (type 2), PHP URLs, env grabbing URLs, config grabbing URLs (type 2), directory traversals, VC URLs: GET /id_dsa HTTP/1.1 GET /proc/self/cmdline HTTP/1.1 POST /icecoder/lib/terminal-xhr.php HTTP/1.1 GET /.env.docker HTTP/1.1 GET /src/amplifyconfiguration.json HTTP/1.1 GET /..%2f..%2f.env HTTP/1.1 GET /.git/HEAD HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 larse99	2026-09-16 05:11:56 (1 month ago)	Detected Scanning / Hacking activity	Port Scan Hacking
🇩🇪 MarkGGN	2026-09-16 05:11:29 (1 month ago)	Web attack. 34.16.114.1 - - [16/Sep/2026:07:11:28 +0200] "GET /auth/login HTTP/2.0" 404 20 "-" "Mozi ... show more Web attack. 34.16.114.1 - - [16/Sep/2026:07:11:28 +0200] "GET /auth/login HTTP/2.0" 404 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 34.16.114.1 - - [16/Sep/2026:07:11:28 +0200] "GET /admin/login HTTP/2.0" 404 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" show less	Web App Attack
🇺🇸 TPI-Abuse	2026-09-16 05:09:04 (1 month ago)	(mod_security) mod_security (id:210492) triggered by 34.16.114.1 (1.114.16.34.bc.googleusercontent.c ... show more (mod_security) mod_security (id:210492) triggered by 34.16.114.1 (1.114.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 01:08:46.628872 2026] [security2:error] [pid 6761:tid 6761] [client 34.16.114.1:50566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "l3l4.com"] [uri "/__vite_rsc_findSourceMapURL"] [unique_id "aqokXjflKaP59n0tBoiSLAAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 koinkash.org	2026-09-16 05:03:20 (1 month ago)	They are fraudulent. Malicious threat actor requesting php file /document.php	Web App Attack
Anonymous	2026-09-16 05:00:35 (1 month ago)	IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-path-traversal-probing; Action=ban ... show more IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-path-traversal-probing; Action=ban; Events=4; Hosts=incognet.io; Paths=/@fs/../.env?raw??,/_nuxt/../.env,/media../.env,/static../.env; Country=US; ASN=396982 GOOGLE-CLOUD-PLATFORM show less	Port Scan Web App Attack
🇬🇧 Mendip_Defender	2026-09-16 04:35:18 (1 month ago)	34.16.114.1 - - [16/Sep/2026:05:35:32 +0100] "GET /admin HTTP/1.1" 404 6497 "-" "Mozilla/5.0 (Linux; ... show more 34.16.114.1 - - [16/Sep/2026:05:35:32 +0100] "GET /admin HTTP/1.1" 404 6497 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36" 34.16.114.1 - - [16/Sep/2026:05:35:32 +0100] "GET /admin/login HTTP/1.1" 404 6497 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36" 34.16.114.1 - - [16/Sep/2026:05:35:32 +0100] "GET /users/login HTTP/1.1" 404 6497 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36" ... show less	Hacking Web App Attack
Anonymous	2026-09-16 04:34:18 (1 month ago)	34.16.114.1 - - [16/Sep/2026:04:34:18 +0000] "GET /api/proc/self/environ HTTP/2.0" 404 64 "https:// ... show more 34.16.114.1 - - [16/Sep/2026:04:34:18 +0000] "GET /api/proc/self/environ HTTP/2.0" 404 64 "https://ivonne.ca/api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" "34.16.114.1" "-" ... show less	Web App Attack

Showing 1 to 15 of 59 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.104

🇨🇳 183.95.176.247

🇺🇸 136.70.163.30

🇬🇧 86.38.187.198

🇺🇸 20.69.93.76

🇧🇷 201.139.186.238

🇫🇷 185.194.178.46

🇮🇳 168.144.148.127

🇧🇩 163.61.17.80

🇪🇨 149.50.197.195

🇫🇮 147.185.133.162

🇫🇮 122.8.92.158

🇭🇰 118.193.47.76

🇮🇩 103.106.114.71

🇫🇷 85.217.140.14

🇵🇰 39.45.69.97

🇮🇩 210.79.142.203

🇹🇼 198.235.24.43

🇩🇪 195.182.16.183

🇿🇦 165.165.118.82