JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 34.104.216.120

34.104.216.120 was found in our database!

This IP was reported 35 times. Confidence of Abuse is 100%: ?

100%

ISP	Google LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS396982
Hostname(s)	120.216.104.34.bc.googleusercontent.com
Domain Name	google.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 34.104.216.120

Whois 34.104.216.120

IP Abuse Reports for 34.104.216.120:

This IP address has been reported a total of 35 times from 26 distinct sources. 34.104.216.120 was first reported on September 4th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 e.fierstra	2026-09-08 12:47:46 (1 week ago)	ModSecurity hits exceeded	Bad Web Bot Web App Attack
🇩🇪 XICTRON	2026-09-08 12:30:13 (1 week ago)	ModSecurity rule violation detected by Fail2Ban	Web App Attack
🇳🇱 debestelapp	2026-09-08 11:40:13 (1 week ago)		Web App Attack
🇬🇧 consul.to	2026-09-08 08:32:24 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 Rayulcifer	2026-09-07 08:15:34 (1 week ago)	34.104.216.120 - - [07/Sep/2026:03:15:33 -0500] "GET /.env.bak HTTP/1.1" 403 6743 "-" "crusader-work ... show more 34.104.216.120 - - [07/Sep/2026:03:15:33 -0500] "GET /.env.bak HTTP/1.1" 403 6743 "-" "crusader-worker/1.0" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇬🇧 consul.to	2026-09-06 02:35:27 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
Anonymous	2026-09-06 02:32:12 (1 week ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇦🇺 AWW-Admin	2026-09-06 02:26:55 (1 week ago)	(mod_security) mod_security triggered on hostname [redacted] 34.104.216.120 (JP/Japan/120.216.104.34 ... show more (mod_security) mod_security triggered on hostname [redacted] 34.104.216.120 (JP/Japan/120.216.104.34.bc.googleusercontent.com) show less	SQL Injection
🇮🇳 evicky2002	2026-09-06 00:02:40 (1 week ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
Anonymous	2026-09-05 23:06:02 (1 week ago)	Web App Attack	Brute-Force Exploited Host Web App Attack
Anonymous	2026-09-05 22:43:05 (1 week ago)	Bot / scanning and/or hacking attempts: GET /.env.dev HTTP/1.1, GET /.env.production HTTP/1.1, GET / ... show more Bot / scanning and/or hacking attempts: GET /.env.dev HTTP/1.1, GET /.env.production HTTP/1.1, GET /_ignition/health-check HTTP/1.1, GET /actuator/configprops HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, GET /.env.local HTTP/1.1, GET /actuator/env HTTP/1.1, GET /env HTTP/1.1, GET /crusader-404-probe HTTP/1.1, GET /.env HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env.example HTTP/1.1, GET /.env.prod HTTP/1.1 show less	Hacking Web App Attack
Anonymous	2026-09-05 07:20:10 (1 week ago)	\| Suspicious URL access.	Web App Attack Hacking SQL Injection
🇭🇺 kranem	2026-09-04 15:00:13 (1 week ago)	Triggered Cloudflare WAF from JP. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/1.1 (G ... show more Triggered Cloudflare WAF from JP. Action taken: BLOCK ASN: 396982 (Google LLC) Protocol: HTTP/1.1 (GET method) Endpoint: /.env/ Timestamp: 2026-09-04T14:04:38Z User-Agent: crusader-worker/1.0 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-04 14:15:20 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.104.216.120 (120.216.104.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.104.216.120 (120.216.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:15:15.792042 2026] [security2:error] [pid 1979:tid 1979] [client 34.104.216.120:36108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wordscount.biz"] [uri "/wp-config.php.bak"] [unique_id "aprSc8_H1hTyqFc3O4KY-wAAAGk"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-09-04 13:52:55 (1 week ago)	(mod_security) mod_security (id:210492) triggered by 34.104.216.120 (120.216.104.34.bc.googleusercon ... show more (mod_security) mod_security (id:210492) triggered by 34.104.216.120 (120.216.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 09:52:51.762060 2026] [security2:error] [pid 3074850:tid 3074890] [client 34.104.216.120:60442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ahmedalbanna.dubarch.com"] [uri "/.env.old"] [unique_id "aprNMwDE4i4QbWxJxPwmdwAAAEI"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 35 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 185.139.214.221

🇳🇱 158.94.211.70

🇻🇳 210.245.30.140

🇫🇮 147.185.133.39

🇮🇩 103.142.240.142

🇺🇸 66.132.172.214

🇭🇰 42.200.66.164

🇲🇦 196.92.7.246

🇳🇱 192.253.248.215

🇯🇵 152.32.202.95

🇨🇦 89.149.52.23

🇸🇪 88.80.20.49

🇷🇺 77.87.69.238

🇩🇪 69.5.169.139

🇺🇸 65.49.20.85

🇺🇸 63.250.36.183

🇩🇪 43.228.157.216

🇩🇿 41.111.227.10

🇷🇺 212.24.45.146

🇨🇦 209.50.187.6